Deck 4

Question 1

sed -r with ‘/’ as delimiter and what else what else to be valid?

-sig…allows a process to finish up before being killed

PREROUTING is a PROXY SERVER command in iptables

Answer 1

-double quotes

-term

Question 2

-ip route add ADDS what?

this command (if [ -f “$filename” ]; then) NEEDS to have teh FUCKING ; before the ‘then’

Answer 2

-pull

-a PERSISTENT route

Question 3

copy a ssh key file to a server using scp and…

Answer 3

-ssh-copy-id

Question 4

semange manages SELinux policies. semange -…= ADDS a new rule for a port (semanage port -a -t http_port_t -p tcp 6379)

/etc/systemd/…. = holds system journal

umask default is 666 for files, 777 for directories. Values subtracted from this represent what the permissions will be for whoever (HINT: they have to EQUAL 7)

Answer 4

-a

-journald.conf

Question 5

if logsearch.service shows a timeout in log, increase the….

df -i= checks INODES (good for if disk appears bit full)
fdisk -l =checks….

lsblk= shows MOUNT points and other info about block devices

Answer 5

TimeoutStartUSec config

-partitions

Question 6

du -…= shows disk USAGE

….-n 20 shows LAST 20 lines

Containers are stateless

Answer 6

-sh

-tail

Question 7

an ….is a static specification for a container

docker …shows actively running containers

docker images shows docker images

Answer 7

-image

-ps

Question 8

docker run and the…number can be used to run

docker build builds…

set SGID bits with 2 (ex 2744), set SUID bits with…

Answer 8

-image

-custom images

-4

Question 9

getenforce is a SELinux term

used to restore context of files and directories in SELinux

Answer 9

-restorecon

Question 10

docker run -it creates an…container to do bash stuff

docker run does NOT do an interactive/adminstrative interface

install virtual machines with what command?

Answer 10

-interactive

-virt install

Question 11

….sh is used to manage virtual machines

free commands shows RAM. Free -h shows used and unused memory and…usage

visudo checks errors in ….file

Answer 11

-vir

swap

-sudoer

Question 12

docker image tag test allows assigning?

iptable forward is for LEAVING, input is for COMING. ALSO IPTABLES HAS NO COLONS!!!!

/boot/efi is mount point for…

Answer 12

-versions

UEFI

Question 13

for remotes apps that need/have GUIs, $…..must be set so their gui(s) can be viewed locally

initrd loads when system BOOTS

Answer 13

-DISPAY

Question 14

sda is SATA! SDA IS SATA!

-git pull is used to UPDATE an already there local repo. git…creates the repo locally on your machine

git clone copies ALL files from a REMOTE repo. git pull copies only MODIFIED files

Answer 14

-clone

Question 15

ln -s creates a…

terraform output has {}

Answer 15

-softlink

Question 16

mkswap to create swap space, then….to turn on swap. Useful if you have use fdisk -l and see no swap space

-uniq -d shows

if mount point “does not exist”, create a

Answer 16

-swapon

-repeated lines

directory for it.

Question 17

lsmod shows….like kvm, ccm, etc

before using locate command to find recently downloaded files, us ……db

sysconfig/network contains….info

Answer 17

-modules

-updatedb

hostname

Question 18

-f disables when using useradd -d/var/www/ -g service_accounts -G www -f 0 command

modify /etc/default/ grub NOT…

Answer 18

-grub.cfg (config) file

Question 19

echo tmp&raquo_space; .gitignore does what?

echo $(env TZ=America/Chicago date)&raquo_space; mylog.txt

-env command runs program without changing current one,

Answer 19

adds tmp directory and its files to gitignore file so they are IGNORED

-temporarily changes timezone to Chicago and appends that info to mylog.txt

Question 20

systemd-…. blame diagnoses slow boot issues. give list of services/start times

modprobe -r removes a driver, modprobe and the driver name adds it

….allows dynamic printer detection

Answer 20

-analyze

-cups

Question 21

git…helps you get info from a repo

tar -czh is used for….

to install a tar executable (somename tar.gz), use tar, configue and….

Answer 21

-config

-tarring symbolic links (c=tar, z=compress w/gzip, h=creates link)

-make

Question 22

to have su privilege, user needs to be in….group

to load a module into the kernel, use…command

Answer 22

-wheel

-modprobe

Question 23

sysctl -p with ip forward=1 will make ip forwarding…

git checkout is used to switch…

lsattr shows an immutable bit (i)

Answer 23

-persistent

-branches

Question 24

immutable bit stops mods and deletion of a directory. sticky bit only stops…and renaming

chattr+… ONLY allows appending to a file. Can’t modify other contents

apt (being replaced by dnf) and yum both handle dependencies, …doesn’t.

Answer 24

-deletion

-a

rpm

Question 25

fsck is for ext file systems. repair xfs filesystems with xfs_…..

user and group id values are in etc/…..

——a——– in file attributes means?

Answer 25

-repair

-login.defs

can only APPEND to file. Nothing else

Question 26

cpio -o vs -i?

you can also set them there sticky bits by adding a.. (ex. chmod…755)

niceness goes from -20 to 19. -20 is highest priority, 19 is the lowest priority

Answer 26

-o can output to a file, -i inputs FROM a file.
-1

Question 27

dnf history and dnf history undo last is best commands to remove a package

to resolve a linux system not booting, boot on a live CD and Execute grub-install /dev/sdX and reboot

resolve full root filesystem in this order: pvcreate, lvresize, and vgextend

Question 28

single user mode in GRUB is entered by adding rescue target and ….in the kernel line

iptables -t filter -A INPUT -p tcp –dport 4000:5000 -j ACCEPT. -t adds to a table, -j…..

iptables -i and -z

Answer 28

-bin/bash

-jumps to target

Question 29

df is first command to run if you learn a filesystem is full. to find out what is USING that space, use…

use…command than fsck on a partition when trying to repair partition

Answer 29

-du

-telinit 1

Question 30

mdadm -manage (remove then fail)….a RAID array as bad.

to kill a process by user, use pkill …. username

Answer 30

marks

-u

Question 31

ps -ef locates..

with Debian/Ubuntu, you MUST do apt…before apt upgrade

ansible playbooks are written in….language

Answer 31

-runaway processes

-apt update

-yaml

Question 32

/etc/named…… has default config for BIND software package

use pkill to kill a process by name (or a pattern)

docker rm —state exited does what?

Answer 32

-conf

-remove containers in an exited state

Question 33

setting shell to /sbin/nologin disables/limits iterative logins. /bin/nologin also does that too.