RHCSA RHCSA Firewalld and Network Configuration 2

Question 1

Which command makes firewalld configuration changes survive a system reboot?

Accepted Answer

firewall-cmd --permanent followed by --reload

Answer

firewall-cmd --reload

Answer

systemctl restart firewalld

Answer

firewall-cmd --save

Question 2

You need to allow TCP port 8443 only on the 'internal' zone. Which command is correct?

Accepted Answer

firewall-cmd --zone=internal --add-port=8443/tcp --permanent

Answer

firewall-cmd --add-port=8443/tcp --permanent

Answer

firewall-cmd --zone=internal --open-port=8443 --permanent

Answer

firewall-cmd --zone=internal --add-service=8443 --permanent

Question 3

What is the default behavior of the 'drop' zone in firewalld?

Accepted Answer

Silently drops all incoming traffic with no response

Answer

Rejects all traffic with an ICMP error

Answer

Accepts all traffic from trusted sources only

Answer

Forwards all traffic to the default zone

Question 4

Which nmcli command assigns the IP address 192.168.1.50/24 to connection 'eth0'?

Accepted Answer

nmcli con mod eth0 ipv4.addresses 192.168.1.50/24

Answer

nmcli con set eth0 ip4 192.168.1.50/24

Answer

nmcli dev mod eth0 ipv4.addr 192.168.1.50/24

Answer

nmcli con add eth0 ipv4.addresses 192.168.1.50/24

Question 5

After modifying a NetworkManager connection with nmcli, which command activates the new settings?

Accepted Answer

nmcli con up <connection-name>

Answer

nmcli con reload

Answer

systemctl restart network

Answer

ip link set <dev> up

Question 6

Which file would you edit to set a static hostname permanently on RHEL 9?

Accepted Answer

/etc/hostname

Answer

/etc/sysconfig/network

Answer

/proc/sys/kernel/hostname

Answer

/etc/hosts

Question 7

What does the command 'firewall-cmd --list-all' display?

Accepted Answer

The active zone with its current services, ports, and rules

Answer

All zones and their configurations

Answer

Only the services allowed in all zones

Answer

The firewalld daemon version and status