Unit 5: SELinux and Advanced Storage Management - Practice Quiz

1 What is the main purpose of SELinux?

2 Which command displays the current SELinux operating mode?

3 Which SELinux mode logs policy violations but does not block them?

4 Which command temporarily changes SELinux to permissive mode?

5 Which file is commonly edited to make an SELinux mode change persistent?

6 Which command option displays SELinux contexts when listing files?

7 Which command restores the default SELinux context of a file?

8 Which command is used to define a persistent SELinux file-context rule?

9 What do SELinux booleans provide?

10 Which command makes an SELinux boolean change persistent?

11 Which log file commonly contains SELinux access-denial messages?

12 Which command can search the audit log for recent SELinux AVC messages?

13 Which command lists block devices such as disks and partitions?

14 Which command creates an XFS file system on a partition?

15 Which file defines file systems that should be mounted persistently?

16 Which command activates a prepared swap device?

17 Which command creates a new LVM logical volume?

18 Which command extends an existing LVM logical volume?

19 In Stratis, what is created from one or more block devices?

20 What is the primary benefit of VDO deduplication?

21 A web server process is running in the httpd_t domain. Which SELinux mechanism primarily determines whether it may read a file labeled user_home_t?

22 Which command displays the current SELinux mode as a single value such as Enforcing, Permissive, or Disabled?

23 An administrator needs to troubleshoot an SELinux denial without enforcing policy decisions until the next reboot. Which command should be used?

24 SELinux must start in permissive mode after every reboot while continuing to label files and log denials. Which setting should be placed in /etc/selinux/config?

25 Web content stored under /srv/site must retain the httpd_sys_content_t type after a full filesystem relabel. Which command defines the persistent mapping?

26 After defining a persistent context rule for /data/app, which command applies the expected SELinux labels recursively to the existing files?

27 An administrator uses chcon to change a file's SELinux type. Why might the change disappear after running restorecon?

28 A web application must connect to a remote database, and SELinux is blocking the connection. Which command enables the relevant boolean persistently?

29 Which command lists SELinux booleans and includes a brief description of what each boolean controls?

30 A service works in permissive mode but fails in enforcing mode. Which command is most appropriate for finding recent SELinux AVC denial records?

31 An AVC denial shows that Apache is trying to read a web file labeled default_t. What is the most appropriate first corrective action?

32 Before repartitioning a newly attached disk, an administrator wants to view block devices, filesystem types, UUIDs, and mount points. Which command provides this information?

33 A new XFS filesystem on /dev/sdb1 must mount reliably at /archive even if device names change. Which /etc/fstab source is most appropriate?

34 After adding an entry to /etc/fstab, which command tests the entry by attempting to mount filesystems that are not already mounted?

35 A new partition /dev/sdc2 has been created for swap. Which command sequence prepares and activates it immediately?

36 A volume group named vgdata has enough free extents. Which command creates a 20 GiB logical volume named lvbackup?

37 An XFS filesystem mounted from /dev/vgdata/lvapp needs 5 GiB of additional space. Which command extends both the logical volume and its filesystem?

38 A test environment requires many logical volumes whose advertised sizes may exceed the storage currently allocated to their pool. Which LVM feature best fits this requirement?

39 A Stratis pool named pool1 already exists. Which command creates a Stratis filesystem named projects in that pool?

40 A VDO volume stores many identical virtual-machine disk images. Which VDO behavior primarily reduces the space consumed by repeated identical blocks?

41 A service fails because SELinux denies an operation. An administrator wants to test whether SELinux causes the failure without changing the policy permanently. Which action is most appropriate?

42 A system is configured with SELinux in enforcing mode, but a newly installed application cannot access a resource despite UNIX permissions allowing access. Which statement best explains the result?

43 Web content is moved from /var/www/html to /srv/site. The web server can read the files only after their SELinux labels are corrected. Which command makes the labeling rule persistent and which command applies it immediately?

44 An administrator used chcon to label /data/app as var_t, and the application worked until a filesystem relabel was performed. What is the most accurate diagnosis?

45 A web server must connect to a database on another host. SELinux denies the connection, and the administrator wants the supported policy-controlled solution to persist across reboots. Which command is appropriate?

46 A Boolean appears enabled with getsebool, but its value returns to disabled after every reboot. Which conclusion is correct?

47 After confirming that UNIX permissions are correct, an application still receives Permission denied. Which investigation sequence is most reliable for an SELinux-related failure?

48 A generated audit2allow module would permit an unusual process to read a sensitive file. What should the administrator do before installing it?

49 A new disk is visible as /dev/sdb, but no partition or filesystem exists. Which sequence correctly prepares it for a persistent data mount using a GPT partition?

50 An /etc/fstab entry for an XFS filesystem uses /dev/sdc1, but the device name changes after hardware discovery order changes. Which correction is best?

51 A filesystem is mounted at /archive, but mount -a reports an error after an fstab change. Which validation approach minimizes the risk of disrupting existing mounts?

52 A system needs a temporary 4 GiB swap area backed by a regular file. Which sequence provides the correct initialization and activation?

53 A swap partition is active, but the administrator wants it enabled automatically after reboot. Which fstab entry is correct when the partition UUID is 1111-2222?

54 A volume group has 12 GiB of free extents. An administrator needs a new 8 GiB logical volume named logs and an XFS filesystem on it. Which command sequence is valid?

55 An XFS filesystem on /dev/vgdata/logs must grow by 5 GiB while mounted. Which operation is required after extending the LV?

56 A logical volume has been extended successfully, but df -h still shows the old filesystem size. What is the most likely missing step?

57 A database requires redundancy across two physical disks, while an unrelated workload requires maximum usable capacity with no redundancy. Which LVM layout assignments best match those requirements?

58 A Stratis pool contains a filesystem mounted persistently by its filesystem UUID. One underlying disk fails, but the pool was created without redundancy. What should be expected?

59 An administrator creates a Stratis filesystem and notices that its reported virtual size can exceed currently allocated physical space. Which Stratis feature explains this behavior?

60 A VDO volume reports a logical size of 1 TiB but is backed by only 400 GiB of physical storage. Which statement best describes the configuration?