Basic Commands Flashcards
(291 cards)
1
Q
What command parses the /proc/meminfo file for easier analysis of memory usage statistics?
A
free
2
Q
Which command displays system usage reports based on data collected from system activity includes type of data and time data was collected?
A
sar
3
Q
Which command exposes the local clock, the universal time, and the hardware clock?
A
timedatectl
4
Q
which command is used by root to set or reset a password for any user. A user can use this command to reset their own password. what does the option -S do?
A
passwd -S --status displays 7 fields login name locked password date of last change minimum age maximum age warning period inactivity period ...ages are expressed in days
5
Q
which command is an interface to the system reference manuals? what do the options -k, -K, -f, -t do?
A
man
- k searches for keywords and displays matches
- K search for text in all manual pages
- f =whatis displays a short description from the manual pages
- t formats in printable format
6
Q
which command displays the amount of disk space available on the file system? Options -h, -i,
A
df -h human readable, -i lists inode information instead of block size
7
Q
Which command estimates file space usage? Options -h, -c, -a
A
du -h human readable, -c produce a grand total, -a write counts for all files not just directories
8
Q
Which command reports central processing unit statistics and input/output statistics for devices and partitions
A
iostat
9
Q
what is the file extension for kernel module files…often found in /usr/lib/modules/
A
.ko
10
Q
What is the configuration directory/file for modprobe?
A
/etc/modprobe.d = directory /etc/modprobe.conf = file
11
Q
Which command is used to add and remove modules from the Linux Kernel? Options -a, -r
A
modprobe -a = to add modules -r to remove modules
12
Q
Which command configures kernel parameters at runtime? Options -a, -w, -p, -e, -r
A
sysctl
- a = display all values currently available -w = when all arguments prescribe a key to be set
- p = –load - load in sysctl settings from a file specified
- e ignore errors
- r only apply settings that match a pattern.
13
Q
Which command shows the status on modules in the linux kernel and their details?
A
lsmod
14
Q
Which command displays information about a particular Linux Kernel module?
A
modinfo
15
Q
Which command is a simple program to insert a module into the Linux Kernel?
A
insmod
16
Q
Which command is a simple program to remove a module from the Linux Kernel?
A
rmmod
17
Q
Which command generates module.dep and maps files? Creates a list of module dependencies by reading each module under /lib/modules/version.
A
depmod
18
Q
Which two commands show a listing of last logged in users? Which one of these shows by default a log of the /var/log/btmp file, which contains all the bad login attempts?
A
last, lastb lastb shows the bad login attempts
19
Q
Which log file in the /var/log/ directory will give you a complete picture of users logins at which terminals, logouts, system events and current status of the system, system boot time, etc.?
A
/var/log/utmp
20
Q
Which log file in the directory /var/log/… give historical data of utmp?
A
/var/log/wtmp
21
Q
Which log file in /var/log/… records only failed login attempts?
A
/var/log/btmp
22
Q
What does sda1 mean?
A
sd = SCSI/SATA, a = first whole drive, 1 = first partition on drive
23
Q
What are the common file attributes a, A, e, i
A
a = file can only be opened in append mode A = file can be opened without changing its atime (last opened time) e = file is using extents for mapping blocks on disk i = immutable cannot be deleted or renamed
24
Q
which command repeats input back to user?
A
echo
25
Which command lists contents of directory?
ls
26
Which command displays the current working directory?
pwd
27
which command changes the current working directory?
cd
28
which command updates timestamp of file or creates file?
touch
29
which command copies a file or directory?
cp
30
which command creates a new directory?
mkdir or newdir
31
which command shows contents of a file on screen?
cat
32
which command breaks output into pages?
less
33
Name three popular text editors?
vim, nano, gedit
34
What are the differences between shutdown -h now, shutdown -h -t 90, and shutdown -r now?
- h now = shutdown now
- h -t 90 = shutdown in 90 seconds
- r now = reboots with no delay
35
Which command switches user?
su
36
Which command outputs a list of recently entered commands?
history
37
What is a feature in which a command-line shell fills in the name of a command you've partially typed?
tab completion
38
Which command clears the screen?
clear or ctrl + l
39
Which command searches the NAME section of man pages based on keyword? Helps to find the correct command to use for a certain task.
apropos
40
Which command displays a brief description of a given command? Helps to figure out what the command does.
whatis
41
Which command displays the info page of a command? Similar to man pages with some improvements, but is not as widely adopted as man pages.
info
42
Which command displays a quick summary of command usage and arguments?
--help
43
What is the directory of documentation for software packages? includes author, licensing, installation, README, etc.
/usr/share/doc/
44
What are some examples of interactive online sources of help?
Usenet newsgroups, mailing lists, Q&A websites, Forums and social media
45
What is an object that represents a person's identity to the operating system and is used to perform certain tasks?
user account
46
What are the three types of user accounts?
Root user, Standard user, Service user
47
What is the term for the local administrative account on a Linux system, typically named root?
superuser
48
What is a best practice that states that users should have as much access as is required to do their job, but no more that that?
Principle of Least Privilege
49
Which command is used to edit the /etc/sudoers file and cverifies syntax before committing changes and can help correct mistakes before they occur, as mistakes in the sudoers file may render server inoperable.
visudo
50
Some distros disable root altogether and enable admin privileges by membership to what group? visudo command is used to edit this group's privileges similar to editing the sudoers file.
The wheel group
51
Which command creates a user account and configures user settings?
useradd
52
useradd command will do what?
create account in /etc/passwd file, references /etc/login.defs, creates user's home directory in /home/account/, and populates home directory from files in /etc/skel
53
What are the functions of the useradd options -c, -e, -s, -D?
-c = sets comment field, -e = sets account expiration date, -s = sets user's default shell, -D = view default config for new users
54
/etc/passwd contains what 7 fields separated by colons?
User name: Password: UserID: GoupID: Comment: Home directory: Login shell
55
What filed contains hashed version of passwords, and who can access it?
/etc/shadow root
56
Which command controls password expiration, warnings, inactive days, etc.?
chage
57
what are functions of the chage command options -E, -l, -M, -m, -W?
-E sets account expiration, -l lists password aging info, -M sets max days password is valid, -m sets minimum days until password can be changed, -W sets number of days before expiration user will be warned
58
What is the significance of #chage -M 90 user1
sets the maximum days user1's password is valid to 90 days, performed by root
59
Which command modifies settings for regular users?
usermod
60
What are the functions of the usermod options -c, -e, -aG, -l
-c sets comment field, -e sets account expiration date, -aG adds user to group and keeps them in existing groups, -l chages user's login name
61
What are two basic ways of locking a user account?
passwd -l , usermod -L
62
What are two basic ways to unlock a user account?
passwd -u , usermod -U
63
Which command deletes a user account? However, it does not delete home directory unless you use what option?
userdel -r
64
What is an access control object that contains multiple users with similar security requirements?
Group Account
65
What file is the storage location for groups, is commonly referenced for group info, contains four fields separated by colons, and should not be edited manually but rather by group commands?
/etc/group
66
What are the four fields in the /etc/group file?
Group name: password requirement: group ID: group list
67
Which command creates groups? By default groups have no members or password.
groupadd
68
What are the functions of groupadd options -g, -f, -o?
-g assign a group ID, -f exit with success if group already exists, -o allow group creation with non-unique ID
69
Which command changes a group's attributes and edits the /etc/group file?
groupmod
70
What are the functions of the groupmod command options -g, -n?
-g change group ID, -n rename group
71
Which command deletes groups from /etc/group file, doesn't delete users?
groupdel
72
Which command displays the user name you are currently logged in as?
whoami
73
Which command determines details of users currently logged in?
who
74
what are three items that the who command will tell you?
user name, system the user is connected to, date/time connected since
75
Which command displays details of logged in users and transactions?
w
76
Which command displays UID/GID? Without options it displays info about logged in user, but you can specify user name to display info about that user.
id
77
Which file enables customization of user's environment, is stored in home directory, and is unique to each user? examples include use of aliases, environment variables, and customize command prompt.
.bashrc
78
Which file provides shell configuration for the initial login, but is only read with first login. The default for this file can be provided through /etc/skel/ directory.
.bash_profile
79
Which directory's contents are automatically copied to the home directory of new users? the useradd command copies contents from this directory.
/etc/skel/
80
This file provides system-wide environmental variables, it is configured if settings need to apply to all users, it is checked first during login process for shell configs, then user customizations are pulled from .profile in their home directory. Admins can use this file to define global settings, but still allow user-specific customization.
/etc/profile
81
Which directory is the storage location for scripts used to set system-wide variables?
/etc/profile.d/ it is recommended to set variables in scripts here rather than edit /etc/profile
82
This file provides system-wide Bash settings? It is different than /etc/profile which is used for variables.
/etc/bashrc
83
What is GPT and what specification is it part of?
GUID Partition Table UEFI
84
What is MBR and what size is it?
Master Boot Record 512 byte-sector in the first sector on the disk
85
What is mdadm?
mdadm is a Linux utility used to manage and monitor software RAID devices
86
What is LVM?
Logical Volume Management. It is a system of managing logical volumes, or filesystems, that is much more advanced and flexible than the traditional method of partitioning a disk into one or more segments and formatting that partition with a filesystem
87
What is Multipath?
Linux multipath provides a way of organizing the I/O paths logically, by creating a single multipath device on top of the underlying devices
88
Why is multipathing important?
Linux multipathing provides connection fault tolerance and can provide load balancing across the active connections. When multipathing is configured and running, it automatically isolates and identifies device connection failures, and reroutes I/O to alternate connections.
89
What is the command localectl ?
Control the system locale and keyboard layout settings
90
fdisk
is a dialog-driven program for creation and manipulation of partition tables. It understands GPT, MBR, Sun, SGI and BSD partition tables.
91
what are the three permission attributes for directories and files?
r = read, w = write, x = execute
92
What are the three Permission Contexts?
u = Owner, g = Group, o = other
93
Which command enables you to modify permissions on files/directories? Can only be done by owner or object or sysadmin.
chmod
94
chmod -c
enables modification of permissions on files/directories, -c report changes made to permissions
95
chmod -f
enables modification of permissions on files/directories, -f hide most error messages
96
chmod -v
enables modification of permissions on files/directories, -v = display diagnostic entry for every object processed
97
chmod -R
enables modification of permissions on files/directories, -R modify permissions recursively
98
Which mode of chmod sets permissions using components and operators such as +, -, =?
Symbolic Mode + grants permissions, - denies permissions, = assigns permissions exactly as provided
99
What does chmod go+rw file1
changes permissions for group and others adding read and write permission for file1
100
In what mode does chmod use octal numbers and shows compete permission as three digit number?
Absolute Mode
101
In Absolute Mode, what do the chmod octal numbers 4, 2, 1 represent?
4 = read, 2 = write, 1 = execute
102
In the Absolute Mode of chmod, what does 764 represent?
owner permissions = 7 (4 read + 2 write + 1 execute), group permissions read +write, other permissions read only
103
What is the result of chmod 640 file1
permissions for file1 are set to owner 6=rw, group = r, others = none (-)
104
What are the default permissions for riles created by ROOT user? and for directories?
644 for files, 755 for directories
105
What are the default permissions for files created by REGULAR users? and for directories?
664 for files, 775 for directories
106
What command alters default permissions on newly created files/directories, can be useful for automating custom permissions for new objects, can be set for session or per-user (in .bashrc), specifies permissions to remove.
umask
107
system wide umask is set in what two files? Where is the default umask for for a specific user?
/etc/basrc /etc/profile for a user = ~/.bashrc
108
the property by which a user can apply and modify the permissions of a file or directory
ownership
109
Who can modify permissions for a file or directory?
owner & root
110
Which command changes the owner, group or both for a file or directory?
chown
111
If you want bob22 to manage a file or directory, but sally1 created the object, which command would allow you allow bob22 to manage permissions for the object?
chown ex: chown bob22 file1
112
You want to change the owner of file1 to jimmy5 and the group to engineers. what command and what would your syntax look like.
#chown jimmy5:engineers file1
113
Which command allows you to schedule a command to execute by setting a command-line parameter?
at
114
the cron daemon is control by what command?
crontab
115
crontab files for system are located in what directory?
/etc/cron.d/
116
crontab files for users are located in what directory?
/var/spool/cron/
117
A distributed version control system primarily used by developers who are collaborating on projects.
git
118
the managing and provisioning of infrastructure through code instead of through manual processes
IaC Infrastructure as Code
119
Ansible, Puppet, Chef, Kubernetes, and OpenStack are all examples of what kind of tools?
Orchestration Tools
120
Ansible uses what kind of configuration files, text does NOT contain curly brackets but has (-)s to help identify it.
YAML YAML is a data serialization language that is often used for writing configuration files
121
What remote desktop software is a free and open source utility that constructs a Remote Desktop Protocol (RDP)-like server for the non-Windows system?
xrdp
122
location includes configuration files for many components, including components that interface with devices.
/etc/
123
location contains device driver files that enable the system and users to access devices themselves
/dev/
124
location contains various files that represent system information reported by the kernel.
/proc/ In particular, the /proc/devices file contains a list of all device drivers that the kernel is currently running, separated by character and block storage devices.
125
location is a virtual file system similar to /proc/ but that focuses more on creating a hierarchical view of device information.
/sys/ In particular, the /sys/devices/ subdirectory includes files that expose details about specific devices.
126
is a computer bus interface standard for attaching storage devices to traditional computers
Serial AT Attachment (SATA)
127
What are the differences between ss and netstat
ss (socket statistics) is a newer, faster, more human readable tool than the deprecated netstat.
ss and its options can display information about how your Linux machine is communicating with other machines, networks, and services; details about network connections, networking protocol statistics, and Linux socket connections.
128
command displays various information about a system's hardware as reported by the kernel.
lsdev
129
command is used to display information about devices that are connected to the system's PCI buses
lspci
130
command is used to display information about devices that are connected to the system's USB buses. This command scans the /dev/bus/usb/ directory for information.
lsusb
131
command shows the status of the printer queue. By default, it will report each print job's rank in the queue, who owns the job, the job number, the files in the job, and the size of the job.
lpq
132
command dumps the system's Desktop Management Interface (DMI) table and presents it in a human-readable format. You can use this command to verify connected devices and whether or not they support certain features
dmidecode
133
command parses the /proc/meminfo file for easier analysis of memory usage statistics
free
134
command displays various statistics amount virtual memory, as well as process, CPU, and I/O statistics
vmstat
135
command lists each detected hardware component on the system and provides details about each device. The command pulls information from many different files in multiple device file locations like /proc/ and outputs in a hierarchical format.
lshw
136
device acts as a control point for communications between network segments. Administrators can configure the device to permit or deny certain kinds of traffic, as well as pass traffic from one network segment to another.
router
137
Network media or cables like __________ are commonly available as _____________ (STP) or _____________ (UTP). It is inexpensive and relatively easy to work with
ethernet, shielded twisted pair, unshielded twisted pair
138
is a human-readable name given to a node that helps people better understand what device they are working with
hostname
139
device acts as a concentrator, centralizing all network connections for a segment to a single device. These devices can be used to manage traffic for performance and security concerns.
switches
140
tool is the most fundamental of the NetworkManager interfaces. It contains many subcommands that enable you to view and configure network information.
nmcli network manager command line interface
141
command can be used to test connectivity and send data across network connections. Systems may be identified by IP address or by hostname.
The command may be spelled out as "netcat" or abbreviated as "nc" depending on the distribution
142
is used to view the routing table. The command is also used to manipulate the routing table, enabling the administrator to configure desired routes.
route
143
is used to store information that is easy for most programming languages to interpret and use. Because it uses a standard JavaScript format, it is also relatively easy for humans to interpret and write.
JSON JavaScript Object Notation
144
may be used to store configuration information that is used on newly deployed virtual machines. This information may be used by cloud-init to install software or create user accounts during the virtual machine's first boot, or may be used by orchestration tools like Ansible.
YAML Ain’t Markup Language (YAML)
145
which 2 commands to discover dependencies before attempting an installation on Red Hat-derivative distributions.
the rpm -qR {package name} and yum deplist {package name}
146
command to verify that all components of a package are installed. This is particularly useful if you believe configuration files or other needed files have been deleted.
rpm -V {package name}
147
command to discover dependencies before attempting installation on Debian-derivative distributions.
apt-cache depends {package name}
148
what command can be used to check for shared library file dependencies for software you will be compiling
ldd [options] {program binary}
149
translate source code written in a human-friendly programming language, such as C or C++, into machine-readable binaries.
Compilers
150
A _________ is a file that contains instructions used by a compiler to build a program from source code. These instructions typically define the resources that the program depends on in order to function properly, as well as any additional directives as defined by the developer.
makefile
151
_________ are storage locations for available software packages. they can be checked by package managers like YUM and APT when installing or upgrading software.
Repositories or repos
152
The rpm command is used to manage RPM packages on Red Hat-derived distributions. What are the two primary options available for Red Hat Package Manager (RPM) to keep software current?
-U upgrades and installs if not already installed -F freshens the installed package but does NOT install the package if not already installed
153
is a package manager that supports repositories, dependency solving, and management of the software lifecycle. It is an openSUSE package manager that supports .rpm packages.
Zypper
154
the ____________ package manager is an improved version of YUM. It uses fewer resources while still maintaining support for the fundamental RPM package manager.
Dandified YUM (DNF)
155
What are the three kinds of repositories?
Local Centralized internal Vendor
156
This apt subcommand for managing packages, is used to uninstall the package and remove its configuration files.
purge
157
This apt subcommand for managing packages is used to uninstall the package, leaving behind its configuration files.
remove {package name}
158
This apt subcommand for managing packages, is used to upgrade the package, or upgrade all packages if none provided (time-consuming).
upgrade {package name}
159
_________ is a Linux kernel framework that handles packets that traverse a network interface. Some of the major services it provides are packet filtering, NAT, and connection tracking.
Netfilter
160
In most Linux distributions, system logs are located in the ___________. Inside this directory are the logs themselves, and each file corresponds to a service, application, or feature
/var/log/ directory
161
A _____________ is a message digest that has been encrypted with a user's private key. Asymmetric encryption algorithms can be used with hashing algorithms to create digital signatures.
digital signature
162
___________ are the most fundamental component of a PKI, and the overarching task of a PKI is to manage digital certificates in a variety of ways.
Digital certificates
163
A ____________ is a server that issues digital certificates for entities and maintains the associated private/public key pair. CAs sign digital certificates so that clients can validate the authenticity of certificates owned by entities.
CA certificate authority
164
A _________________ is a message sent to a CA in which an entity applies for a certificate. It typically includes information that should go into the entity's certificate, like its public key, digital signature, and other identifying information.
CSR Certificate Signing Request
165
is the default context-based permissions scheme provided with CentOS and Red Hat Enterprise Linux (RHEL), and is optionally available on other distributions.
Security-Enhanced Linux (SELinux)
166
is a model in which access is controlled by comparing an object's security designation and a subject's (users or other entities) security clearance.
Mandatory access control (MAC)
167
describe multiple types of information about processes and files that are used in combination to make decisions related to access control. In other words, the permission scheme defines various properties for a file or process, and uses those properties together, rather than in isolation, to determine whether to grant or deny access.
Context-based permissions
168
is packaged with Debian-based and SUSE Linux distributions, whereas SELinux is more commonly associated with RHEL.
AppArmor
169
___________ is a procedure in which data is encoded to reduce the amount of bits that are used to represent that data. The process can significantly reduce the size of a file or collection of files to make the storage and transfer of data more efficient.
compression
170
____________ is an authentication service that is based on a time-sensitive ticket-granting system. It is used as a single sign-on (SSO) method where the user enters access credentials that are then passed to the authentication server, which contains an access list and allowed access credentials.
Kerberos
171
________ is a directory service protocol that runs over Transmission Control Protocol/Internet Protocol (TCP/IP) networks.
LDAP
172
A ________ is any unique object, whether physical or digital, that you possess and that can be used to verify your identity.
token
173
A __________ is a technique of controlling what a process—a user, for example—can access on a file system by changing the root directory of that process's environment.
chroot jail
174
____________ occurs when a user is able to obtain access to additional resources or functionality that they are normally not allowed access to. One of the most common scenarios is when a normal user is able to exploit some vulnerability on a system to gain root-level privileges.
Privilege escalation
175
The ________ command can effectively change a shell variable into an environment variable
export
176
The _______ command will effectively change a shell variable into an environment variable. It can also be used to change the value of existing environment variables. When adding multiple directories, the _____ character is used to separate each directory you wish to add.
export , colon (:)
177
The /usr/local/bin/dailyscript.sh command execution is using an ______________ to the dailyscript.sh script
absolute path
178
The _________ command is used to download the branch of code from the remote repository. This is performed after the local repository is completely setup
git pull
179
The _________ command initializes Git for the specific path that will hold all the project's code. It is the first step in creating the local repository.
git init
180
The ________ command is performed prior to creating the local repository. It configures a Git account
git config
181
The ___________ command is the last step when creating the local repository. This will verify that there is nothing to commit.
get status
182
The _____ command will list the current user's pending jobs. Each job will display information in the following order: [job number] [date] [hour] [year] [queue] [username]. As a superuser, this command will list all automated tasks for all users.
atq
183
_______ is the name of an orchestration tool that uses an agentless architecture to deploy and configure endpoints automatically. It can communicate over Secure Shell (SSH) and Windows Remote Management (WinRM).
Ansible
184
_________ Orchestration does not require extra components at endpoints. It does this by connecting to systems or devices over existing transport mechanisms. SSH is an example of a transport mechanism that can be used to connect to Linux machines. this approach reduces the amount of setup required for agent-based models.
Agentless
185
________ Orchestration requires a software component to reside on the managed device. This may impose additional demands on the organization's environment and require extra setup. For example, this model may require firewall configuration in constrained environments.
Agent-based
186
__________ is the name of an orchestration tool that operates in a client-server architecture. This requires an agent called a ______ client, to run on each managed node. The ______ client downloads and evaluates configuration code, known as recipes from a _____ server. (all the same name)
Chef
187
Which orchestration tool uses YAML files to create repeatable "playbooks" that define the desired configuration state?
Ansible
188
_______ was originally a joint Rackspace and NASA project, usually deployed as an IaaS solution to manage cloud resources. It is an open source software commonly used to create private and public clouds. It can orchestrate the deployment of a Linux, Apache, MySQL, PHP (LAMP) service, for example.
OpenStack
189
__________ is an open source solution that provides container deployment and application orchestration for cloud and on-premises container environments. You define a desired state and this solution configures containers to match that state.
Kubernetes
190
_______ uses _______ files to create repeatable "playbooks" that define the desired configuration state. this is an agentless solution that delivers files over SSH connections. Red Hat emphasizes the use of this solution.
Ansible, YAML
191
The ______ command is used to manage Git repositories. Using this command and subcommands you can create a repository, add files to the repository, commit changes to the repository, pull down files from another repository, and much more. The _________ subcommand is used to create a working copy of an existing repository.
git, clone
192
The _______ subcommand is used with the git command and integrates changes from one branch into a "master" branch.
merge
193
The _______ subcommand used with the git command updates the Git repository with changes and creates a "snapshot" of that repository. These "snapshots" can be useful to compare previous versions of the repository with the "master."
commit
194
The ______ subcommand used with the git command sets options for a repository or for Git users, as well as other global options.
config
195
_____________ is a name for orchestration tools that manage the entire deployment and configuration process through scripting and code files, rather than through traditional software tools. It relies on a single configuration specification to deploy the supporting infrastructure (the operating system) and the necessary applications.
Infrastructure as code
196
print real and effective user and group IDs
id
197
two types of network based booting
PXE and NFS
198
print or control the kernel ring buffer
dmesg
199
send ICMP ECHO_REQUEST to network hosts
ping
200
print effective userid
whoami
201
modify a user account
usermod
202
modify a group definition on the system
groupmod
203
create a new user or update default new user information
useradd
204
create a new group
groupadd
205
change user password expiry information
chage
206
show a listing of last logged in users
last
207
a fast, versatile, remote (and local) file-copying tool
rsync
208
changes group ownership of a file or directory. Useful for applying permissions to a group.
chgrp
209
a special permission bit that provides protection for files in a directory. Only owner or root can delete the object. Ensures other users cant delete but can still w/x. set with chmod, indicated by a t
sticky bit
210
an attribute of a file or directory that prevents it from being modified, even by the root user. indicated by an "i"
Immutable Flag
211
This command is used to list attributes of files/directories.
lsattr
212
lsattr -R
Recursively list attributes of directories and their contents.
213
lsattr -a
list all files and their attributes in directories
214
lsattr -d
list directories like files, instead of their contents when looking at attributes
215
lsattr -v
used to list attributes of files/directories -v = list version number of files
216
Command that is used to change file/directory attributes. Options -R, -v, +i, -i
chattr -R = recursively change attributes of directories and their contents, -v = set version number of file, +i = mark file as immutable, -i = remove immutable attribute
217
A list of permissions attached to an object
Access Control Lists
218
Command that is used to retrieve ACLs of files and directories, output shows metadata about file and permissions info.
getfacl
219
Command used to change permission associate with file/directory ACLs
setfacl
220
setfacl -R
Recursively set ACL options for directories and their contents
221
setfacl -s
Set ACL of an object/replace existing ACL
222
setfacl -m
modify existing ACL
223
setfacl -x
remove entries from existing ACL
224
setfacl -b
remove all ACL entries
225
Troubleshooting Model
1. Identify the problem
2. Establish a theory of probably cause
3. Test the theory to determine the cause
4. Establish a plan of action to resolve the issue
5. Implement a solution or escalate the issue
6. Verify system functionality and implement preventative measures
7. Document findings, actions, and outcomes
226
Permissions Troubleshooting always verify permissions with what command first?
ls -al
227
The mechanism by which a shell maintains settings and other behavioral details about the shell
Shell Environment
228
Computer programs that automate the execution of tasks for a particular runtime/shell environment.
scripts
229
entities whose values change from time to time
variables
230
_____ variable values are not passed on to child processes, but ________ variable values are
shell, environment
231
a variable that is passed onto child shell processes
Environment Variable
232
What does the env command do when not given arguments?
prints environment variables
233
Environment variables returned by the env command include among other things what four basic pieces of information?
HOSTNAME, SHELL, HISTSIZE, USER
234
_______ is an environmental variable in Linux and other Unix-like operating systems that tells the shell in which directories to search for executable files in response to commands issued by a user.
PATH
235
which command can be used to help diagnose latency issues with a disk?
ioping
236
You have created a daemon process from the command line, you want to SUSPEND the process. Which key combination do you use?
Ctrl+Z will suspend the process ...... Ctrl+C kills the process
237
the __________ command formats a swat partition
mkswap . . . the fdisk command is used to create the partition but not to format it
238
which command will show you all of the processes associated with a given argument ex: sshd
pidof
239
in what directory are modules stored?
/usr/lib/modules/{kernel-version}
240
You need to temporarily prevent users from logging in to the system, but maintain root user log in
touch /etc/nologin . . . if this file exists, then users will be prevented from logging in to the system, but root still can
241
Within which directory are the predefined zones for firewalld?
/usr/lib/firewalld/zones/ . . . . . the files are copied to /etc/firewalld/zones when modified
242
the command kill -HUP does what?
will restart a process
243
Which command installs a previously downloaded Debian package?
dpkg -i
244
Within which directory hierarchy will you find configuration files related to printing with the CUPS printing system on a print server?
/etc/cups
245
Which option for yum performs a search of the package cache?
yum search
246
Which command and option will unset an environment variable for the current session?
env -u
247
Which command can be used to listen for netlink messages on a network?
ip monitor
248
Which command is used to turn off AppArmor profiles?
aa-disable
249
T or F: Commands within /etc/rc.local will be executed after the computer has gone into multiuser mode
true - by placing the commands in this file they will execute upon boot
250
what will the command syntax echo s{i,a,e}t produce? (those are curly brackets)
sit sat set
251
what does command and option rmmod -f
it forces the removal of the module
252
which option with git merge can be used to attempt to roll back a merge that has conflicts?
--abort
253
what is sudo -u used for?
to execute a command as a specific user
254
Which command can be used to determine how much time a Linux command takes?
time
255
in /etc/resolv.conf, what will the line nameserver 192.168.1.4 do?
will set the DNS server to the ip 192.168.1.4
256
what is the maxlogins parameter within /etc/security/limits.conf used to control?
controls the number of simultaneous logins for a given account
257
Which PAM module is responsible for enforcing limits such as the maximum number of logins and CPU time used?
pam_limits.so
258
What are the functions of the command and options hwclock -w hwclock -s
the -w option sets the hardware clock to the current system time . . . . . the -s option sets the system time to the hardware clock (these are opposite functions)
259
T or F: The .gitignore file is used to store files that will not be versioned.
True .gitignore file is used within a git repository to indicate files and file patterns that should not be versioned.
260
Within the SELinux configuration, which option controls whether the policy will be targeted or strict?
SELINUXTYPE
261
You need to disable the ability to reboot the Linux computer using the Ctrl+Alt+Del key combination. Within which file will you find the configuration for this key combination?
/etc/inittab
262
Which word pair indicates the beginning and end of a "for loop" and an "until loop" in a bash script?
do; done
263
What is the result of the following command hwclock --systohc --utc
command will set the hardware clock to UTC based on the current system time
264
which option with ioping and ping sets the number of requests to send?
-c
265
which option when used with arp, creates a new entry for a given IP address to MAC pair? What option removes an entry?
-s creates an ARP table entry . . . . -d option removes an entry
266
What EXT tool can be used to change the label that has been applied to a filesystem?
e2label
267
what command indicates the current mode of SELinux?
sestatus
268
What command can be used to change the mode of SELinux to Enforcing?
setenforce Enforcing or setenforce 1
269
You have backgrounded several tasks using &. Which command can be used to view the current list of running tasks that have been backgrounded?
jobs
270
which partition type is used to indicate a software RAID array such as an array built with mdadm?
0xFD
271
is a dialog-driven program for creation and manipulation of partition tables. It understands GPT, MBR, Sun, SGI and BSD partition tables
fdisk
272
ss -t -a
show all tcp ports connected and listening
273
which command is used to display information about the access control list for a given file?
getfacl
274
When using a multipath device, found in /dev/disk/by-multipath, what is the name given to the identifier for that device that is globally unique?
WWID
275
The directory that holds modules. Modules are specific to the kernel.
/usr/lib/modules/[kernel name]
276
command that shows a list of modules that have been loaded. Lets you check to see if a needed module was loaded already.
lsmod
277
command that lists details about a module. Version, kernel, description, etc.
modinfo
278
command that generates a list of dependencies between modules
depmod
279
which command manually loads a module into the kernel, but doesn't search common directories and doesn't look at dependencies?
insmod
280
which command removes/unloads a module, but doesn't look at dependencies.
rmmod [modulename]
281
which command is best for managing modules?
modprobe
282
which module management command uses the dependency lists and maps to manage loading and unloading of modules?
modprobe
283
modprobe automatically looks for modules in what directory that matches the current kernel
/usr/lib/modules/[kernel]
284
Runlevel 1
285
when using the preferred module management command what is the syntax for adding a module?
modprobe
286
when using the preferred module management tool, what is the syntax for removing a module?
modprobe -r
287
Which command looks at device to kernel messages, and is the best command to look for errors when loading modules?
dmesg
288
what is the process of preventing the loading of modules to limit functionality?
blacklisting
289
if you list a module name in this modprobe file, it cannot be automatically loaded
/etc/modprobe.d/blacklist.conf
290
what is the syntax for adding a .conf file using the module name bluetooth, and then to blacklist the module and prevent it from loading?
echo "blacklist bluetooth" >/etc/modprobe.d/bluetooth.conf
291
you have stopped the automatic loading of the example bluetooth module by adding "blacklist bluetooth" to the /etc/modprobe.d/bluetooth.conf file. How would you stop the automatic and MANUAL loading of the module using this same file?
by inserting a line in the bluetooth.conf file that states: install bluetooth /bin/true
