RHCE SELinux Administration

Question 1

Which command displays the current SELinux enforcement mode?

Accepted Answer

Both B and C

Answer

Both `getenforce` (returns Enforcing/Permissive/Disabled) and `sestatus` (shows detailed status) display the SELinux mode.

Question 2

What SELinux mode allows policy violations but logs them without blocking?

Accepted Answer

Permissive

Answer

In Permissive mode, SELinux logs policy violations to the audit log but does not deny access.

Question 3

Which command temporarily sets SELinux to permissive mode without a reboot?

Accepted Answer

Both A and B

Answer

Both `setenforce 0` and `setenforce Permissive` switch SELinux to permissive mode immediately without rebooting.

Question 4

Which file must be edited to make SELinux mode changes persistent across reboots?

Accepted Answer

/etc/selinux/config

Answer

`/etc/selinux/config` is the primary configuration file for persistent SELinux mode and policy settings.

Question 5

What command displays the SELinux context of files in the current directory?

Accepted Answer

ls -Z

Answer

`ls -Z` shows the SELinux security context (user:role:type:level) for each file alongside standard attributes.

RHCE - Red Hat Certified Engineer Practice Test