EX294 SELinux context Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Create directory, set SELinux context, verify context, configure Apache, restart and test

  Why this is correct

  This is the correct order because you first create the directory, then set its SELinux context using semanage and restorecon, verify the context, configure Apache to use it, and finally restart Apache and test to ensure SELinux allows access.

• ✗

  Create directory, configure Apache, set SELinux context, verify context, restart and test

  Why it's wrong here

  This is incorrect because Apache is configured before setting the SELinux context. If Apache starts or is restarted before the context is set, it may fail or be denied access, and the context setting after configuration won't immediately affect Apache without a restart.

• ✗

  Set SELinux context, create directory, verify context, configure Apache, restart and test

  Why it's wrong here

  This is incorrect because you cannot set the SELinux context on a directory that does not exist yet. The semanage command requires the path to exist (or use a wildcard), but the restorecon command will fail if the directory does not exist. The order should be create first, then set context.

• ✗

  Create directory, verify context, set SELinux context, configure Apache, restart and test

  Why it's wrong here

  This is incorrect because verifying the context before setting it is pointless; the directory will have a default context. The context must be set after creation, then verified to confirm correctness, but the order here has verification before setting, which is logically wrong.

Go deeper

Related to this question