RHCSA RHCSA Firewalld and Network Configuration 4 — Questions and Answers
Question 1: Which command sets the default firewalld zone to 'home'?
- firewall-cmd --set-default-zone=home (Correct answer)
- firewall-cmd --default-zone=home
- firewall-cmd --zone=home --set-default
- firewall-cmd --change-default-zone=home
Correct answer: firewall-cmd --set-default-zone=home
--set-default-zone changes the system-wide default zone immediately without requiring --reload.
Question 2: On RHEL 9, which tool is the primary recommended method for managing network connections?
- ifconfig
- NetworkManager via nmcli or nmtui (Correct answer)
- netplan
- systemd-networkd
Correct answer: NetworkManager via nmcli or nmtui
NetworkManager is the default and recommended network management service on RHEL 9; nmcli and nmtui are its CLI and TUI frontends.
Question 3: A rich rule must block all traffic from IP 203.0.113.5. Which command achieves this?
- firewall-cmd --add-rich-rule='rule family=ipv4 source address=203.0.113.5 drop' --permanent (Correct answer)
- firewall-cmd --add-rich-rule='family=ipv4 source address=203.0.113.5 block' --permanent
- firewall-cmd --block-source=203.0.113.5 --permanent
- firewall-cmd --zone=block --add-source=203.0.113.5 --permanent
Correct answer: firewall-cmd --add-rich-rule='rule family=ipv4 source address=203.0.113.5 drop' --permanent
A rich rule with 'drop' silently discards all packets from the specified source address.
Question 4: What does the 'ip route show' command display?
- All active network interfaces
- The kernel routing table (Correct answer)
- All firewalld routing rules
- DNS resolution paths
Correct answer: The kernel routing table
'ip route show' displays the kernel's IP routing table including default gateway and static routes.
Question 5: Which nmcli command creates a new Ethernet connection named 'corp' with static IP 10.1.1.10/24 and gateway 10.1.1.1?
- nmcli con add type ethernet ifname eth1 con-name corp ip4 10.1.1.10/24 gw4 10.1.1.1 (Correct answer)
- nmcli con new type ethernet name corp ip4 10.1.1.10/24 gw4 10.1.1.1
- nmcli con create ethernet eth1 corp 10.1.1.10/24 10.1.1.1
- nmcli con add ethernet eth1 corp --ip4 10.1.1.10/24 --gw4 10.1.1.1
Correct answer: nmcli con add type ethernet ifname eth1 con-name corp ip4 10.1.1.10/24 gw4 10.1.1.1
nmcli con add with 'type ethernet', 'ifname', 'con-name', 'ip4', and 'gw4' creates a fully configured static connection.
Question 6: Which firewalld zone is designed for computers in the same local network that you mostly trust?
- internal
- trusted
- home (Correct answer)
- work
Correct answer: home
The 'home' zone is for home networks where you trust most other computers and selected incoming connections are accepted.
Question 7: What is the effect of running 'firewall-cmd --reload'?
- Restarts the firewalld daemon and loses runtime rules
- Applies the permanent configuration to the runtime without restarting the daemon (Correct answer)
- Only reloads service definitions from /usr/lib/firewalld/services
- Resets all zones to their factory defaults
Correct answer: Applies the permanent configuration to the runtime without restarting the daemon
--reload merges permanent rules into the live kernel config without stopping firewalld or dropping existing connections.
RHCSA RHCSA Firewalld and Network Configuration 4
Which command sets the default firewalld zone to 'home'?