Unit 6: Network Storage, Boot, Security, and Installation - Practice Quiz
1 Which protocol is commonly used to share directories between Linux systems over a network?
2 Which command displays the NFS exports available from a remote server?
firewall-cmd server
systemctl list server
hostnamectl server
showmount -e server
3
Which command mounts the NFS export server:/share on /mnt/share?
mount -t nfs server:/share /mnt/share
mount -t ext4 server:/share /mnt/share
umount -t nfs server:/share /mnt/share
exportfs -t nfs server:/share /mnt/share
4 Which file is commonly edited to make an NFS mount persistent across reboots?
/etc/fstab
/etc/passwd
/etc/hosts
/etc/resolv.conf
5 Which service mounts network file systems automatically when their directories are accessed?
autofs
tuned
sshd
chronyd
6
Which file is the main configuration map for the autofs service?
/etc/nsswitch.conf
/etc/exports
/etc/auto.master
/etc/sysctl.conf
7 Which boot loader is commonly used by Red Hat Enterprise Linux?
8 Which command displays the default systemd boot target?
systemctl list-default
systemctl get-default
systemctl show-boot
systemctl get-target
9 Which systemd target starts a graphical login environment?
rescue.target
emergency.target
multi-user.target
graphical.target
10 Which parameter can be added to the GRUB kernel command line to interrupt startup for root password recovery?
ro.debug
rd.break
fs.check
net.boot
11 Which command is used to assign a new password to the root account after entering the recovery environment?
useradd
passwd
userdel
whoami
12 Which command checks and repairs a Linux file system?
fsck
df
lsblk
mount
13 Which firewall management service is commonly used in Red Hat Enterprise Linux?
autofs
firewalld
sshd
chronyd
14
Which command allows HTTP traffic in the current firewalld configuration?
firewall-cmd --query-service=http
firewall-cmd --remove-service=http
firewall-cmd --add-service=http
firewall-cmd --add-service=dns
15
Which option makes a firewall-cmd rule remain after a reboot?
--runtime
--reload
--complete
--permanent
16 Which utility is used to manage SELinux port type assignments?
semanage
hostnamectl
restorecon
firewall-cmd
17 What does SELinux do when it operates in enforcing mode?
18 What is the name of the graphical installer used by Red Hat Enterprise Linux?
19 What is the main purpose of a Kickstart file?
20 Which graphical tool can be used to create and manage KVM virtual machines?
virt-manager
firewall-config
system-config-printer
nm-connection-editor
21 A Linux administrator needs to identify available NFS exports from a server before mounting one. Which command is most appropriate?
mount -l nfs-server
nfsstat -e nfs-server
exportfs -v nfs-server
showmount -e nfs-server
22
Which /etc/fstab entry mounts the /projects export from files.example.com on /mnt/projects using NFS at boot?
files.example.com:/projects /mnt/projects nfs defaults 0 0
files.example.com:/projects /mnt/projects ext4 defaults 0 0
files.example.com:/mnt/projects /projects nfs defaults 0 0
/mnt/projects files.example.com:/projects nfs auto 1 1
23 An NFS mount fails because the client cannot resolve the server name. Which action should be checked first?
/etc/hosts resolution
24
What is the main advantage of using autofs for an NFS home directory?
25
In an indirect autofs map, which location is typically used for a map entry mounting an export under /home/remote?
/etc/auto.master.d/remote.autofs
/var/lib/autofs/remote.mount
/etc/fstab.d/remote.nfs
/etc/systemd/remote.mount
26 A system boots to a graphical interface, but an administrator wants to start it in a non-graphical troubleshooting mode for one boot. Which GRUB action is appropriate?
systemd.unit=multi-user.target
systemd.target=graphical.target
27 Which command permanently configures a system to boot into the graphical target?
systemctl start graphical.target --permanent
systemctl enable graphical.target
systemctl set-default graphical.target
grub2-mkconfig --target graphical.target
28 An administrator needs a target that starts networking and most system services but does not start a graphical login manager. Which target should be selected?
emergency.target
multi-user.target
rescue.target
graphical.target
29 After booting into an emergency shell to reset the root password on an SELinux-enabled system, which sequence helps preserve correct file labels?
/boot, then regenerate the initramfs
/etc/shadow, change the password, and disable SELinux
/ read-write, change the password, create /.autorelabel, and reboot
/ read-only, change the password, and skip relabeling
30
Why is rw init=/bin/bash sometimes added to the Linux kernel command line during root password recovery?
31 A boot process reports errors on an unmounted ext4 file system. Which command is appropriate for checking and repairing it?
mkfs.ext4 /dev/vdb1
xfs_repair -n /dev/vdb1
fsck -t ext4 /dev/vdb1
mount -o repair /dev/vdb1
32
A server enters emergency mode because an /etc/fstab entry references a disk that is temporarily unavailable. Which option can prevent the missing mount from stopping boot?
auto-fix
nofail option to the mount entry
roothold option to the entry
swap
33
A service should accept connections only from the 192.0.2.0/24 network. Which control best enforces this requirement?
34 Which command permanently permits HTTPS traffic in the default firewalld zone and immediately applies the change?
firewall-cmd --permanent --remove-service=https followed by firewall-cmd --restart
firewall-cmd --add-port=443/udp --permanent followed by systemctl reload firewalld
firewall-cmd --permanent --add-service=https followed by firewall-cmd --reload
firewall-cmd --add-service=https --temporary followed by systemctl restart sshd
35
An administrator added port 8080/tcp to firewalld but remote clients still cannot connect. Which check is most useful next?
36
A web service labeled for HTTP is configured to listen on TCP port 8443. Which command adds the correct SELinux port label?
chcon -t http_port_t /etc/services
restorecon -p tcp -t http_port_t 8443
setsebool -a -t http_port_t -p tcp 8443
semanage port -a -t http_port_t -p tcp 8443
37 Which command displays the SELinux port types currently associated with TCP ports used by HTTP services?
getsebool -a | grep http_port_t
firewall-cmd --list-services | grep http_port_t
semanage port -l | grep http_port_t
ls -Z /var/www | grep http_port_t
38 During a Red Hat Enterprise Linux installation, which partitioning approach gives the installer control over the layout while retaining automatic file system creation?
/etc/fstab
39 A minimal RHEL server requires remote administration after installation. Which installation choice is most directly relevant?
40 A Kickstart file must run a command after package installation but before the system reboots. Which section should contain the command?
%post
%addon
%pre
%packages
41
A RHEL client can resolve an NFS server's hostname and ping it, but showmount -e server.example.com times out. The server exports directories through NFSv4 only and its firewall permits the NFS service. Which conclusion best explains the timeout?
showmount requires write permission on at least one exported directory
showmount requires the server hostname to be defined in /etc/hosts
showmount works only when the client has already mounted the NFSv4 root
showmount queries the legacy mount service, which an NFSv4-only server may not expose
42
A client must mount the NFSv4 export server.example.com:/projects at /mnt/projects during boot. Boot must continue if the server is unavailable, and ordinary local file-system checks must not be attempted. Which /etc/fstab entry is most appropriate?
server.example.com:/projects /mnt/projects nfs4 defaults,_netdev 1 1
server.example.com:/projects /mnt/projects nfs4 defaults,_netdev,nofail 0 0
server.example.com:/projects /mnt/projects ext4 defaults,nofail 0 2
server.example.com:/projects /mnt/projects nfs4 defaults,fail 1 2
43 An application writes critical records to an NFS mount. Administrators want interrupted operations to keep retrying after a temporary server outage rather than return potentially unsafe I/O errors to the application. Which mount behavior best satisfies this requirement?
44
An autofs indirect map should mount each user's NFS home directory only when /home/<username> is accessed. The server stores homes as /exports/home/<username>. Which map entry correctly uses a wildcard substitution?
& -fstype=nfs4,rw server.example.com:/exports/home/*
/* -fstype=nfs4,rw server.example.com:/exports/home/$USER
home -fstype=nfs4,rw server.example.com:/exports/home/&
* -fstype=nfs4,rw server.example.com:/exports/home/&
45
After adding /data /etc/auto.data to /etc/auto.master.d/data.autofs, an administrator creates /etc/auto.data with reports -rw server:/exports/reports. Accessing /data/reports still returns "No such file or directory," and no autofs process has reloaded the configuration. What is the most direct corrective action?
systemctl daemon-reexec so systemd parses the NFS export
autofs service so it reads the new master map
mount -a so the kernel reads the new indirect map
nfs-server so the client map becomes visible
46
A system enters emergency mode because a nonessential local data volume listed in /etc/fstab is missing. Administrators want future boots to continue without waiting for that volume, while still mounting it automatically whenever it is available. Which change is most appropriate?
/etc/fstab field to 1 for the volume
nofail to the volume's mount options in /etc/fstab
noauto to the volume's mount options in /etc/fstab
/etc/fstab field to 1 for the volume
47 A graphical RHEL server must boot into text-only multi-user mode for one troubleshooting session, then return to its configured graphical default on the next reboot. Which approach meets both requirements?
systemctl set-default multi-user.target before rebooting once
systemd.unit=multi-user.target to the kernel command line once
systemd.default_standard_output=multi-user to the kernel line
default.target with a permanent link to rescue.target
48
A server currently uses graphical.target by default. An administrator runs systemctl isolate multi-user.target from a graphical session. What is the expected result?
multi-user.target alongside all graphical-only units indefinitely
graphical.target
multi-user.target
49
A RHEL system is booted with rd.break to reset a forgotten root password on an SELinux-enforcing installation. Which sequence correctly updates the installed system and prepares SELinux labels for the next boot?
chroot /sysroot; mount -o remount,ro /; passwd; restorecon /; reboot
mount -o remount,rw /; passwd; touch /sysroot/.autorelabel; exit and reboot
mount -o remount,rw /boot; chroot /boot; passwd; setenforce 0; reboot
mount -o remount,rw /sysroot; chroot /sysroot; passwd; touch /.autorelabel; exit and reboot
50
Boot stops because an XFS file system on /dev/mapper/vg-data is corrupt. The volume is not the root file system and can be kept unmounted in emergency mode. Which repair procedure is appropriate?
e2fsck -y /dev/mapper/vg-data
xfs_growfs /dev/mapper/vg-data
fsck.xfs -f /dev/mapper/vg-data
xfs_repair /dev/mapper/vg-data
51 A non-root ext4 file system fails its automatic boot check. The administrator has confirmed it is unmounted and wants a forced consistency check that automatically accepts repairs. Which command is appropriate?
xfs_repair -f -y /dev/mapper/vg-app
mount -o remount,repair /dev/mapper/vg-app
tune2fs -f -y /dev/mapper/vg-app
e2fsck -f -y /dev/mapper/vg-app
52
A host has two NetworkManager connections, both currently active. A firewall zone was assigned by editing only one connection profile with nmcli, but packets continue to use the old zone. What additional action is generally required for the profile change to take effect?
semanage port -a so SELinux associates the interface with the zone
sshd so existing sockets inherit the modified connection zone
53
An administrator runs firewall-cmd --zone=public --add-service=https and confirms that HTTPS works. After reboot, the rule is gone. Which command adds the missing persistent configuration without immediately altering the current runtime state?
firewall-cmd --runtime-to-permanent --zone=public --add-service=https
firewall-cmd --permanent --zone=public --add-service=https
firewall-cmd --complete-reload --zone=public --add-service=https
firewall-cmd --reload --zone=public --add-service=https
54
A server's public zone is bound to interface ens3, but the source network 192.0.2.0/24 is explicitly assigned to the trusted zone. A packet from 192.0.2.10 arrives through ens3. Which zone handles the packet?
public zone, because an interface assignment always takes precedence
trusted zone, because an explicit source assignment takes precedence
55
A custom web service runs under the confined HTTP server domain and must listen on TCP port 8088. The firewall is already open, but SELinux denies the bind. Port 8088 has no existing SELinux port mapping. Which persistent command is appropriate?
chcon -t http_port_t /proc/sys/net/ipv4/8088
setsebool -P httpd_can_network_connect on 8088
semanage port -a -t http_port_t -p tcp 8088
semanage port -m -t http_port_t -p udp 8088
56
An administrator attempts semanage port -a -t http_port_t -p tcp 8443, but the command reports that TCP port 8443 is already defined with another SELinux type. What should the administrator do after verifying that reassignment is appropriate?
restorecon -v -t http_port_t tcp/8443
setenforce http_port_t:tcp:8443
semanage port -d -t http_port_t -p tcp 8443
semanage port -m -t http_port_t -p tcp 8443
57 A UEFI-based RHEL installation uses GPT, software RAID for most storage, and a separate EFI System Partition. Which design is required for firmware boot support?
/efi
/boot/efi
/boot/efi
/boot
58 During installation, a server must retain data on an existing partition while replacing the operating system. Which storage action best minimizes the risk of destroying the retained data?
59
A Kickstart %post script must copy a file from the installation environment's /run/install/repo into the installed system. The script needs direct access to both the installer environment and the target mounted at /mnt/sysroot. Which section declaration is most appropriate?
%pre --nochroot
%post --nochroot
%packages --instLangs=en_US
%post --interpreter=/bin/bash
60 A KVM guest must be live-migratable among hosts with different CPU generations. Maximum guest CPU performance is less important than compatibility. Which CPU configuration is the best choice?
Did this save you a night before the exam?
LPU Notes is free, and it stays free. Ads cover part of the server bill. The rest comes out of a student's own pocket: the domain, the storage, and keeping the site up through the weeks everyone needs it at once.
The payment button didn't load. An ad blocker or a filtered network is the usual reason. to try again.
Nothing here is ever locked, and nothing unlocks. Chip in only if it was worth it. What it pays for →