Linux Security 2

Question 1

Which command displays the current SELinux enforcement mode?

Accepted Answer

getenforce

Answer

getenforce prints the current SELinux mode: Enforcing, Permissive, or Disabled.

Question 2

What does the sticky bit do when set on a directory?

Accepted Answer

Only the file owner or root can delete files within it

Answer

The sticky bit on a directory prevents users from deleting or renaming files they do not own, even if they have write permission on the directory.

Question 3

Which firewalld command adds a service permanently to the public zone?

Accepted Answer

firewall-cmd --zone=public --add-service=http --permanent

Answer

The --permanent flag makes the rule persist across reboots; without it the change is runtime-only.

Question 4

What is the purpose of the /etc/sudoers file?

Accepted Answer

Define which users can run commands as root or another user

Answer

/etc/sudoers specifies user and group privileges for running commands via sudo.

Question 5

Which SSH configuration option disables password-based login, allowing only key-based authentication?

Accepted Answer

PasswordAuthentication no

Answer

Setting PasswordAuthentication no in /etc/ssh/sshd_config forces clients to use key-based authentication.

Linux Practice Test