RHCSA RHCSA Firewalld and Network Configuration 2

Question 1

Which command makes firewalld configuration changes survive a system reboot?

Accepted Answer

firewall-cmd --permanent followed by --reload

Answer

Using --permanent saves the rule to disk; --reload applies the saved config so it is active immediately and persists after reboot.

Question 2

You need to allow TCP port 8443 only on the 'internal' zone. Which command is correct?

Accepted Answer

firewall-cmd --zone=internal --add-port=8443/tcp --permanent

Answer

The --zone flag targets a specific zone; --add-port=8443/tcp specifies port and protocol.

Question 3

What is the default behavior of the 'drop' zone in firewalld?

Accepted Answer

Silently drops all incoming traffic with no response

Answer

The drop zone discards all incoming packets without sending any rejection message back to the sender.

Question 4

Which nmcli command assigns the IP address 192.168.1.50/24 to connection 'eth0'?

Accepted Answer

nmcli con mod eth0 ipv4.addresses 192.168.1.50/24

Answer

nmcli con mod modifies an existing connection; ipv4.addresses sets the static IP with prefix.

Question 5

After modifying a NetworkManager connection with nmcli, which command activates the new settings?

Accepted Answer

nmcli con up <connection-name>

Answer

nmcli con up brings the connection down and back up, applying any modified parameters.

RHCSA Exam Practice Test