Mixed Deck — All RHCE Topics Flashcards

What field in `/etc/passwd` specifies the user's default shell?

Answer: 7th field

The seventh (last) field in `/etc/passwd` specifies the user's login shell.

What SELinux mode allows policy violations but logs them without blocking?

Answer: Permissive

In Permissive mode, SELinux logs policy violations to the audit log but does not deny access.

What command builds a container image from a `Containerfile` in the current directory?

Answer: podman build -t myimage .

`podman build -t myimage .` builds an image named `myimage` from the Containerfile in the current directory.

What DNF command lists all currently installed packages on the system?

Answer: dnf list installed

'dnf list installed' displays all packages that are currently installed on the system.

Which command loads a compiled SELinux policy module named `mypolicy.pp`?

Answer: semodule -i mypolicy.pp

`semodule -i` installs/loads a compiled SELinux policy module (`.pp` file) into the kernel.

What does the `id` command display when run as a normal user?

Answer: UID, GID, and group memberships

The `id` command prints the UID, GID, and supplementary group memberships of the current or specified user.

What does the `blkid` command display?

Answer: UUID and type of block devices

`blkid` locates and prints block device attributes including UUID, label, and file system type.

Which Ansible configuration groups are commonly used to define default settings and privilege escalation options?

Answer: [defaults], [privilege_escalation]

In the `ansible.cfg` file, the `[defaults]` section is used to define general configuration options that apply globally to Ansible operations. The `[privilege_escalation]` section (or `[become]` in newer versions) is specifically where settings related to privilege escalation, such as `become_method` and `become_user`, are configured. These sections enable centralized management of Ansible's behavior and security settings.

Which command temporarily sets SELinux to permissive mode without a reboot?

Answer: Both A and B

Both `setenforce 0` and `setenforce Permissive` switch SELinux to permissive mode immediately without rebooting.

What command lists all cron jobs for the current user?

Answer: crontab -l

`crontab -l` lists (displays) the current user's crontab without editing it.

Which command installs a locally downloaded RPM file '/tmp/mypkg.rpm' while automatically resolving dependencies?

Answer: Both B and C are correct

Both 'dnf install /path/to/file.rpm' and 'dnf localinstall' resolve dependencies; plain 'rpm -i' does not resolve deps automatically.

Which systemd command shows the output (logs) of a timer-triggered service?

Answer: journalctl -u myservice.service

`journalctl -u myservice.service` shows the systemd journal logs for the service unit that the timer activates.

Which command scans for available LVM physical volumes on the system?

Answer: pvscan

`pvscan` scans all supported LVM block devices in the system for physical volumes.

What is the purpose of `skopeo` in a RHEL container workflow?

Answer: Inspects and copies container images between registries without running them

`skopeo` is a tool for inspecting, copying, and deleting container images in various registries without needing to pull them locally.

Which command sets a permanent SELinux file context so it survives `restorecon`?

Answer: semanage fcontext -a -t httpd_sys_content_t '/mydir(/.*)?'

`semanage fcontext -a` adds a persistent file context rule to the SELinux policy database.

What does the `podman inspect` command return?

Answer: Detailed JSON metadata about a container or image

`podman inspect` outputs detailed JSON metadata including configuration, mounts, network settings, and state of a container or image.

Which SELinux context type must files under `/var/www/html` have for Apache to serve them?

Answer: httpd_sys_content_t

Files must have the `httpd_sys_content_t` type for the Apache httpd process to read and serve them under SELinux.

Which directory contains skeleton files copied to a new user's home directory?

Answer: /etc/skel

Files in `/etc/skel` are automatically copied into the home directory when a new user is created with `useradd -m`.

What is the purpose of the `wheel` group in RHEL?

Answer: Grants members sudo privileges

Members of the `wheel` group are allowed to use `sudo` to run commands as root, as configured in `/etc/sudoers`.

What is the default physical extent size when creating an LVM volume group?

Answer: 4 MB

The default physical extent size for LVM volume groups is 4 MB unless specified otherwise with `-s`.