Study Guide - Assessment Test Flashcards

Question

edquota

Answer 1

* Command to edit user and group disk quotas using a text editor * Allows setting soft limits, hard limits, and grace periods for disk usage

Answer 2

* Activates the quota system for specified filesystems * Enables enforcement of previously configured disk quotas

Answer 3

* Generates reports on disk usage and quotas for users and groups * Displays current usage statistics relative to set quota limits

Answer 4

* Scans filesystems and creates or updates quota database files * Rebuilds quota tables to ensure they accurately reflect current disk usage

Answer 5

**The first partition on the second SCSI storage device** Option A is the correct answer because Linux uses the /dev/sdxx format for SCSI and SATA raw devices. The device is represented by a letter, starting with a, and the partition is represented by a number, starting at 1. So /dev/sdb1 references the first partition on the second SCSI or SATA device. Option B would be referenced by the /dev/sda2 file, so it is incorrect. Option C would be referenced by the /dev/hdb1 file, so it is incorrect. Option D would be referenced by /dev/hda2, so option D is incorrect, and option E would be referenced by /dev/sdb2, so it is incorrect.

Answer 6

**lvcreate** The lvcreate program creates a logical volume from multiple partitions that you can use as a single logical device to build a file system and mount it to the virtual directory, so option C is correct. The mkfs program creates a filesystem on a partition but doesn’t create a logical volume, so option A is incorrect. The pvcreate program identifies a physical volume from a partition but doesn’t create the logical volume, so option B is incorrect. The fdisk program creates and modifies physical partitions, not logical volumes, so option D is incorrect. The vgcreate program creates a volume group for grouping physical partitions but doesn’t create the logical volume, so option E is incorrect.

Answer 7

* Creates a volume group from one or more physical volumes in LVM * Acts as a container for logical volumes and manages physical storage allocation

Answer 8

* Partition table manipulator for creating, deleting, and modifying disk partitions * Traditional text-based tool for disk partitioning operations

Answer 9

* Creates logical volumes within a volume group * Allows specifying size, name, and other attributes for the logical volume

Answer 10

* Initializes physical volumes for use with Logical Volume Manager (LVM) * Prepares disks or partitions to become part of volume groups

Answer 11

* Creates a new filesystem on a disk partition or device * Supports various filesystem types (ext4, xfs, etc.) via format mkfs.type

Answer 12

* **The zip utility** * **The tar utility** * **The rsync utility** * **The dd utility** The zip, tar, rsync, and dd utilities all can be used to create data backups. Therefore, options B, C, D, and E are correct answers. The gzip utility can be used after a backup is created or employed through tar options to compress a backup, so option A is the only wrong choice.

Answer 13

**The /proc/modules file** The /proc/modules file has the same information that is displayed by the lsmod utility (though the lsmod utility formats it much nicer). Therefore, option B is the correct answer. The modinfo utility provides detailed module data, whereas lsmod shows only brief information. Thus, option A is a wrong answer. The /etc/modules.conf file is a kernel module configuration file, and it does not provide the same information as the lsmod utility. Therefore, option C is also an incorrect answer. The insmod command is used to dynamically load kernel modules, and thus it is a wrong answer. The /run/modprobe.d/ * .conf files are kernel module configuration files, and they do not provide the same information as the lsmod utility. Therefore, option E is also an incorrect choice.

Answer 14

used to dynamically load kernel module

Answer 15

**The modprobe utility** The modprobe utility along with its -r switch is the utility to employ for removing (unloading) a kernel module along with any of its dependencies. Therefore, option E is the correct answer. The rmmod utility will remove a kernel module but not any of its dependencies. Thus, option A is a wrong answer. The modinfo command does not unload kernel modules but instead displays detailed information concerning a specified module. Therefore, option B is an incorrect choice. The cut utility is used to filter text files and display the filtered text to STDOUT. It is not involved in kernel module removal, and thus option C is a wrong choice. The depmod utility is used to create a list of modules and their dependencies, but it is not used to remove modules. Therefore, option D is an incorrect choice.

Answer 16

remove a module but not its dependencies

Answer 17

displays detailed information concerning a specified module

Answer 18

used to create a list of modules and their dependencies

Answer 19

Sticky bit The sticky bit assigned to a directory restricts all of the files in that directory so that only the file owner can delete the file, even if a user account is in the group that has write permissions, so option C is correct. The SUID bit allows a standard user to run an application with the file owner permissions but doesn’t block users from deleting shared files, so option A is incorrect. The GUID bit is used on a directory to ensure that all files created in the directory have the same group as the directory, but it doesn’t prevent users in that group from deleting files, so option B is incorrect. The Read and Write standard permission bits control access to read to a file or write to a file, but they don’t block users from deleting a file, so options D and E are both incorrect.

Answer 20

Group User ID * Special permission that allows a user to execute a file with the permissions of the file's group * Set with chmod g+s and appears as an "s" in the group execute permission field

Answer 21

Set User ID * Permission that enables a program to run with the privileges of the file owner, not the user executing it * Set with chmod u+s and commonly used for programs that require elevated privileges

Answer 22

* Special permission primarily used on directories to restrict file deletion * When set, only the file owner, directory owner, or root can delete files, even if others have write permissions * Set with chmod +t and appears as a "t" in the others execute permission field

Answer 23

**The /etc/pam.d/ directory** The /etc/pam.d/ directory contains the various PAM configuration files. Therefore, option D is the correct answer. The other directory names are made up. Thus, options A, B, C, and E are incorrect answers.

Answer 24

**The ssh utility’s command‐line options.** The settings within the ~/.ssh/config file can be overridden by various ssh utility options provided at the command line. Therefore, option B is the correct answer. The settings in the /etc/ssh/ssh_config file can be overridden by both the settings in the ~/.ssh/config file and the ssh utility’s command‐line options, so option A is a wrong answer. The /etc/ssh/sshd_config file is the sshd daemon’s configuration file, and it deals with providing the SSH services, not in setting the configuration for the SSH client. Therefore, both options D and E are incorrect choices.

Answer 25

**Pluggable Authentication Modules in Linux PAM is a flexible authentication framework that allows Linux system administrators to configure how applications authenticate users. ** Key aspects include: * A modular system that separates authentication mechanisms from applications, enabling changes to authentication methods without modifying applications * Configured through files in /etc/pam.d/ that define authentication rules for different services * Provides four primary module types: authentication (auth), account management, password management, and session management * Allows for stacking multiple authentication methods (like password, biometrics, smart cards) for the same application Enables centralized authentication policy across the system Supports integration with various authentication backends including LDAP, Active Directory, and local user databases PAM has become the standard authentication framework in most Linux distributions, making it easier to implement and manage complex authentication requirements.

Answer 26

**journalctl** The systemd-journald application uses its own binary file format for the journal file and requires the journalctl file to read it, so option A is correct. The syslogd and klogd applications are syslog loggers and not able to read the systemd-journald journal file, so options B and C are incorrect. The systemd-journald application itself only adds event messages to the journal and doesn’t read it, so option D is incorrect. Since the journal file is in binary format, you can’t read it using standard text editor programs, so option E is incorrect.

Answer 27

**To map a service name to a port and protocol** The /etc/services file may be used by a firewall, such as UFW, to map a particular service name to its port and protocol. Thus, option C is the correct answer. The file is not used to designate remote services to block or store a firewall’s ACL rules. Therefore, options A and B are wrong answers. The Linux firewall applications do not use the /etc/services file to determine if a port can be accessed or what local services can send out packets. Thus, options D and E are incorrect choices.

Answer 28

* **It is used by firewalld.** * **It is used by UFW.** * **It provides code hooks into the Linux kernel for firewall technologies to use**. * **It is used by iptables.** Used by firewalld, UFW, and iptables, netfilter provides code hooks into the Linux kernel for firewall technologies to use in order to implement fully functional firewall capabilities. Therefore, options A, B, C, and D are all correct answers. Unfortunately, netfilter cannot provide firewall services on its own. Thus, option E is the only incorrect choice.

Answer 29

**Bandwidth** Bandwidth is a measurement of the maximum data amount that can be transferred between two network points over a period of time. Therefore, option A is the correct answer. Throughput is a measurement of the actual data amount that is transferred between two network points, and thus option B is a wrong answer. Saturation occurs when network traffic exceeds capacity, but it is not a measurement. Thus, option C is an incorrect answer. Latency is the time between a source sending a packet and the packet’s destination receiving it. Therefore, option D is a wrong choice. Routing is the process of forwarding IP packets to the appropriate destination. Thus, option E is also an incorrect answer.

Answer 30

a measurement of the actual data amount that is transferred between two network points

Answer 31

occurs when network traffic exceeds capacity, but it is not a measurement

Answer 32

Latency is the time between a source sending a packet and the packet’s destination receiving it

Answer 33

A measurement of the maximum data amount that can be transferred between two network points over a period of time

Answer 34

**vmstat** The vmstat utility provides a lot of memory statistics, including disk I/O specific to swapping. Therefore, option E is the correct answer. The ipcs -m command allows you to see shared memory segments instead of disk I/O specific to swapping. Thus, option A is the wrong answer. The cat /proc/meminfo command displays detailed information concerning a system’s RAM. Therefore, option B is an incorrect answer. The free command shows memory items such as free memory, used memory, and buffer/cache usage. Thus, option C is a wrong choice. The swapon -s command displays swap space elements such as type, name, and priority. Therefore, option D is also an incorrect choice.

Answer 35

* Displays information about active inter-process communication (IPC) facilities * Shows details about shared memory segments, message queues, and semaphore arrays * The ipcs -m command allows you to see shared memory segments

Answer 36

* Activates swap space devices or files for virtual memory use * Can display currently active swap areas when used with the -s option * The swapon -s command displays swap space elements such as type, name, and priority

Answer 37

**List Open Files** * Lists all open files and the processes that opened them * Powerful diagnostic tool for identifying which processes are using specific files, directories, or network connections * Helps troubleshoot issues like "device busy" errors or identifying processes holding file locks

Answer 38

* **pkill** * **kill** The pkill and kill commands allow you to send Linux process signals to running applications, so options B and D are correct. The renice command allows you to change the priority level of a running application but not send process signals to it, so option A is incorrect. The nice command allows you to start an application with a specified priority level but not send process signals to applications that are already running, so option C is incorrect. The pgrep command allows you to display running applications, but it doesn’t send process signals to them, so option E is incorrect.

Answer 39

* Changes the priority (nice value) of running processes * Allows adjusting process scheduling priority without restarting the process

Answer 40

* Starts a program with a modified scheduling priority (niceness) * Higher nice values result in lower process priority, being "nicer" to other processes

Answer 41

* Searches for processes by name, user, or other attributes and returns their PIDs * Useful for scripting and for finding process IDs without using complex grep commands

Answer 42

**Add export prior to PS1 on the same line in the file.** The problem is directly related to a missing export command prior to the PS1="My Prompt: " in Annika’s environment file. When this environment variable is exported and when it is set, it will be set in any started subshells. Thus, option C is the correct answer. Since Annika’s environment file exists, the $HOME/.profile file is not used. Thus, option A is a wrong answer. A user prompt can be changed in a subshell, so option B is also an incorrect answer. Changing Annika’s default shell will not fix this issue, so option D is a wrong choice. If Annika changes the last field in her password record to /sbin/false, she will no longer be able to log into the system using her account. Therefore, option E is an incorrect choice.

Answer 43

**A subshell in Linux is a child shell process that's spawned by the current shell.** Key aspects include: * It's a separate execution environment that inherits environment variables, functions, and aliases from the parent shell * Changes made to variables, working directory, or environment within a subshell don't affect the parent shell * Created automatically when commands are grouped with parentheses (command1; command2) or when running commands in the background with & * Also created when using command substitution with backticks `command` or $(command) * Pipe operations (|) typically create subshells for each command in the pipeline * Useful for isolating operations that should not affect the current shell environment * Has its own process ID distinct from the parent shell **Subshells are an important concept for understanding process isolation and environment inheritance in shell scripting.**

Answer 44

* **/proc** * **/sys** The Linux kernel uses the /proc and /sys directories to produce dynamic files that contain information about the kernel and system, so options B and D are correct. The /dev folder contains files for communicating with devices, not kernel and system information, so option A is incorrect. The /etc directory contains application configuration files, not files created by the kernel for displaying kernel and system information, so option C is incorrect. The /dev/mapper directory is used for virtual files mapped to physical device files for LVM and LUKS, not kernel information, so option E is incorrect.

Answer 45

**/etc/X11** The /etc/X11 directory contains configuration files used by both the X.org and XFree86 applications for controlling the X Windows graphical environment on the Linux system, so option C is correct. The /dev directory contains device files used to send and receive data from devices, not the X Windows configuration files, so option A is incorrect. The kernel uses the /proc and /sys directories to create dynamic files that show kernel and system information, not contain X Windows configuration files, so options B and D are incorrect. The /proc/interrupts file contains information about hardware interrupts currently used by hardware devices on the system, not X Windows configuration files, so option E is incorrect.

Answer 46

* **The firewall-cmd command** * **The ufw command** * **The iptables command** Since the problem involves a remote server, you need to investigate the firewall access control lists (ACLs) on both the local and remote systems. Therefore, depending on the firewall employed, you can use the firewall-cmd, ufw, or iptables command in the troubleshooting process. Thus, options A, B, and C are the correct answers. The getacl and setacl commands deal with file inheritance issues, and therefore options D and E are incorrect choices.

Answer 47

* Displays file and directory Access Control Lists (ACLs) * Shows extended permissions beyond the standard user/group/other model

Answer 48

* Sets or modifies Access Control Lists (ACLs) on files and directories * Allows fine-grained permission control beyond traditional permission bits

Answer 49

**$UID** The $UID environment variable contains the numeric user ID value of the user account running the shell script, so option B is correct. The $USER environment variable contains the text user name of the user account running the shell script, not the numerical user ID value, so option A is incorrect. The $BASH environment variable contains the path to the executable Bash shell, so option C is incorrect. The $HOME environment variable contains the location of the home directory of the user account running the shell, so option D is incorrect. The $1 positional variable contains the first parameter listed on the command‐line command when the shell script was run, so option E is incorrect.

Answer 50

**At midnight on the first day of every month** The cron table format specifies the times to run the script by minute, hour, day of month, month, and day of week. Thus the format 0 0 1 * * will run the command at 00:00 (midnight) on the first day of the month for every month. That makes option B correct, and options A, C, D, and E incorrect.

Answer 51

**git** This git package provides utilities to set up Git VCS on a system, so option E is the correct answer. The git-vcs package is made up, so option A is a wrong answer. The GitHub, gitlab, and Bitbucket packages are also made up, but they have similar names as cloud‐based remote repositories used with Git (GitHub, GitLab, BitBucket). Therefore, options B, C, and D are also incorrect choices.

Answer 52

**You are placed in an editor for the COMMIT_EDITMSG file.** If the -m option with an argument is not tacked onto the git commit command, you are placed into the vim editor to edit the COMMIT_EDITMSG file. Thus, option C is the correct answer. All the other options are made up and therefore incorrect.

Answer 53

**Microsoft Azure** The Microsoft Azure cloud‐based virtualization service provides blobs, which are large unstructured data storage that is offered over the Internet and can be manipulated with .NET code. Therefore, option E is the correct answer. Amazon Web Services (AWS) and Digital Ocean are both cloud‐based virtualization services, but they do not employ storage called blob, so options A and C are wrong answers. KVM is a hypervisor, not a cloud‐based virtualization service, so option B is an incorrect answer. GitHub is a cloud‐based remote repository used in version control, so option D is also an incorrect choice.

Answer 54

**SDN** A software‐defined network (SDN) is a networking method for controlling and managing network communications via software that consists of a controller program as well as two APIs. Thus, option C is the correct answer. Thick provisioning and thin provisioning refer to virtual storage configurations, not networking methods, so options A and B are wrong answers. Network address translation (NAT) is a virtualization network adapter configuration, which operates similarly to a NAT router in a network. Therefore, option D is an incorrect answer. A VLAN is a virtual (logical) LAN configuration, and thus, option E is an incorrect choice as well.

Answer 55

* **Kubernetes** * **Swarm** Only Kubernetes and Swarm are orchestration systems. Therefore, options B and D are correct answers. Mesos needs Marathon to implement an orchestration engine, so option A is a wrong answer. Splunk can be used as a monitoring tool in an orchestrated environment, but it is not an orchestration system, so option D is also a wrong choice. Amazon Web Services (AWS) is cloud‐based virtualization services on which you can use orchestration tools, but it is not an orchestration engine. Thus, option E is also an incorrect choice.

Answer 56

Apache Mesos in Linux * A distributed systems kernel that abstracts CPU, memory, storage, and other resources across clusters * Enables fault-tolerant and elastic distributed systems through a common resource management layer * Functions as a cluster manager that provides efficient resource isolation and sharing across distributed applications/frameworks * Uses marathon toi implement an orchestration engine

Answer 57

Docker Swarm * Native clustering and orchestration tool for Docker containers * Turns a group of Docker hosts into a single virtual host with built-in load balancing * Provides declarative service management, scaling, and rolling updates for containerized applications

Answer 58

* Automates deployment, scaling, networking, and management of containerized applications * Coordinates multiple services and components across distributed infrastructure * Handles load balancing, service discovery, storage management, and fault tolerance

Answer 59

* **Automated configuration management** * **Self‐healing** * **Agentless monitoring** * **Build automation** The concepts listed in options A, B, D, and E are all used in container orchestration. While DevOps benefits from container orchestration and often employs it, it is not used within container orchestration. Thus, option C is an incorrect choice.

Answer 60

**/etc/securetty** The /etc/securetty file provides a list of locations from which users can’t log in using the root user account, so option C is correct. The /etc/cron.deny file prevents users from scheduling jobs, not logging in as the root user account, so option A is incorrect. The /etc/hosts.deny file blocks access from remote network hosts; it doesn’t block root access from local terminals or the console, so option B is incorrect. The /etc/login.warn and /etc/motd files contain messages that are displayed at login time; they don’t block users from logging in as the root user account, so options D and E are incorrect.

Answer 61

**auditd** The auditd program monitors system activity, including user file and directory access, and logs events based on rules you create. Thus, option C is correct. The chroot utility restricts applications to a specific location in the virtual filesystem but doesn’t log user file and directory access, so option A is incorrect. The LUKS system encrypts disk partitions but doesn’t log user file and directory access, so option B is incorrect. The klist and kinit programs are used for Kerberos user authentication, not logging user file and directory access, so options D and E are both incorrect.

Answer 62

* Changes the apparent root directory for a running process and its children * Creates isolated environments for testing, recovery, or security purposes

Answer 63

* Standard for disk encryption in Linux, providing strong security for data at rest * Manages multiple passwords, key slots, and supports various cipher modes

Answer 64

* Linux's system auditing daemon that logs system calls and security events * Provides detailed tracking of file access, user activity, and system changes for compliance and security monitoring

Answer 65

* Displays Kerberos authentication tickets currently in the user's credential cache * Shows ticket expiration times and encryption types for current Kerberos sessions

Answer 66

* Obtains and caches Kerberos authentication tickets for a user * Establishes identity for accessing Kerberos-secured network services

Answer 67

**cd -** The cd - command will return your process to its previous directory in the virtual directory system, so option D is the correct answer. The cd and cd ~ commands both return your process to your home directory, which was not necessarily the previous directory. Therefore, options A and C are wrong answers. The exit command causes your process to exit its current shell, not return to the previous directory, so option B is also an incorrect answer. The return command is used in Bash shell scripts to return from a function or return from a sourced script. Thus, option E is also an incorrect choice.

Study Guide - Assessment Test Flashcards

(91 cards)