RH302 RedHat RHCE (Redhat Certified Engineer) Free Practice Exam Questions (2025 Updated)

Do the following steps as:

1. /proc is the virtual filesystem, we use /proc to modify the kernel parameters at running time.

# echo “1” >/proc/sys/net/ipv4/ip_forward

2. /etc/sysctl.confwhen System Reboot on next time, /etc/rc.d/rc.sysinit scripts reads the file /etc/sysctl.conf. To enable the IP forwarding on next reboot also you need to set the parameter.

net.ipv4.ip_forward=1

Here 0 means disable, 1 means enable.

Do the following steps as:

Boot the system in Single user mode

Use the passwd command

Do the following steps as:

vi /etc/resolv.conf

nameserver 172.24.254.254

host server1.example.com

We know that every files/directories are owned by certain user and group. And Permissions are defines to owner user, owner group and other.

-rwxr-x---Full permission to owner user, read and write to owner group and no permission to others.

According to question: We should give the full permission to user user1 without changing the previous permission.

ACL (Access Control List), in ext3 file system we can give permission to certain user and certain group without changing previous permission. But that partition should mount using acl option. Follow the steps

vi /etc/fstab

/dev/hda14/dataext3defaults,acl0 1

Either Reboot or use: mount –o remount /data

setfacl –m u:user1:rwx /data

Verify using: getfacl /data

Do the following steps as:

1.vi /etc/sysconfing/network

NETWORKING=yes

HOSTNAME=station?.example.com

GATEWAY=192.168.0.254

2.service network restart

Or

1.vi /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0

ONBOOT=yes

BOOTPROTO=static

IPADDR=X.X.X.X

NETMASK=X.X.X.X

GATEWAY=192.168.0.254

2.ifdown eth0

3.ifup eth0

Do the following steps as:

echo “1” >/proc/sys/net/ipv4/ip_forward

vi /etc/sysctl.conf

net.ipv4.ip_forward=1

/proc is the virtual filesystem, containing the information about the running kernel. To change the parameter of running kernel you should modify on /proc. From Next reboot the system, kernel will take the value from /etc/sysctl.conf.

Do the following steps as:

Use fdisk /dev/hdaTo create new partition.

Type nFor New partitions

It will ask for Logical or Primary Partitions. Press l for logical.

It will ask for the Starting Cylinder: Use the Default by pressing Enter Key.

Type the Size: +100MYou can Specify either Last cylinder of Size here.

Press P to verify the partitions lists and remember the partitions name.

Press w to write on partitions table.

Either Reboot or use partprobe command.

Use mkfs –t ext3 /dev/hda?

Or

mke2fs –j /dev/hda? To create ext3 filesystem.

vi /etc/fstab

Write:

/dev/hda?/dataext3defaults1 2

11. Verify by mounting on current Sessions also:

mount /dev/hda? /data

Do the following steps as:

vi /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0

BOOTPROTO=static

ONBOOT=yes

IPADDR=x.x.x.x

NETMASK=x.x.x.x

Enter the IP Address as given station number by your examiner: example: 172.24.0.1

Enter Subnet Mask

Enter Default Gateway and primary name server

press on ok

ifdown eth0

ifup eth0

verify using ifconfig

In the lab server is playing the role of router, IP forwarding is enabled. Just set the Correct IP and gateway, you can ping to 172.25.254.254.

Do the following steps as:

1.Verify the File whether Shared or not ? : cat /etc/exports

2.Start the nfs service: service nfs start

3.Start the portmap service: service portmap start

4.Make automatically start the nfs service on next reboot: chkconfig nfs on

5.Make automatically start the portmap service on next reboot: chkconfig portmap on

6.Verify either sharing or not: showmount –e localhost

7.Check that default firewall is running on system ? if running flush the iptables using iptables –F and stop the iptables service.

Very Tricky question from redhat. Actually question is giving scenario to you to implement quota to neo user. You should apply the quota to neo user on /home that neo user shouldn’t occupied space more than 70K.

1.vi /etc/fstab

LABEL=/home/homeext3defaults,usrquota0 0To enable the quota on filesystem you should mount the filesystem with usrquota for user quota and grpquota for group quota.

2.touch /home/aquota.userCreating blank quota database file.

3.mount -o remount /homeRemounting the /home with updated mount options. You can verify that /home is mounted with usrquota options or not using mount command.

4.quotacheck -u /homeInitialization the quota on /home

5.edquota –u neo /homeQuota Policy editor

See the snapshot

Disk quotas for user neo (uid 500):

Filesystem blocks soft hard inodes soft hard

/dev/mapper/vo-myvol 2 30 70 1 0 0

Can you set the hard limit 70 and soft limit as you think like 30.

Verify using the repquota /home command.

Do the following steps as:

1.vi /etc/httpd/conf.d/ssl.conf

<VirtualHost 192.100.0.2>

ServerNamewww.rhce.com

DocumentRoot /var/www/rhce

DirectoryIndex index.html index.htm

ServerAdminwebmaster@rhce.com

SSLEngine on

SSLCertificateFile/etc/httpd/conf/ssl.crt/server.crt

SSLCertificateKeyFile/etc/httpd/conf/ssl.key/server.key

</VirtualHost>

2.cd /etc/httpd/conf

3.make testcert

4.Create the directory and index page on specified path. (Index page can download fromftp://server1.example.comat exam time)

5.service httpd start|restart

6.chkconfig httpd on

Apache can provide encrypted communications using SSL (Secure Socket Layer). To make use of encrypted communication, a client must request to https protocol, which is uses port 443. For HTTPS protocol required the certificate file and key file.

Do the following steps as:

1.vi /etc/httpd/conf/httpd.conf

<VirtualHost 192.168.0.?>

ServerNamestation?.example.com

DocumentRoot /var/www/station?

DirectoryIndexindex.html

ServerAdminwebmaster@example.com

</VirtualHost>

2.Create the directory and index page on specified path. (Index page can download fromftp://server1.example.comat exam time)

3.service httpd start|restart

4.chkconfig httpd on

Do the following steps as:

1.vi /etc/hosts.deny

sshd:ALL EXCEPT .example.com

or

1.vi /etc/hosts.deny

sshd:ALL

2.vi /etc/hosts.allow

sshd:.example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

- Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Note: In Exam Lab there will be two different domain example.com which is known as local domain and another is cracker.org which is called non trusted domain. So only from .example.com means allow only to example.com deny to every one.

Do the following steps as:

vi /etc/mail/virtusertable

@cracker.orgeric

service sendmail restart

/etc/mail/virtusertable file is used to send the mail coming for virtual user to real user. According to question, all mail to cracker.org should get by eric user so

@cracker.orgeric : Which sends all mail of cracker.org to eric user.

Do the following steps as:

1.touch /etc/nologin

2.vi /etc/securetty

comment all available terminall then first.

If /etc/nologin file is created, then pam modules pan_nologin deny to all non-root users to login locally.

/etc/pam.d/login file calls the module.

#%PAM-1.0

auth requiredpam_securetty.so

auth requiredpam_stack.so service=system-auth

auth requiredpam_nologin.so

account requiredpam_stack.so service=system-auth

password requiredpam_stack.so service=system-auth

# pam_selinux.so close should be the first session rule

session requiredpam_selinux.so close

session requiredpam_stack.so service=system-auth

session optionalpam_console.so

# pam_selinux.so open should be the last session rule

session requiredpam_selinux.so multiple open

pam_securetty modules checks the /etc/securetty file, which terminal are available to root. If terminal is not available in this file then pam_securetty module deny to login on unavailable terminal to root user.

Do the following steps as:

1.vi /etc/named.conf

acl localnet { 192.168.0.0/24; };

options {

allow-query { localnet; };

};

2.service named restart | start

allow-query is a global option on /etc/named.conf, specifies an address match list of hosts allowed to query this server. If this option is not set, any host can query the server.

Do the following steps as:

1.vi /etc/vsftpd/vsftpd.conf

anonymous_enable=no

2.service vsftpd restart

/etc/vsftpd/vsftpd.conf file is used to allow or deny to anonymous or real user. To allow anonymous anonymous_enable=yes should be there. Sample configuration is like.

# Allow anonymous FTP? (Beware - allowed by default if you comment this out).

anonymous_enable=YES

#

# Uncomment this to allow local users to log in.

local_enable=YES

#

# Uncomment this to enable any form of FTP write command.

write_enable=YES

#

# Default umask for local users is 077. You may wish to change this to 022,

# if your users expect that (022 is used by most other ftpd's)

local_umask=022

#

# Uncomment this to allow the anonymous FTP user to upload files. This only

# has an effect if the above global write enable is activated. Also, you will

# obviously need to create a directory writable by the FTP user.

#anon_upload_enable=YES

#

# Uncomment this if you want the anonymous FTP user to be able to create

# new directories.

#anon_mkdir_write_enable=YES

#

# Activate directory messages - messages given to remote users when they

# go into a certain directory.

dirmessage_enable=YES

#

# Activate logging of uploads/downloads.

xferlog_enable=YES

#

# Make sure PORT transfer connections originate from port 20 (ftp-data).

connect_from_port_20=YES

#

# If you want, you can arrange for uploaded anonymous files to be owned by

# a different user. Note! Using "root" for uploaded files is not

# recommended!

#chown_uploads=YES

#chown_username=whoever

#

# You may override where the log file goes if you like. The default is shown

# below.

#xferlog_file=/var/log/vsftpd.log

#

# If you want, you can have your log file in standard ftpd xferlog format

xferlog_std_format=YES

#

# You may change the default value for timing out an idle session.

#idle_session_timeout=600

#

# You may change the default value for timing out a data connection.

#data_connection_timeout=120

#

# It is recommended that you define on your system a unique user which the

# ftp server can use as a totally isolated and unprivileged user.

#nopriv_user=ftpsecure

#

# Enable this and the server will recognise asynchronous ABOR requests. Not

# recommended for security (the code is non-trivial). Not enabling it,

# however, may confuse older FTP clients.

#async_abor_enable=YES

#

# By default the server will pretend to allow ASCII mode but in fact ignore

# the request. Turn on the below options to have the server actually do ASCII

# mangling on files when in ASCII mode.

# Beware that turning on ascii_download_enable enables malicious remote parties

# to consume your I/O resources, by issuing the command "SIZE /big/file" in

# ASCII mode.

# These ASCII options are split into upload and download because you may wish

# to enable ASCII uploads (to prevent uploaded scripts etc. from breaking),

# without the DoS risk of SIZE and ASCII downloads. ASCII mangling should be

# on the client anyway..

#ascii_upload_enable=YES

#ascii_download_enable=YES

#

# You may fully customise the login banner string:

#ftpd_banner=Welcome to blah FTP service.

#

# You may specify a file of disallowed anonymous e-mail addresses. Apparently

# useful for combatting certain DoS attacks.

#deny_email_enable=YES

# (default follows)

#banned_email_file=/etc/vsftpd.banned_emails

#

# You may specify an explicit list of local users to chroot() to their home

# directory. If chroot_local_user is YES, then this list becomes a list of

# users to NOT chroot().

#chroot_list_enable=YES

# (default follows)

#chroot_list_file=/etc/vsftpd.chroot_list

#

# You may activate the "-R" option to the builtin ls. This is disabled by

# default to avoid remote users being able to cause excessive I/O on large

# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume

# the presence of the "-R" option, so there is a strong case for enabling it.

#ls_recurse_enable=YES

pam_service_name=vsftpd

userlist_enable=YES

#enable for standalone mode

listen=YES

tcp_wrappers=YES

Do the following steps as:

1.vi /etc/named.conf

zone “example.com” IN {

type master;

file “example.com.zone”;

};

/etc/named.conf file is used to register the zone as well as specify the global option for DNS. There are two types of zone, i. Master, which contains the original data. ii. Slave, backup of master. Here master zone is configured and file name is specified “example.com.zone”, which should be created in /var/named/chroot/var/named/

2.vi /var/named/chroot/var/named/example.com.zone

$TTL 345345

@ IN SOA @ webmaster.example.com.(

101;Serial Number

1H;Refresh Time

1M;Retry Time

1W;Expire Time

1D;Minimum Time to Live

)

@ IN NS 192.100.0.X

www IN A 192.100.0.20

3.service named start

4.rndc reload

5.chkconfig named on

Zone file should create on /var/named/chroot/var/named. Default Directory Path is specified on /var/named.conf.

$TTLTime To Live, How much seconds cache server stores the information about DNS. And Five Parameters specified Serial Number used by slave to synchronize with master server. Refresh and Retry Time used by slave server. NS is the Name (DNS) server where lookup the domain. A (Associated IP) for particular host.

Do the following steps as:

1.vi /etc/hosts.deny

sshd:ALL EXCEPT .example.com: spawn echo “Loging attempt from %c to %s” | mail –s “Login from denied hosts” root

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

-Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.