SELinux Administration Flashcards
6 cards from real RHCE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 SELinux Administration flashcards as text
Which command displays the current SELinux enforcement mode?
Answer: Both B and C
Both `getenforce` (returns Enforcing/Permissive/Disabled) and `sestatus` (shows detailed status) display the SELinux mode.
What SELinux mode allows policy violations but logs them without blocking?
Answer: Permissive
In Permissive mode, SELinux logs policy violations to the audit log but does not deny access.
Which command temporarily sets SELinux to permissive mode without a reboot?
Answer: Both A and B
Both `setenforce 0` and `setenforce Permissive` switch SELinux to permissive mode immediately without rebooting.
Which file must be edited to make SELinux mode changes persistent across reboots?
Answer: /etc/selinux/config
`/etc/selinux/config` is the primary configuration file for persistent SELinux mode and policy settings.
What command displays the SELinux context of files in the current directory?
Answer: ls -Z
`ls -Z` shows the SELinux security context (user:role:type:level) for each file alongside standard attributes.
Which command restores default SELinux file contexts recursively on `/var/www/html`?
Answer: restorecon -Rv /var/www/html
`restorecon -Rv` restores SELinux contexts to their policy defaults recursively and shows what was changed.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- redhat.com — Test delivery, renewal, score validity, exam format, score release · verified Oct 2026