Free practice · No sign-up required
15 questions with answer explanations. Choose an answer below to begin.
Which service is primarily used to manage and schedule containerized applications on Red Hat Enterprise Linux?
Understand container orchestration fundamentals and Red Hat's container strategy.
0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.
Learn by doing
Use official documentation and hands-on labs to work through topics you missed.
Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.
Which service is primarily used to manage and schedule containerized applications on Red Hat Enterprise Linux?
Kubernetes
Docker Swarm
Apache Mesos
Nomad
Correct answer
Kubernetes
Kubernetes is the industry-standard orchestration platform for managing containerized workloads and services. Red Hat provides integrated support and tooling for Kubernetes through its product portfolio.
What is the default directory for storing persistent application data in a standard Red Hat container image?
/var/lib
/opt
/data
/usr/local
Correct answer
/var/lib
/var/lib is commonly used by applications and services to store variable state and persistent data. This convention helps maintain separation between runtime, configuration, and data.
Which command is used to view the current status and recent events of system services managed by systemd?
systemctl status
service status
chkconfig --list
initctl list
Correct answer
systemctl status
The systemctl status command provides detailed information about a specific service, including its current state and recent log entries. This is the modern way to interact with systemd-managed services.
What is the purpose of a Logical Volume Manager (LVM) snapshot in system administration?
To create a point-in-time copy of a logical volume for backup or testing
To increase the size of a physical disk
To format a logical volume with a new filesystem
To mirror data across multiple disks
Correct answer
To create a point-in-time copy of a logical volume for backup or testing
LVM snapshots allow you to capture the state of a logical volume at a specific moment without interrupting ongoing operations. They are commonly used for backups or to provide a consistent view for testing.
Which protocol is typically used for secure remote login and command execution on Red Hat systems?
SSH
Telnet
FTP
HTTP
Correct answer
SSH
SSH (Secure Shell) encrypts traffic between the client and server, providing a secure channel for remote administration. Telnet and FTP transmit data in plaintext and are not recommended.
What does the acronym RPM stand for in the context of Red Hat package management?
Red Hat Package Manager
Remote Package Manager
RPM Package Manager
Red Hat Product Manager
Correct answer
RPM Package Manager
RPM stands for RPM Package Manager and is the core package management system used by Red Hat-based distributions. It handles software installation, updates, and verification.
Which file is commonly used to define environment variables for system-wide services on Red Hat Enterprise Linux?
/etc/environment
/etc/profile
/etc/bashrc
/etc/sysconfig
Correct answer
/etc/environment
/etc/environment is used to set system-wide environment variables that apply to all users and services. It is read by PAM modules during login and service initialization.
What is the primary function of the chronyd service in time synchronization?
To continuously adjust the system clock to match a reference time source
To set the system clock once at boot from an external source
To provide a local time reference without network access
To log time-related events for auditing
Correct answer
To continuously adjust the system clock to match a reference time source
chronyd is a daemon that actively monitors and adjusts the system clock to stay synchronized with NTP servers. It is well-suited for systems that are intermittently connected or virtualized.
Which directory is the standard location for storing web server content served by Apache or similar HTTP services?
/var/www/html
/usr/share/web
/opt/http
/srv/www
Correct answer
/var/www/html
/var/www/html is the default document root for many web servers on Red Hat systems. This location follows filesystem hierarchy standards for web content.
What is the main configuration file for the OpenSSH server on Red Hat Enterprise Linux?
/etc/ssh/sshd_config
/etc/ssh/ssh_config
/etc/openssh/server.conf
/etc/ssh/config
Correct answer
/etc/ssh/sshd_config
The sshd_config file defines server-side settings for the SSH daemon, including listening ports, authentication methods, and access controls. The ssh_config file is for client-side settings.
Which command is used to display the contents of a compressed tar archive without extracting it?
tar -tvf
tar -xvf
tar -cvf
tar -dzvf
Correct answer
tar -tvf
The -t option lists the contents of an archive, -v enables verbose output, and -f specifies the archive file. This allows inspection of archived files without modifying the filesystem.
What is the role of a firewall daemon such as firewalld in a Red Hat system?
To dynamically manage network zone rules and allow or block traffic
To provide a graphical interface for system monitoring
To manage user authentication and permissions
To schedule system backups and snapshots
Correct answer
To dynamically manage network zone rules and allow or block traffic
firewalld manages firewall rules using zones and services, allowing for dynamic updates without breaking existing connections. It provides a flexible interface for network security policy enforcement.
Which utility is commonly used to monitor real-time system performance and resource usage on Red Hat Linux?
top
ls
cp
find
Correct answer
top
top provides a dynamic, real-time view of system processes, CPU usage, memory consumption, and other performance metrics. It is a standard tool for system monitoring and troubleshooting.
What does SELinux stand for in the context of Red Hat Enterprise Linux security?
Security-Enhanced Linux
System Enforcement and Logging for Linux
Secure Linux Environment
Standardized Enterprise Linux Access
Correct answer
Security-Enhanced Linux
SELinux is a security architecture for Linux systems that provides mandatory access controls. It helps restrict how applications and users can interact with system resources.
Which log file is typically used to record authentication and account-related events on Red Hat systems?
/var/log/secure
/var/log/messages
/var/log/auth.log
/var/log/syslog
Correct answer
/var/log/secure
/var/log/secure is the standard location for authentication-related logs, including SSH logins, sudo usage, and account changes. Other logs serve different purposes or are common on Debian-based systems.
Recall the answer before opening each card.
Kubernetes is the standard orchestration platform for managing containerized workloads and services on Red Hat Enterprise Linux.
/var/lib is commonly used to store variable state and persistent data for applications in Red Hat container images.
systemctl status provides detailed information including state and recent log entries for systemd services.
An LVM snapshot creates a point-in-time copy of a logical volume for backup or testing without interrupting operations.
SSH (Secure Shell) encrypts traffic for secure remote administration; Telnet and FTP are insecure.
RPM stands for RPM Package Manager, the core package management system for Red Hat-based distributions.
/etc/environment is used to set system-wide environment variables applied to all users and services via PAM.
chronyd continuously adjusts the system clock to match a reference time source, suitable for intermittently connected or virtualized systems.
/var/www/html is the default document root for Apache and similar HTTP services on Red Hat systems.
/etc/ssh/sshd_config contains server-side settings for the SSH daemon, including ports and authentication methods.
tar -tvf archive.tar.gz lists the archive contents; -t lists, -v verbose, -f specifies the file.
firewalld dynamically manages network zone rules to allow or block traffic, enabling flexible security policy enforcement.
top provides a dynamic view of processes, CPU, memory, and other metrics for system monitoring and troubleshooting.
SELinux stands for Security-Enhanced Linux, a mandatory access control architecture for restricting resource interactions.
/var/log/secure logs authentication events like SSH logins, sudo usage, and account changes for security auditing.
Use tar -tvf archive.tar.bz2; add -j for bzip2 compression. The -t option lists files without extraction.
setenforce 0 sets SELinux to permissive mode (logs but does not block). Use setenforce 1 to return to enforcing.
firewall-cmd --add-service= --permanent && firewall-cmd --reload adds and applies a service rule.
The default port for SSH is 22, as defined in /etc/ssh/sshd_config. Changing it can reduce automated attacks.
htop is an enhanced process viewer with a more user-friendly interface, though top is the standard on RHEL.
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Connect the concepts
Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
This section covers containerized application scheduling and data persistence on RHEL. Kubernetes is the primary orchestration platform, and Red Hat provides integrated tooling. Understanding the default directories for persistent data, like /var/lib, is crucial for designing container storage. These concepts are foundational for deploying and managing container workloads in a Red Hat ecosystem.
This section focuses on core administrative tasks such as service control with systemd, logical volume management with LVM, secure remote access via SSH, package management with RPM, and system-wide environment variable configuration. These skills are essential for maintaining system health, performing backups, and ensuring secure remote administration. The practice set tests knowledge of key commands and configuration files like /etc/environment and /etc/ssh/sshd_config.
This section addresses web server configuration, firewall management, and SELinux security. The default web server document root is /var/www/html. firewalld dynamically manages network zones and rules. SELinux (Security-Enhanced Linux) enforces mandatory access controls. These components are critical for securing and operating network services on RHEL.
This section covers system monitoring, archive inspection, and logging. The top command provides real-time views of processes and resource usage. The tar -tvf command lists archive contents without extraction. /var/log/secure records authentication events. These tools are essential for diagnosing issues, auditing security, and managing data archives.
Study workflow
Use 'systemctl status <service>' to view current state, recent log entries, and PID. This is the primary method for diagnosing systemd services. Replace <service> with the service name (e.g., sshd). Add '--no-pager' to avoid pagination.
Use 'lvcreate -L <size> -s -n <snapshot_name> <lv_path>' to create a snapshot logical volume. For example, 'lvcreate -L 1G -s -n root_snap /dev/vg/root'. Snapshots are space-efficient and allow consistent backups or testing.
Use 'firewall-cmd --add-service=<service> --permanent' to add a rule, then 'firewall-cmd --reload' to apply. For custom ports, use '--add-port=<port>/<protocol>'. Verify with 'firewall-cmd --list-all'. The --permanent flag ensures persistence across reboots.
Use 'ls -Z' to view file context, 'getenforce' to check enforcing/permissive status, and 'semanage boolean -l' to list booleans. Temporarily set a boolean with 'setsebool -P <name> on' (persistent). Use 'audit2allow' to generate custom policies from denials.
Use 'tar -tvf archive.tar.gz' to list contents. For .tar.bz2 files, add '-j' option. The -t option lists without extracting. Combine with grep to find specific files: 'tar -tvf archive.tar.gz | grep pattern'.
FAQ
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
RHEL includes container tools like Podman and buildah, but full orchestration is provided by Red Hat OpenShift, which is a Kubernetes platform. Red Hat also offers an 'Advanced Cluster Management' add-on. For standalone Kubernetes, you can install the 'kubeadm' package from Red Hat repositories.
chronyd is designed for modern systems, handling intermittent network connections and virtual machines better than ntpd. It synchronizes faster and offers simpler configuration. On RHEL 7 and later, chronyd is the default NTP daemon. Use 'chronyc sources' to check synchronization status.
SELinux has three modes: enforcing (default, enforces policies), permissive (logs but does not block), and disabled (off). Use 'setenforce 0' (permissive) or 'setenforce 1' (enforcing) temporarily. To persist, edit /etc/selinux/config and reboot. Changing to disabled requires a reboot.
/var/log/secure is the main log for authentication events, including SSH failures, sudo usage, and user account changes. For system messages and hardware issues, check /var/log/messages. For auditd logs, use /var/log/audit/audit.log.
LVM snapshots provide a consistent point-in-time copy of a volume, ideal for backups of databases or file servers without downtime. You can mount the snapshot and back up its contents, then remove it. Snapshots are also used for testing updates by rolling back if needed.
Browse another free bank or use the study strategy guide to turn your misses into spaced review.
