Red Hat Certified Architect (RHCA) Free Practice Questions
This practice set tests fundamental skills required for Red Hat Enterprise Linux (RHEL) administration and container orchestration, core knowledge for the RHCA certification. Questions cover container management with Kubernetes, persistent data storage, systemd service control, LVM snapshots, SSH secure access, RPM packaging, environment configuration, time synchronization (chronyd), web server document roots, OpenSSH configuration, archive inspection, firewall management (firewalld), real-time monitoring (top), SELinux security modules, and authentication logging. The set evaluates your ability to choose the correct command, configuration file, or concept from common enterprise scenarios. Mastery of these topics is essential for architecting and managing Red Hat environments.
What this RHCA practice set measures
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
Container Orchestration and Management
This section covers containerized application scheduling and data persistence on RHEL. Kubernetes is the primary orchestration platform, and Red Hat provides integrated tooling. Understanding the default directories for persistent data, like /var/lib, is crucial for designing container storage. These concepts are foundational for deploying and managing container workloads in a Red Hat ecosystem.
- Kubernetes is the industry-standard container orchestration tool for managing workloads and services.
- Red Hat offers integrated Kubernetes support through products like OpenShift.
- /var/lib is the default directory for persistent application data in standard Red Hat container images.
- Container data persistence ensures state survives container restarts and updates.
System Administration and Service Management
This section focuses on core administrative tasks such as service control with systemd, logical volume management with LVM, secure remote access via SSH, package management with RPM, and system-wide environment variable configuration. These skills are essential for maintaining system health, performing backups, and ensuring secure remote administration. The practice set tests knowledge of key commands and configuration files like /etc/environment and /etc/ssh/sshd_config.
- systemctl status displays service state and recent events for systemd-managed services.
- LVM snapshots create point-in-time copies for backup or testing without downtime.
- SSH provides encrypted remote login and command execution; Telnet and FTP are insecure.
- RPM (RPM Package Manager) is the core package management system for Red Hat distributions.
- /etc/environment defines system-wide environment variables read by PAM during login.
Network Services and Security
This section addresses web server configuration, firewall management, and SELinux security. The default web server document root is /var/www/html. firewalld dynamically manages network zones and rules. SELinux (Security-Enhanced Linux) enforces mandatory access controls. These components are critical for securing and operating network services on RHEL.
- /var/www/html is the standard document root for Apache and similar HTTP services.
- The main OpenSSH server configuration file is /etc/ssh/sshd_config.
- firewalld uses zones and services to dynamically manage firewall rules.
- SELinux provides mandatory access control to restrict process and user interactions with system resources.
- Secure system configurations rely on proper firewall and SELinux policies.
Monitoring and Troubleshooting
This section covers system monitoring, archive inspection, and logging. The top command provides real-time views of processes and resource usage. The tar -tvf command lists archive contents without extraction. /var/log/secure records authentication events. These tools are essential for diagnosing issues, auditing security, and managing data archives.
- top shows dynamic CPU, memory, and process usage for performance monitoring.
- tar -tvf inspects compressed tar archive contents without extracting.
- /var/log/secure logs authentication-related events like SSH logins and sudo usage.
- Effective troubleshooting relies on real-time metrics and detailed log analysis.
Practice Red Hat Certified Architect (RHCA) with real flashcards
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Static practice bank
Start the 15-question diagnostic
The complete question bank is embedded in this pre-rendered page. There is no database request or second content download when you begin.
Which service is primarily used to manage and schedule containerized applications on Red Hat Enterprise Linux?
Show hint
Understand container orchestration fundamentals and Red Hat's container strategy.
Study workflow
Turn one RHCA attempt into a study plan
- 1
Check Service Status with systemctl
Use 'systemctl status <service>' to view current state, recent log entries, and PID. This is the primary method for diagnosing systemd services. Replace <service> with the service name (e.g., sshd). Add '--no-pager' to avoid pagination.
- 2
Create an LVM Snapshot
Use 'lvcreate -L <size> -s -n <snapshot_name> <lv_path>' to create a snapshot logical volume. For example, 'lvcreate -L 1G -s -n root_snap /dev/vg/root'. Snapshots are space-efficient and allow consistent backups or testing.
- 3
Configure a Firewalld Rule
Use 'firewall-cmd --add-service=<service> --permanent' to add a rule, then 'firewall-cmd --reload' to apply. For custom ports, use '--add-port=<port>/<protocol>'. Verify with 'firewall-cmd --list-all'. The --permanent flag ensures persistence across reboots.
- 4
Inspect SELinux Context and Boolean
Use 'ls -Z' to view file context, 'getenforce' to check enforcing/permissive status, and 'semanage boolean -l' to list booleans. Temporarily set a boolean with 'setsebool -P <name> on' (persistent). Use 'audit2allow' to generate custom policies from denials.
- 5
Inspect a Compressed Tar Archive
Use 'tar -tvf archive.tar.gz' to list contents. For .tar.bz2 files, add '-j' option. The -t option lists without extracting. Combine with grep to find specific files: 'tar -tvf archive.tar.gz | grep pattern'.
FAQ
Questions about this RHCA practice page
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
How is Kubernetes integrated into Red Hat Enterprise Linux for container orchestration?+
RHEL includes container tools like Podman and buildah, but full orchestration is provided by Red Hat OpenShift, which is a Kubernetes platform. Red Hat also offers an 'Advanced Cluster Management' add-on. For standalone Kubernetes, you can install the 'kubeadm' package from Red Hat repositories.
What is the difference between chronyd and ntpd for time synchronization?+
chronyd is designed for modern systems, handling intermittent network connections and virtual machines better than ntpd. It synchronizes faster and offers simpler configuration. On RHEL 7 and later, chronyd is the default NTP daemon. Use 'chronyc sources' to check synchronization status.
What are the common SELinux modes and how do I change them?+
SELinux has three modes: enforcing (default, enforces policies), permissive (logs but does not block), and disabled (off). Use 'setenforce 0' (permissive) or 'setenforce 1' (enforcing) temporarily. To persist, edit /etc/selinux/config and reboot. Changing to disabled requires a reboot.
Which log file should I check for authentication failures on RHEL?+
/var/log/secure is the main log for authentication events, including SSH failures, sudo usage, and user account changes. For system messages and hardware issues, check /var/log/messages. For auditd logs, use /var/log/audit/audit.log.
What is a practical use case for LVM snapshots in system administration?+
LVM snapshots provide a consistent point-in-time copy of a volume, ideal for backups of databases or file servers without downtime. You can mount the snapshot and back up its contents, then remove it. Snapshots are also used for testing updates by rolling back if needed.
Build the next review session
Browse another free bank or use the study strategy guide to turn your misses into spaced review.