EX200 Multiple Select — 60 Questions

Question 1

Which TWO statements about systemd journal and rsyslog are correct?

Accepted Answer

The journal stores logs in a structured binary format, allowing filtering by fields like _UID or _SYSTEMD_UNIT.. Option D is correct because the systemd journal stores log data in a structured binary format (using the journald protocol), which allows filtering by specific fields such as _UID, _SYSTEMD_UNIT, or _COMM. This enables precise queries via journalctl, unlike plain-text log files.

Answer

rsyslog reads log messages directly from the journal files in /var/log/journal.

Answer

The command 'journalctl --list-boots' lists only the current boot's journal entries.

Answer

The command 'journalctl -u sshd.service' outputs the same as 'tail -f /var/log/messages' for SSH logs.

Question 2

Which TWO commands can be used to create a filesystem on a new partition? (Choose two.)

Accepted Answer

mkfs /dev/sdb1. B is correct because `mkfs` is the generic command to create a filesystem on a partition. D is correct because `mkfs.ext4` is a specific variant of `mkfs` that creates an ext4 filesystem. Both commands write the filesystem metadata to the partition, making it ready for mounting.

Answer

mount /dev/sdb1 /mnt

Answer

parted /dev/sdb

Answer

fdisk /dev/sdb

Question 3

Which TWO commands can be used to view the contents of a compressed file named 'archive.tar.gz' without extracting it?

Accepted Answer

tar -tzf archive.tar.gz. Option B is correct because `tar -tzf archive.tar.gz` lists the contents of a gzip-compressed tar archive without extracting it. The `-t` option tells tar to list the table of contents, `-z` filters the archive through gzip decompression, and `-f` specifies the archive file. This command reads the archive metadata directly without writing any files to disk.

Answer

gzip -d archive.tar.gz

Answer

gunzip -c archive.tar.gz

Answer

tar -xf archive.tar.gz

Question 4

Which THREE options are valid when creating a new partition with the 'parted' command? (Choose three.)

Accepted Answer

Setting the partition's bootable flag. Option B is correct because the 'parted' command can set the bootable flag on a partition using the 'set' command (e.g., 'set 1 boot on'). This flag is used by legacy BIOS bootloaders to identify the active partition, and it is a standard operation in MBR and GPT partition tables.

Answer

Setting the partition's UUID

Answer

Mounting the partition to a directory

Question 5

Which TWO are correct ways to check the SELinux context of a file named 'test.txt'? (Choose exactly two.)

Accepted Answer

ls -Z test.txt. Option A is correct because `ls -Z` displays the SELinux security context of files, including user, role, type, and sensitivity level. The `-Z` option is specifically designed to show SELinux context information for files and processes.

Answer

ls -l test.txt

Answer

sestatus

Answer

getenforce

Question 6

Which TWO statements are true about systemd services in RHEL 9? (Choose exactly two.)

Accepted Answer

'systemctl list-units --type=service' lists all service units.. Option A is correct because 'systemctl list-units --type=service' filters the output to show only service units, which are the primary unit type for managing daemons and background processes. Option C is correct because 'systemctl status' displays the current state of a unit, including whether it is active (running), inactive (stopped), or in another state like failed.

Answer

'systemctl enable' starts the service immediately.

Answer

'systemctl mask' disables a service but allows manual start.

Answer

'systemctl disable' stops the service immediately.

Question 7

Which THREE factors determine whether a local user can SSH into a Red Hat Enterprise Linux 9 system? (Choose three.)

Accepted Answer

The user's shell is listed in /etc/shells.. Option C is correct because SSHd validates that the user's login shell is listed in /etc/shells before allowing authentication. If the shell is not present in /etc/shells (e.g., /sbin/nologin or a custom script), SSHd will deny the connection, even if the user has valid credentials. This check is controlled by the 'AllowUsers' and 'DenyUsers' directives but is a fundamental security measure to prevent users with non-standard shells from gaining interactive access.

Answer

The /etc/nologin file exists.

Answer

The user has sudo privileges.

Question 8

Which THREE of the following practices are recommended when creating simple shell scripts in a Red Hat Enterprise Linux environment to ensure reliability, security, and maintainability?

Accepted Answer

Quote variables when used in commands, e.g., "$file" instead of $file.. Option B is correct because quoting variables (e.g., "$file") prevents word splitting and glob expansion, which can cause commands to operate on unexpected arguments or filenames with spaces. This is a fundamental shell scripting best practice that directly improves reliability and security by preserving the intended value of the variable.

Answer

Use #!/bin/sh for compatibility, even if bash-specific features are needed.

Answer

Always run scripts by invoking the interpreter directly (e.g., bash script.sh) instead of making them executable.

Question 9

Which TWO commands can be used to display SELinux contexts of files? (Choose two.)

Accepted Answer

stat -c %C. The `stat -c %C` command displays the SELinux security context of a file by using the `%C` format specifier, which outputs the security context string. The `ls -Z` command also shows SELinux contexts for files in a directory listing, with the `-Z` flag specifically requesting security context information. Both commands are standard tools for viewing SELinux labels on files.

Answer

chcon -l

Answer

id -Z

Answer

getenforce

Question 10

Which THREE actions are required to enable a non-root user to run containers using Podman on Red Hat Enterprise Linux 8?

Accepted Answer

Ensure the user has a running systemd user instance (loginctl enable-linger).. Option A is correct because `loginctl enable-linger` ensures that the user's systemd user instance starts at boot and remains running after the user logs out. This is required for Podman to manage containers using systemd user services, such as auto-starting containers with `podman generate systemd`.

Answer

Add the user to the 'docker' group to access the Docker socket.

Answer

Grant the user sudo privileges to run podman commands.

Question 11

Which TWO statements are true regarding container images and containers in Podman?

Accepted Answer

A container is a running or stopped instance of an image with a writable layer.. Option B is correct because a container in Podman is an instantiation of an image that adds a writable layer on top of the image's read-only layers. This writable layer persists changes made during the container's runtime, even after the container is stopped, unless explicitly removed.

Answer

A container can only be created from an image that is stored locally.

Answer

When a container is stopped, its writable layer is automatically removed.

Answer

A container image must be built using a Dockerfile.

Question 12

Which THREE commands can be used to check the disk space usage of the /home partition?

Accepted Answer

df -h /home. Option A is correct because `df -h /home` displays the disk space usage of the /home filesystem in human-readable format (e.g., GB, MB). The `df` command reports the total, used, and available space for mounted filesystems, making it the standard tool for checking partition-level disk usage.

Answer

fdisk -l /dev/sda

Answer

parted /dev/sda print

Question 13

Which TWO commands can be used to check the UUID of a filesystem on /dev/sda1?

Accepted Answer

lsblk -o UUID /dev/sda1. The `blkid` command directly queries the UUID of a block device from the libblkid cache or by reading the filesystem superblock, and `lsblk -o UUID` filters the lsblk output to show only the UUID column for the specified device. Both commands reliably retrieve the UUID of /dev/sda1.

Answer

e2label /dev/sda1

Answer

findmnt /dev/sda1

Answer

file -s /dev/sda1

Question 14

Which THREE are valid methods to configure network bonding in RHEL 9? (Choose exactly three.)

Accepted Answer

Using a configuration file in /etc/NetworkManager/system-connections/.. Option A is correct because in RHEL 9, NetworkManager stores connection profiles in `/etc/NetworkManager/system-connections/`. You can manually create a bond configuration file in this directory with the proper key-value pairs (e.g., `type=bond`, `bond.options=mode=1,miimon=100`), and NetworkManager will read it on restart or reload. This is a valid method for configuring network bonding.

Answer

Using the teamd service.

Answer

Editing /etc/sysconfig/network-scripts/ifcfg-bond0 directly.

Question 15

Which TWO commands can change the primary group of an existing user?

Accepted Answer

usermod -aG. The `usermod -g` command (not `-aG`, which adds supplementary groups) changes the primary group of an existing user. The `gpasswd -a` command adds a user to a group, but it does not change the primary group; it only affects supplementary group membership. Therefore, neither option A nor B is correct for changing the primary group. The correct commands are `usermod -g` (to set the primary group) and `usermod -G` (to set supplementary groups, but not the primary).

Answer

vigr

Answer

groupmems -a

Answer

useradd -G

Question 16

A system administrator needs to configure a firewall using firewalld to allow incoming HTTPS traffic and deny incoming SSH traffic from a specific source IP 192.168.1.100. Which two commands should be run? (Choose two.)

Accepted Answer

firewall-cmd --add-service=https --permanent. Option C is correct because `firewall-cmd --add-service=https --permanent` adds the HTTPS service (TCP port 443) to the permanent firewall configuration, which is required to allow incoming HTTPS traffic persistently across reboots. The `--permanent` flag ensures the rule survives a reload or restart, and the `--add-service` option uses predefined service definitions from firewalld to simplify rule creation.

Answer

firewall-cmd --runtime-to-permanent

Answer

firewall-cmd --add-rich-rule='rule family=ipv4 source address=192.168.1.100 service name=ssh reject' --permanent

Answer

firewall-cmd --add-service=http --permanent

Question 17

Which TWO statements about Logical Volume Manager (LVM) metadata are correct?

Accepted Answer

The 'pvck' command can be used to check physical volume metadata.. Option A is correct because the 'pvck' command is specifically designed to check the metadata of physical volumes in LVM. It verifies the consistency and integrity of the PV metadata, including the volume group descriptor area (VGDA), without making changes. This is a diagnostic tool used before attempting repairs.

Answer

The 'pvs' command can repair corrupted metadata.

Answer

The 'fsck' tool is used to verify LVM metadata.

Answer

LVM metadata is stored in /etc/lvm directory.

Question 18

Which TWO commands can be used to add the user 'alice' to the supplementary group 'developers'?

Accepted Answer

gpasswd -a alice developers. Option A is correct because `gpasswd -a alice developers` adds the user 'alice' to the supplementary group 'developers' by appending her to the group's member list in /etc/group. Option C is correct because `usermod -aG developers alice` appends 'alice' to the supplementary group 'developers' without removing her from other supplementary groups, which is the intended behavior for adding a user to an additional group.

Answer

useradd -g developers alice

Answer

groupmod -a alice developers

Answer

usermod -g developers alice

Question 19

A containerized application requires persistent storage and must be able to run with SELinux enforcing. The administrator runs a container with the volume mount: `podman run -v /host/data:/container/data:Z myimage`. Which TWO statements are true about this configuration?

Accepted Answer

The volume mount persists after the container is removed.. Option C is correct because the `-v` flag with a bind mount persists the data in `/host/data` on the host filesystem even after the container is removed. The `:Z` flag tells Podman to relabel the host directory with a container-specific SELinux context, which is why Option E is also correct. This ensures the container can write to the mount point even when SELinux is enforcing.

Answer

The SELinux context of files in /host/data remains unchanged.

Answer

The /host/data directory is created automatically if it does not exist.

Answer

The container cannot write to /container/data if SELinux is enforcing.

Question 20

A system administrator needs to ensure that data written to a container's `/var/lib/mysql` directory persists after the container is removed. Which TWO methods accomplish this requirement?

Accepted Answer

Create a named volume with `podman volume create` and mount it.. Options B and E are correct. Mounting a host directory (B) and using a named volume (E) both persist data outside the container's writable layer. Option A is incorrect because --rm removes the container and its anonymous volumes. Option C is incorrect because --read-only makes the filesystem read-only, preventing writes. Option D is incorrect because --tmpfs creates a temporary in-memory filesystem that is lost when the container stops.

Answer

Use the `--read-only` flag.

Answer

Use the `--tmpfs` flag.

Answer

Use the `--rm` flag when running the container.