CCNA System Management Questions

renice adjusts the nice value of an already-running process, and +10 raises it, lowering scheduling priority so the process yields CPU to others. The -p flag targets the given PID, satisfying the requirement to make the busy process nicer.

The fstab file uses six whitespace-separated fields in this exact order: the block device or UUID, the mount point directory, the filesystem type (xfs here), the comma-separated mount options, the dump backup flag, and the fsck pass number. Writing them in this sequence lets systemd's mount units parse and mount /dev/sdb1 at /data on every boot.

`tail -10 syslog` reads from the end of the file and prints exactly the final ten lines, satisfying the requirement to view the last 10 lines of `syslog`. Unlike `head`, which counts from the start, `tail` anchors to the file's end, making it the precise tool for recent log entries.

Setting the default to graphical.target pulls in multi-user.target plus the display manager and graphical session units, satisfying the stem's requirement to boot into a graphical environment rather than the command-line interface. systemctl set-default graphical.target makes this persistent across reboots, resolving the boot issue.

The -r flag recurses through every file under /var/log, -i matches 'ERROR' case-insensitively, and -n prefixes each match with its line number. Together these satisfy all three requirements: recursive search, case-insensitive matching, and printed line numbers.

The `-i` flag makes grep match case-insensitively, so lines containing 'error', 'Error' or 'ERROR' are all returned. This directly satisfies the stem's requirement to search for the pattern 'ERROR' while ignoring case, rather than matching only uppercase occurrences.

After= establishes ordering so reportgen starts only once dbengine has been activated, and Requires= creates a hard dependency so that if dbengine is stopped or fails, reportgen is also stopped. Together they express both the sequence and the lifecycle coupling the administrator described for these two units.

The `s` in the owner execute position denotes SUID, satisfying the stem's `-rwsr-xr-x` string. When executed, the process runs with the file owner's effective UID rather than the invoking user's, granting elevated privileges. SGID would instead appear in the group execute position, and the sticky bit as `t` on others.

The -s flag instructs ln to create a symbolic link rather than a hard link, and argument order matters: the target original.txt precedes the new link name link.txt. This satisfies the requirement for a symlink pointing to original.txt.

dmesg displays the kernel ring buffer, which contains messages from the kernel, including hardware detection, driver initialization, and errors. This is the primary tool for diagnosing hardware issues at the kernel level. It provides detailed information about devices, interrupts, and other low-level events, making it ideal for the administrator's task.

head outputs the beginning of a file, and -n 15 limits that output to exactly 15 lines, directly satisfying the requirement to view the first 15 lines. tail would show the end, and cat would dump the entire large log.

The -s flag collapses output to a single summary total for the directory, while -h renders sizes in human-readable units. Together they report total disk usage for /path and everything beneath it, satisfying the requirement to gather usage across the directory and its subdirectories.

This command creates a symbolic link from the systemd unit file in /etc/systemd/system to the appropriate target's .wants directory, ensuring the service starts at boot. It does not start the service immediately, but it ensures it will be started on subsequent boots. This is the correct way to configure automatic startup.

`apt update` refreshes the local package index from the repositories configured in `/etc/apt/sources.list`, so the system knows which upgraded versions are available. It satisfies the stem's "update the package cache" requirement, and must run before any upgrade command such as `apt upgrade` or `apt full-upgrade`.

`systemctl enable` creates the symlinks under the systemd unit's `Wanted` directory, wiring the service into the boot target so systemd starts it automatically on every subsequent boot. It satisfies the stem's requirement for persistent automatic startup, unlike `start`, which only launches the unit for the current session.

journalctl -u webapp.service displays all journal entries associated with that specific unit, including stdout/stderr from the service and systemd messages about its start attempts. This is a primary tool for diagnosing service failures, as it shows the exact error output and exit codes. It directly addresses the need for additional diagnostic information beyond the basic status output.

zgrep decompresses the file in memory and searches it for a pattern, printing matching lines to standard output. This lets the administrator view relevant compressed content without extracting the archive first, satisfying the viewing requirement.

setfacl -x removes the specified ACL entry only, leaving other entries intact. Targeting u:john deletes just john's entry, satisfying the requirement to remove that single entry without disturbing the remaining access ACL or default ACL entries on the file.

chmod 640 sets owner read and write (6), group read only (4), and no permissions for others (0). The octal digits map directly onto the required owner, group and other access, satisfying the stated permission set.

The findmnt --verify command checks the syntax of /etc/fstab and other mount configuration files, and verifies that the entries are valid and can be mounted, without actually mounting them. It reports errors and warnings, making it ideal for troubleshooting a suspected incorrect fstab entry that prevents boot.

`less` reads the file lazily and renders it in a scrollable pager, displaying one screenful at a time while allowing forward and backward navigation without loading the whole file into memory. This directly satisfies the requirement to view file contents page by page, unlike `cat`, which dumps everything at once.

`systemctl enable service` creates the symbolic links in the systemd unit directories that cause the service to be pulled into the boot transaction, satisfying the requirement that it start automatically at boot. It does not start the unit immediately, unlike `systemctl start`, which affects only the current session.

nohup makes the process immune to SIGHUP, so it survives the terminal hangup when the user logs out; the trailing & backgrounds it so control returns immediately. Together they satisfy the requirement that the command keep running after logout.

`ps aux` lists every process on the system, not just the invoking user's, satisfying the requirement to include other users' processes. The `a` flag selects processes from all terminals, `u` adds user-oriented detail, and `x` includes processes without a controlling terminal, while the command column shows full command lines.

The -u flag filters journal entries to the sshd unit, while -n 20 limits output to the most recent 20 lines. Together they satisfy the requirement to view the last 20 journal lines for that specific service.

The leading 4 sets the SUID bit, so the program runs with the file owner's privileges rather than the invoking user's. The remaining 755 grants rwx to the owner and r-x to group and others, matching the octal digits exactly. This satisfies the stem's requirement to interpret chmod 4755 correctly.

The -i flag edits the file in place, while the g suffix replaces every occurrence of foo with bar on each line rather than only the first. This satisfies the requirement to change all matches and save changes directly to the configuration file.

setfacl -m invokes modify mode, and the entry u:jdoe:r adds an ACL granting user jdoe read permission on the file without altering the existing owner, group or other bits. This directly satisfies the requirement to add a read ACL entry for that named user.

/bin holds essential user command binaries required for booting and single-user repair, such as ls, cp and sh. It is distinct from /sbin, which holds system administration binaries, and /usr/bin, which holds non-essential user commands.

systemctl status httpd reports whether the unit is active, inactive or failed, and systemctl start httpd launches it if inactive. This pairing satisfies the requirement to check current state before conditionally starting the service, using systemd's native unit management.

The nofail option tells systemd that the mount is not required for boot. If the device is missing or the mount fails, the boot process continues without entering emergency mode. This directly addresses the requirement to avoid emergency mode while still attempting the mount.

The `-size +100M` predicate filters on file size in mebibytes, while `-name '*.log'` matches the extension, and the starting point `.` recurses the current directory tree. Both constraints from the stem are satisfied in a single pass, with no piping required.

`zcat` streams decompressed data from gzip-compressed files straight to standard output, leaving the original archive untouched on disk. This satisfies the stem's constraint of reading a compressed log's contents without decompressing it, since no extracted file is written. It also handles `.gz` logs directly, unlike `cat`, which would emit raw binary.

less displays file contents one screenful at a time, supporting forward and backward scrolling plus in-page searching. It satisfies the paging requirement directly, unlike cat, which dumps the entire file to standard output without pagination.

/bin holds essential user binaries such as ls and cp, required for single-user mode and all users. The FHS reserves /sbin for system administration binaries and /usr/bin for non-essential user commands, so /bin uniquely satisfies the stem's requirement for essential commands available to everyone.

systemctl set-default multi-user.target writes the default target symlink, so systemd boots to a text console on subsequent starts. This directly satisfies the requirement to change the default boot target persistently, unlike isolate, which only affects the running session.

The multi-user.target starts systemd's non-graphical multi-user mode, activating networking and allowing multiple concurrent logins without a display manager. It satisfies the stem's requirement for network and multi-user support from a limited console, unlike graphical.target, which additionally requires a graphical session.

setfacl -m g:developers:rw sets an ACL entry for the 'developers' group, granting read and write access. This directly fulfills the requirement and is correct.

The XFS driver recognizes uquota and gquota as the correct mount options to activate user and group quota accounting. Placing them in the fourth fstab field ensures the filesystem mounts with quota accounting enabled at boot. After mounting, the administrator still must run xfs_quota to assign limits, but accounting itself is correctly enabled by these options combined with defaults.

mkfs -t ext4 creates the filesystem, mount attaches it at /mnt/data, and the /etc/fstab entry with dump 0 and pass 2 makes the mount persistent across reboots. The pass value 2 suits a non-root filesystem.

Hard links share the same inode as the original file, so both directory entries reference identical metadata and data blocks. No separate inode exists to distinguish them, satisfying the stem's requirement that the link is indistinguishable from the original. Deleting either name leaves the other fully functional until the link count reaches zero.

The -size +100M predicate matches regular files exceeding 100 mebibytes, and -type f restricts results to files rather than directories. This satisfies the stem's requirement to locate files larger than 100MB within /var using a single find invocation.

SIGKILL (signal 9) cannot be caught, blocked, or ignored by the process, so the kernel terminates PID 1234 immediately without allowing cleanup — satisfying the stem's demand for the most forceful signal. Weaker signals such as SIGTERM (15) can be trapped or deferred, which would not guarantee immediate termination.

top reads /proc to display live per-process CPU, memory and load statistics, refreshing periodically. It satisfies the real-time process and resource monitoring requirement, complementing htop, which offers the same underlying data with an enhanced interactive interface.

pstree reads the process table and renders parent-child relationships as an indented tree, showing the hierarchy from init or the specified PID downwards. This directly satisfies the requirement to display the current process hierarchy in tree format.

du reports disk usage per directory, and the -h flag converts block counts into human-readable units such as KB, MB and GB. Running it in the current directory lists each subdirectory's consumption, matching the requirement for readable per-directory usage figures.

The `du -h` command satisfies the human-readable requirement by appending the `-h` flag, which converts raw byte counts into scaled units such as KB, MB and GB. Unlike `df`, which reports filesystem-level capacity, `du` measures actual disk usage of files and directories, matching the stem precisely.

The recursive 750 sets owner rwx, group rx and no others permissions across /data and its contents, while the setgid bit forces new files to inherit the staff group rather than the creator's primary group, meeting the inheritance constraint.

ln -s creates a symbolic link, with the target 'original' first and the new link name 'link' second. The -s flag distinguishes it from a hard link, satisfying the requirement for a symlink in the home directory.

useradd creates a new user. The -m option creates the home directory (typically /home/jdoe) and copies skeleton files. The -s option sets the login shell to /bin/bash. This command creates the account with the specified home directory and shell, meeting all requirements.

Using `setfacl -m u:username:rw file` writes a POSIX access control list entry granting that named user read and write permission, satisfying the stem's constraint of avoiding group changes or group membership edits. Standard Unix mode bits cannot grant per-user rights without altering owner, group or other classes, so ACLs are the only mechanism here.

`chmod u+s file` sets the setuid bit on the file's owner-execute position, satisfying the stem's requirement to add setuid to a 644 file. The symbolic `u+s` form targets only the user (owner) permission triad, leaving the existing read and write bits untouched, which is precisely the operation requested.

The `-i` flag makes sed edit /etc/hosts in place, satisfying the requirement to save changes directly to the file. The `g` suffix replaces every occurrence of 'oldhost' on each line, not merely the first, meeting the "all occurrences" constraint without redirection or a temporary file.

hostnamectl set-hostname updates the system hostname and writes it to /etc/hostname, ensuring persistence across reboots. It is the recommended method on systemd-based distributions. This command also updates the transient hostname immediately, so the change takes effect without a reboot.

Creating a file requires write permission on the containing directory, not on the file itself. The group permission set is r-x, granting read and execute (traverse) but withholding write. Adding group write (rwx) satisfies the stem's constraint, allowing the 'dev' group member to create entries within that directory.

setfacl with -m modifies the ACL, and u:john:rw grants john read and write. Since the file has no existing ACLs, this creates the access ACL entry directly, satisfying the requirement without altering the traditional owner, group or other permission bits.