RH133 Red Hat Linux System Administration Free Practice Test — 30 Questions

Question 1

Anya, a system administrator for a financial services firm, is tasked with modernizing a critical customer-facing application. This application, currently running as a traditional daemon on Red Hat Enterprise Linux, is experiencing performance bottlenecks and lacks the scalability required for peak trading hours. Anya plans to containerize the application using Podman and deploy it on a new RHEL server. She needs to ensure the containerized application starts automatically on system boot, can be managed using standard `systemctl` commands, and integrates seamlessly with the host operating system\'s service management framework. Which of the following strategies best aligns with these requirements for managing the container\'s lifecycle as a system service?

Accepted Answer

Utilize `podman generate systemd --new` to create a systemd unit file that controls the container's lifecycle and integrate it with systemd.

Question 2

Anya, a seasoned system administrator, faces a critical task: migrating a vital database server to a new hardware platform. The existing infrastructure relies on a legacy, proprietary storage solution that lacks direct driver support for the new hardware. Anya\'s primary objectives are to maintain data integrity and minimize service interruption during this transition. She must devise a strategy that navigates the incompatibility between the old storage and the new hardware, ensuring the database remains accessible and its data consistent throughout the process.

Which of the following approaches best exemplifies Anya\'s need for adaptability and flexibility in resolving this technical challenge?

Accepted Answer

Implementing a staged migration strategy using a custom data transformation script that bridges the proprietary storage format to a standard filesystem recognized by the new hardware, coupled with a parallel replication mechanism for continuous data synchronization.

Question 3

Anya, a system administrator for a burgeoning tech startup, is responsible for managing user access on their Red Hat Enterprise Linux servers. A new team of application developers requires the ability to start, stop, restart, and check the status of the Apache web server (`httpd`), as well as view its access and error logs located in `/var/log/httpd/`. However, Anya must ensure these developers cannot modify the Apache configuration file (`/etc/httpd/conf/httpd.conf`) or any other critical system files. Which of the following configurations within `/etc/sudoers` would most effectively and securely delegate these specific administrative privileges to the `developers` group?

Accepted Answer

Defining command aliases for `httpd` service management and log viewing, and granting the `developers` group permission to execute these aliases using `NOPASSWD`.

Question 4

Anya, a system administrator on a Red Hat Enterprise Linux server, has her user account primarily associated with the `developers` group (GID 1001). She is also granted membership in the `testers` group (GID 1002) and the `documentation` group (GID 1003) to facilitate cross-team collaboration. Considering the principle of least privilege and standard Linux group behavior, if Anya creates a new configuration file within her home directory, which group ownership will be automatically assigned to this file by default?

Accepted Answer

developers

Question 5

Anya, a system administrator responsible for a critical e-commerce platform hosted on Red Hat Enterprise Linux, was in the middle of optimizing database query performance when an urgent alert flashed across her dashboard. A zero-day exploit targeting the web server\'s core component has been publicly disclosed, and initial reports indicate active exploitation in the wild. The platform is experiencing intermittent service degradation, and the vulnerability is known to allow remote code execution. Anya\'s immediate supervisor has tasked her with resolving the issue with minimal downtime, but has also emphasized the importance of maintaining data integrity and security compliance, given the sensitive customer information processed by the platform. Considering the high-stakes environment and the need for rapid, effective action, what is the most prudent initial step Anya should take to address this emergent security threat?

Accepted Answer

Isolate the affected web server from the network to prevent further exploitation while simultaneously initiating a deep dive into the vulnerability and preparing a system-wide patch or mitigation strategy.

Question 6

A system administrator is tasked with enabling a newly developed, custom web server application to serve content from `/srv/custom_web_data`. This directory currently has the default SELinux context for unmounted file systems. The administrator needs to ensure this access is persistent across reboots and policy updates, adhering to security best practices and maintaining the integrity of the SELinux policy. What sequence of commands and configuration changes would best achieve this objective?

Accepted Answer

Define a new file context using `semanage fcontext -a -t httpd_sys_content_t "/srv/custom_web_data(/.*)?"` and then apply it with `restorecon -Rv /srv/custom_web_data`.

Question 7

Anya, a seasoned system administrator for a high-traffic e-commerce platform hosted on Red Hat Enterprise Linux, is facing persistent performance issues. Users report slow loading times and occasional unresponsiveness, particularly during flash sale events. Initial diagnostics using `sar` and `iostat` indicate high I/O wait times and a notable increase in processes stuck in the uninterruptible sleep state (D) during peak load. Logs reveal that the application server frequently performs extensive data writes to disk. Considering the need for rapid resolution and efficient resource utilization, which of the following actions would most effectively address the observed performance bottleneck while demonstrating adaptability in problem-solving?

Accepted Answer

Optimizing the application's configuration to reduce synchronous disk writes and improve I/O handling.

Question 8

A Red Hat Enterprise Linux system hosts a mission-critical proprietary application that depends on a custom-compiled web server and a specific version of a relational database. The system requires a planned kernel upgrade to incorporate security patches and performance enhancements. What strategic approach best balances the need for system security and performance improvements with the imperative to maintain uninterrupted application availability and functionality?

Accepted Answer

Conduct extensive compatibility testing of the application and its dependencies with the target kernel version in a staging environment, develop a detailed deployment plan with verification steps, and establish a comprehensive rollback strategy.

Question 9

Anya, a seasoned system administrator managing a critical business application on an on-premises Red Hat Enterprise Linux server, is tasked with migrating this application to a new RHEL instance hosted in a cloud environment. The application has a complex, bespoke configuration and a substantial, frequently updated database. The primary objectives are to ensure data integrity, minimize service interruption for end-users, and maintain the application\'s performance post-migration. Anya is evaluating different migration methodologies. Which of the following approaches best balances the need for controlled transition, risk mitigation, and operational continuity, while also allowing for adaptive adjustments based on real-time system feedback during the migration process?

Accepted Answer

Implement a phased rollout, gradually directing a portion of user traffic to the new cloud RHEL instance while maintaining the old server as a fallback, allowing for continuous monitoring and rapid rollback if issues are detected.

Question 10

A critical web application hosted on a Red Hat Enterprise Linux server is exhibiting intermittent performance degradation, characterized by high CPU utilization primarily attributed to the `httpd` process. The system administrator needs to quickly identify the root cause. Considering the need for rapid diagnosis and effective problem resolution, which of the following actions would constitute the most effective initial step to address this observed performance issue?

Accepted Answer

Analyze real-time CPU and memory utilization of the `httpd` process and its associated worker threads, correlating this with the configured `MaxRequestWorkers` directive and the chosen Multi-Processing Module (MPM) to understand how concurrency is managed.

Question 11

A system administrator is tasked with ensuring that all files and directories within `/srv/data/shared` are accessible by a newly deployed containerized application that requires specific SELinux contexts for its data volumes. After manually setting the context for a few files using `chcon`, the administrator notices that newly created files do not inherit the correct context and that the changes are lost after a system relabel. What is the most robust and persistent method to ensure that all current and future files within `/srv/data/shared` are correctly labeled with the `container_file_t` SELinux type?

Accepted Answer

Utilize `semanage fcontext` to define a persistent rule for `/srv/data/shared(/.*)?` with the `container_file_t` type, followed by `restorecon -Rv /srv/data/shared`.

Question 12

Anya, a seasoned system administrator managing a high-traffic Red Hat Enterprise Linux server hosting a critical customer-facing application, is tasked with enhancing both system security and performance. She has observed intermittent slowdowns during peak usage and has identified several unpatched vulnerabilities in third-party libraries used by the application. Anya needs to implement a comprehensive strategy that addresses these concerns while adhering to stringent data protection regulations and minimizing operational disruption. Which of the following approaches best reflects a holistic and proactive strategy for Anya\'s situation?

Accepted Answer

Systematically patch all identified vulnerabilities, reconfigure the web server to run with the least privilege necessary, and implement granular firewall rules to restrict access to essential ports and services, while also optimizing kernel parameters for network throughput.

Question 13

A system administrator is tasked with configuring a custom Apache HTTP Server configuration file located at `/etc/httpd/conf.d/custom.conf`. After placing the file and restarting the `httpd` service, web requests to this configuration are failing with \"Forbidden\" errors. Standard Linux file permissions (`chmod 644 /etc/httpd/conf.conf.d/custom.conf`) are confirmed to be correct, and the `httpd` service is running as the `apache` user. Upon reviewing system logs, specific SELinux denial messages are observed related to the `httpd_t` domain attempting to read a file with an unexpected context. Which of the following actions is the most appropriate and effective first step to resolve this access issue, ensuring compliance with SELinux policy?

Accepted Answer

Execute `restorecon -Rv /etc/httpd/conf.d/custom.conf` to reset the file's SELinux context to the system's default policy.

Question 14

A senior system administrator is tasked with migrating a critical database service from an aging RHEL 8 server to a new RHEL 9 server. The primary objective is to achieve this transition with the absolute minimum service interruption, ensuring data consistency and providing a viable rollback path should unforeseen issues arise immediately after the cutover. Which of the following strategies best addresses these requirements for a robust and efficient service migration?

Accepted Answer

Implement continuous data replication from the RHEL 8 server to the RHEL 9 server, thoroughly test the service on the RHEL 9 server with the replicated data, and then perform a brief, scheduled service stop on the RHEL 8 server to synchronize any final changes before redirecting traffic to the RHEL 9 server.

Question 15

A critical network service on a Red Hat Enterprise Linux server is exhibiting sporadic downtime, causing disruptions for external clients. The service appears to start and run correctly for extended periods, but then unexpectedly stops responding for several minutes before resuming normal operation without manual intervention. The system administrator has confirmed that the service\'s configuration files have not been recently modified and that the underlying network infrastructure is stable. What is the most effective immediate action to gain insight into the root cause of this intermittent service failure?

Accepted Answer

Use `journalctl -u --since "1 hour ago"` to review the service's specific log entries from the recent period of observed malfunction.

Question 16

Anya, a system administrator for a financial institution, is tasked with implementing a new network security policy on a Red Hat Enterprise Linux server. This policy requires all internal communication traffic to be tagged with VLAN ID 100. The server currently has a static IP address of $192.168.1.100/24$, a gateway of $192.168.1.1$, and DNS servers at $8.8.8.8$ and $8.8.4.4$, all configured via NetworkManager. Anya needs to modify the existing network connection for the primary Ethernet interface, `eth0`, to incorporate this VLAN tagging without losing or re-entering the current IP configuration. Which `nmcli` command would most efficiently achieve this objective?

Accepted Answer

nmcli connection modify "System eth0" 802-3-ethernet.vlan-id 100

Question 17

An administrator for a Red Hat Enterprise Linux system, tasked with hosting static web content, has moved the website\'s files from `/var/www/html` into a user\'s home directory at `/home/webuser/public_html`. Standard Linux file permissions have been adjusted to grant read access to the web server user. However, users accessing the website via a web browser receive \"Forbidden\" errors, and system logs indicate SELinux denials related to `httpd_t` attempting to access files with the `user_home_t` context. Which of the following actions is the most appropriate and direct solution to enable the web server to serve the content from its new location while maintaining SELinux security?

Accepted Answer

Change the SELinux context of the files and directories within `/home/webuser/public_html` to `httpd_sys_content_t`.

Question 18

An administrator is tasked with deploying a new web application on a Red Hat Enterprise Linux system that hosts sensitive user financial data. To mitigate the risk of accidental data exposure or corruption, the administrator must ensure that the new application\'s files and processes are strictly isolated from the existing user data directories and critical system services. Which combination of actions would most effectively achieve this resource segregation and adhere to the principle of least privilege?

Accepted Answer

Create a dedicated system group for the new application, assign a new unprivileged system user to this group, change the ownership of the application's data directory to this new user and group, and set restrictive permissions on the data directory and its contents.

Question 19

A system administrator is tasked with configuring an Apache web server on a Red Hat Enterprise Linux system. The web application hosted on this server needs to fetch data from an external REST API. After ensuring that the file contexts for the web content are correctly set to `httpd_sys_content_t`, the administrator observes that the web application is failing to retrieve data, and system logs indicate SELinux denials related to network connections initiated by the `httpd` process. Which action would most effectively and securely resolve this issue?

Accepted Answer

Enable the `httpd_can_network_connect` SELinux boolean.

Question 20

Anya, a system administrator responsible for a critical Red Hat Enterprise Linux infrastructure, is frequently faced with a dynamic operational landscape. Urgent security patches, unexpected application failures, and stakeholder requests for new features often arrive simultaneously, forcing her to constantly re-evaluate her workload. Her current method of tackling tasks as they appear is proving inefficient, leading to delays in both critical maintenance and planned upgrades. Anya needs to adopt a more structured yet flexible approach to manage these competing demands effectively, ensuring system stability and progress on strategic objectives. Which of the following strategies best equips Anya to navigate this complex environment while adhering to best practices for Red Hat system administration?

Accepted Answer

Implement a hybrid Kanban and Scrum methodology for task management, allowing for daily stand-ups to reassess priorities, short sprint cycles for feature development, and a dedicated "buffer" capacity for immediate incident response and patching, all while maintaining detailed change logs for auditability.

Question 21

Anya, a seasoned system administrator, is spearheading the rollout of a critical security update across numerous Red Hat Enterprise Linux servers managed by a globally distributed team. The update necessitates meticulous configuration of network firewalls and the fine-tuning of SELinux policies. Team members operate in disparate time zones, and initial communication attempts have revealed varying degrees of comprehension regarding the technical intricacies of the update. Anya must ensure the successful and consistent application of the new security measures while maintaining team cohesion and operational efficiency during this transition. Which of Anya\'s core competencies is most crucial for her to effectively navigate this complex implementation and lead her team to success?

Accepted Answer

Leadership Potential

Question 22

Anya, a seasoned system administrator for a financial services firm, is responsible for maintaining a critical database server that currently runs on a Red Hat Enterprise Linux version that has long since passed its end-of-life. The business requires this server to be upgraded to the latest stable RHEL 9 release to benefit from security patches, performance improvements, and support for newer hardware. However, Red Hat\'s official documentation indicates that a direct in-place upgrade from Anya\'s current RHEL version to RHEL 9 is not a supported path due to the significant architectural changes between the versions. Anya must devise a strategy that minimizes operational disruption and guarantees the integrity of the sensitive financial data housed within the database.

Which of the following approaches represents the most prudent and reliable method for Anya to achieve this migration while adhering to best practices for unsupported operating system transitions and critical data management?

Accepted Answer

Install RHEL 9 on a new, separate server or virtual machine, configure the database environment, and then migrate the database and its associated data from the old server to the new RHEL 9 system.

Question 23

A system administrator, tasked with maintaining a critical web server on a Red Hat Enterprise Linux system, notices that the Apache web server process (httpd) is unable to serve content from a newly designated directory `/var/www/custom_content`. Standard file permissions (`chmod`, `chown`) have been verified and appear correct for the user running Apache. Despite these checks, access is still denied, indicated by errors in the Apache error logs. What is the most effective command-line sequence to identify the specific SELinux policy violation and generate a potential solution for this access issue?

Accepted Answer

Use `ausearch -m AVC -c httpd -f /var/www/custom_content | audit2allow -M custom_httpd_access`

Question 24

Anya, a system administrator for a financial services firm, is tasked with upgrading a critical customer-facing application hosted on a Red Hat Enterprise Linux server. The application must remain accessible to clients throughout the upgrade process, which involves migrating the application and its database to a new, more powerful server. Anya needs to implement a strategy that ensures the least possible interruption to service during the transition. Which of the following approaches would be most effective in achieving this objective?

Accepted Answer

Configure a virtual IP address using `keepalived` on the new server to take over from the old server, ensuring clients connect to the new system seamlessly once the application and database are fully operational.

Question 25

Anya, a system administrator for a growing e-commerce platform, is alerted to a significant slowdown in the web application hosted on a RHEL 9 server. Users are reporting extremely long page load times. Initial monitoring indicates that the `httpd` service is consuming an unusually high percentage of CPU resources. Anya needs to quickly diagnose the root cause and implement a solution with minimal disruption to ongoing customer transactions.

What sequence of actions would be most appropriate for Anya to undertake to effectively troubleshoot and resolve this performance bottleneck?

Accepted Answer

Review the `httpd` access and error logs for unusual patterns or error messages, then utilize `top` or `htop` to pinpoint specific `httpd` processes consuming excessive CPU, followed by an investigation into the web application's code and configuration for inefficiencies.

Question 26

An administrator observes that the Apache web server (`httpd`) on a Red Hat Enterprise Linux system, operating with SELinux in enforcing mode, is failing to serve content from a newly created, custom directory. The system logs indicate Access Vector Cache (AVC) denial messages related to `httpd` attempting to access this directory. To efficiently diagnose and resolve this specific access issue while maintaining robust security, what is the most appropriate sequence of commands to identify the denial and generate the necessary policy adjustment?

Accepted Answer

Execute `ausearch -m AVC -ts recent | audit2allow -M httpd_custom_dir` followed by `semodule -i httpd_custom_dir.pp`.

Question 27

A Red Hat Enterprise Linux system administrator has deployed a custom-built application that listens on port 8080 and serves static content from `/srv/customapp`. After installation, users report that they cannot access the application\'s web interface, and system logs indicate SELinux is blocking access due to unclassified file contexts. The administrator has confirmed the application itself is running correctly and listening on the specified port. What is the most effective command to resolve the SELinux access issue for the application\'s content files and directories?

Accepted Answer

`restorecon -Rv /srv/customapp`

Question 28

Anya, a seasoned Red Hat system administrator, is tasked with deploying a critical security patch across a heterogeneous environment of RHEL 7 and RHEL 9 servers. The patch involves modifying kernel parameters via `sysctl.conf` and updating firewall rules using `firewalld`. However, due to subtle differences in default configurations and the availability of certain `firewalld` rich rule syntax between RHEL 7 and RHEL 9, a single, universally applied automation script is proving inefficient. Anya must adjust her approach to account for these version-specific nuances, potentially developing separate configuration sets or employing conditional logic within her deployment scripts, all while racing against an active threat. Which behavioral competency is Anya primarily demonstrating by adjusting her deployment strategy to accommodate the RHEL version differences and time pressure?

Accepted Answer

Adaptability and Flexibility

Question 29

An organization mandates that all new services deployed on Red Hat Enterprise Linux infrastructure must adhere to a specific set of hardening guidelines before going live, including strict SELinux policy enforcement, granular network access control via `firewalld`, and least-privilege `sudo` configurations. A critical business application, requiring immediate deployment, has a tight deadline. What strategic sequence of actions best balances the urgency of deployment with the non-negotiable security compliance requirements?

Accepted Answer

Implement SELinux policy adjustments, configure `firewalld` rules for the service, establish `sudo` privileges for service accounts, install the application packages, configure the service, and then enable it with `systemd`.

Question 30

A seasoned Red Hat system administrator, responsible for a high-availability cluster of critical application servers, is informed of a sudden strategic shift by upper management. The organization has decided to migrate a significant portion of its virtualized workloads to a proprietary, vendor-specific virtualization platform that has limited internal documentation and a steep learning curve. This directive directly conflicts with the administrator\'s current, well-established deployment and management strategies for the existing infrastructure. The administrator must now rapidly integrate this new, unfamiliar technology into their operational workflow, ensuring minimal disruption to production services while also needing to re-evaluate their existing resource allocation and deployment strategies. Which behavioral competency is most critically tested and required in this scenario for the administrator to successfully navigate the situation and maintain operational integrity?

Accepted Answer

Adaptability and Flexibility

RH133 Red Hat Linux System Administration Free Practice Test — 30 Questions

A lot more is already mapped out

About the RH133 Red Hat Linux System Administration Certification