EX200 Quick Quiz — 10 Questions

Question 1

A system administrator needs to find all regular files larger than 10MB in /var/log. Which find command should they use?

Accepted Answer

find /var/log -type f -size +10M. Option D is correct because it uses `-type f` to select only regular files and `-size +10M` to match files larger than 10 megabytes. The `+` prefix in the `-size` test means 'greater than', which is the correct syntax for finding files exceeding a given size.

Answer

find /var/log -type f -size -10M

Answer

find /var/log -type d -size +10M

Answer

find /var/log -type f -size 10M

Question 2

A user needs to view the last 15 lines of a log file that is constantly being updated. Which command should they use?

Accepted Answer

tail -n 15 /var/log/messages. Option A is correct because the `tail -n 15 /var/log/messages` command displays the last 15 lines of the specified log file without following it. This meets the requirement to view the last 15 lines of a file that is constantly being updated, as it provides a static snapshot of the most recent entries.

Answer

tail -f /var/log/messages

Answer

cat /var/log/messages

Answer

head -15 /var/log/messages

Question 3

Which TWO statements about systemd journal and rsyslog are correct?

Accepted Answer

The journal stores logs in a structured binary format, allowing filtering by fields like _UID or _SYSTEMD_UNIT.. Option D is correct because the systemd journal stores log data in a structured binary format (using the journald protocol), which allows filtering by specific fields such as _UID, _SYSTEMD_UNIT, or _COMM. This enables precise queries via journalctl, unlike plain-text log files.

Answer

rsyslog reads log messages directly from the journal files in /var/log/journal.

Answer

The command 'journalctl --list-boots' lists only the current boot's journal entries.

Answer

The command 'journalctl -u sshd.service' outputs the same as 'tail -f /var/log/messages' for SSH logs.

Question 4

A system administrator needs to ensure that a specific process continues to run even if it crashes. The process is started by a systemd service unit. Which approach ensures the process is automatically restarted by systemd, with a delay of 30 seconds after each crash, and does not count restarts towards the failure limit?

Accepted Answer

Restart=always, RestartSec=30, StartLimitIntervalSec=0, StartLimitBurst=0. Option A is correct because it combines `Restart=always` to restart the process unconditionally, `RestartSec=30` to introduce a 30-second delay between restarts, and `StartLimitIntervalSec=0` with `StartLimitBurst=0` to disable the start rate limiting entirely. This ensures the service restarts indefinitely after each crash without ever being considered as having failed, which matches the requirement exactly.

Answer

Restart=on-failure and RestartSec=30

Answer

Restart=always, RestartSec=30, StartLimitIntervalSec=0

Answer

Restart=always and RestartSec=30

Question 5

A system administrator needs to ensure that a web server running Apache httpd starts automatically after a system reboot. Which command should the administrator use to enable the httpd service?

Accepted Answer

systemctl enable httpd. Option D is correct because `systemctl enable httpd` creates the necessary symlinks in the systemd unit configuration directories (e.g., `/etc/systemd/system/multi-user.target.wants/`) to ensure the httpd service starts automatically at boot. This is the standard method for enabling a service in a Red Hat Enterprise Linux 8/9 environment using systemd.

Answer

systemctl daemon-reload

Answer

systemctl start httpd

Answer

systemctl reenable httpd

Question 6

Refer to the exhibit. The administrator wants to create a single file system that spans the entire 20 GB disk /dev/sdb. All data on the disk can be discarded. Which steps are required to create an XFS file system on the whole disk?

Accepted Answer

Use fdisk to delete all partitions, create a new partition spanning the whole disk, then run mkfs.xfs on the new partition.. Option D is correct because creating a file system directly on a whole block device (like /dev/sdb) without a partition table is not recommended and may cause issues with system tools and boot loaders. The proper procedure is to first create a single partition spanning the entire disk using fdisk (or parted), then format that partition (e.g., /dev/sdb1) with mkfs.xfs. This ensures a valid partition table is present, which is expected by most Linux utilities and the kernel.

Answer

Run mkfs.xfs /dev/sdb directly; it will overwrite the partition table and create a file system.

Answer

Use pvcreate /dev/sdb, then vgcreate, lvcreate, and format the logical volume with mkfs.xfs.

Answer

Run mkfs.xfs -f /dev/sdb; it will force creation of XFS on the whole disk without partition table.

Question 7

A system administrator needs to ensure that the user 'jdoe' cannot log in via SSH but can still use other services like FTP. Which approach should the administrator take?

Accepted Answer

Change the user's shell to /sbin/nologin. Option D is correct because changing the user's shell to /sbin/nologin prevents interactive login via SSH (which requires a valid shell listed in /etc/shells) while still allowing non-interactive services like FTP, which typically do not check the user's shell. This approach specifically blocks SSH access without locking the account or affecting other authentication methods.

Answer

Lock the user account with 'usermod -L jdoe'

Answer

Delete the user's password with 'passwd -d jdoe'

Answer

Remove the user's home directory

Question 8

Refer to the exhibit. A web server runs as user 'apache'. The directory /var/www/html is owned by root:root with permissions 755. The administrator wants to allow the user 'webuser' to upload files to /var/www/html via SFTP. Which step is necessary to achieve this?

Accepted Answer

Change group ownership of /var/www/html to a group that includes webuser and add group write permission. Option B is correct because the directory /var/www/html is owned by root:root with permissions 755, meaning only root can write. To allow webuser to upload files via SFTP, the directory needs group write permission. Changing the group ownership to a group that includes webuser and adding group write permission (e.g., chgrp webgroup /var/www/html && chmod g+w /var/www/html) grants the necessary write access without altering ownership or security contexts.

Answer

Change webuser's shell to /bin/bash to allow SFTP login

Answer

Change the SELinux context of /var/www/html to httpd_sys_rw_content_t

Answer

Set an ACL on /var/www/html to grant webuser write access

Question 9

A container named 'web1' was created and ran briefly before exiting with status 0. The administrator needs to restart it and attach to the running container's console. Which command should be used?

Accepted Answer

podman start web1 && podman attach web1. Option D is correct because `podman start web1` restarts the existing container that exited with status 0, and `podman attach web1` connects the current terminal to the container's main process console. The `&&` ensures the attach runs only after the container is successfully started, allowing the administrator to interact with the running container's console.

Answer

podman run --name web1 -it registry.access.redhat.com/ubi8/httpd-24

Answer

podman start web1

Answer

podman restart web1 && podman attach web1

Question 10

Put the steps to configure a cron job that runs a script every day at 2:30 AM in the correct order.