RHCSA RHCSA Firewalld and Network Configuration 3

Question 1

Which command shows all available firewalld zones?

Accepted Answer

firewall-cmd --get-zones

Answer

--get-zones prints a space-separated list of all zones defined on the system.

Question 2

A developer needs traffic from 10.0.0.0/8 to always be treated as 'trusted'. What is the best approach?

Accepted Answer

firewall-cmd --zone=trusted --add-source=10.0.0.0/8 --permanent

Answer

Adding a source CIDR to the trusted zone routes all packets from that network through the trusted zone policy.

Question 3

Which nmcli property sets the DNS server for a connection?

Accepted Answer

ipv4.dns

Answer

The ipv4.dns property in NetworkManager holds one or more DNS server addresses for a connection.

Question 4

What does 'firewall-cmd --zone=public --query-service=https' return?

Accepted Answer

yes or no indicating if the https service is currently enabled in the public zone

Answer

--query-service returns 'yes' if the service is active in the zone at runtime, 'no' otherwise.

Question 5

To configure NetworkManager to use a connection only for specific traffic and not set it as the default route, which setting is used?

Accepted Answer

ipv4.never-default yes

Answer

Setting ipv4.never-default to yes prevents NetworkManager from using that connection as the default gateway.

RHCSA Exam Practice Test