RH302 RedHat RHCE (Redhat Certified Engineer) Free Practice Exam Questions (2025 Updated)

Do the following steps as:

1.vi /etc/dhcpd.conf

ddns-update-style none;

option routers 192.168.0.1;

option domain-name “example.com”;

option domain-name-servers 192.168.0.254;

default-lease-time 21600;

max-lease-time 43200;

subnet 192.168.0.0 netmask 255.255.255.0

{

range 192.168.0.1 192.168.0.254;

host dns1 {

hardware ethernet 00:50:FC:98:8D:00;

fixed-address 192.168.0.254;

}

host dns2 {

hardware ethernet 00:50:FC:98:8C:00;

fixed-address 192.168.0.253;

}

}

/etc/dhcpd.conf file is used to configure the DHCP. Some global options i.e Gateway, domainname, DNS server specified using option keyword. To assign as static ip from dhcp server, required the mac address of interface.

2.service dhcpd start | restart

Do the following steps as:

1.vi /etc/named.conf

options {

forwarders { 192.168.22.250; };

forward only;

};

2. service named start | restart

Caching-only name server forwards a request to another name server or to the root name servers in orders to determine the authoritative name server for the resolution. Once resolution has taken place, the caching-only name server stores the resolved information in a cache for the designated time to live period.

Do the following steps as:

1.vi /etc/security/access.conf

-:john:LOCAL

2.vi /etc/pam.d/system-auth

accountrequired/lib/security/pam_access.so

/etc/security/access.conf file helps to allow or deny login to users on the basis of origin.

Syntax of /etc/security/access.conf

permission : users : origins

The first field should be a "+" (access granted) or "-" (access denied) character.

The second field should be a list of one or more login names, group names, or ALL (always matches). A pattern of the form user@host is matched when the login name matches the "user" part, and when the "host" part matches the local machine name.

The third field should be a list of one or more tty names (for non-networked logins), host names, domain names (begin with "."), host addresses, internet network numbers (end with "."), ALL (always matches) or LOCAL (matches any string that does not contain a "." character).

In our example denied to john user to login locally.

Your local domain mean example.com domain. Lookup the example.com using

host example.com you will get the IP address 192.168.0.254.

1.vi /etc/httpd/conf/httpd.conf

<VirtualHost 192.168.0.254>

ServerNamesexample.com

DocumentRoot /var/www/example

DirectoryIndexindex.html

ServerAdminwebmaster@example.com

</VirtualHost>

2.mkdir /var/www/example

3.Download the index.html file from the ftp server specified in question

4.Rename thewww.html file to index.html

5.service httpd start|restart

6.chkconfig httpd on

7.check using: links http://example.com

Do the following steps as:

1.vi /etc/samba/smb.conf

[global]

netbios name=station?

workgroup = mygroup

server string=Share from Linux Server

security=user

smb passwd file=/etc/samba/smbpasswd

encrypt passwords=yes

hosts allow=192.168.0.

[data]

path=/data

writable=yes

public=no

browsable=yes

2.service smb start| restart

3.chkconfig smb on

Samba servers helps to share the data between linux and windows. Configuration file is /etc/samba/smb.conf. There are some pre-defined section, i. globaluse to define the global options, ii. Printersuse to share the printers, iii. homesuse to share the user’s home directory.

Security=uservalidation by samba username and password. May be there are other users also. To allow certain share to certain user we should use valid users option.

smbpasswdHelps to change user’s smb password. –a option specifies that the username following should be added to the local smbpasswd file.

If any valid users option is not specified, then all samba users can access the shared data. By Default shared permission is on writable=no means read only sharing. Write list option is used to allow write access on shared directory to certain users or group members.

To allow access the shared directory only from certain network or hosts, there is a option hosts allow= host or network. If this option is applied on global option, then it will apply to all shared directory.

Do the following steps as:

1.vi /etc/hosts.deny

vsftpd:ALL EXCEPT .example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

-Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/hosts.deny

vsftpd:ALL EXCEPT .example.com

or

1.vi /etc/hosts.deny

vsftpd:ALL

2.vi /etc/hosts.allow

vsftpd:.example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

- Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/exports

/data*.example.com(rw,sync)

Check the SELinux Context, should be like this:

-rw-r--r-- root root system_u:object_r:exports_t /etc/exports

Use the restorecon –R /etc command to restore the selinux context of the file.

2.service nfs start | restart

3.service portmap start | restart

4.chkconfig nfs on

5.chkconfig portmap on

In Linux to share the data we use the /etc/exports file. Pattern is:

Pathclient(permission)

Shared Directory Path, Client can be single host or domain name or ip address. Permission should specify without space with client lists in parentheses. NFS is RPC service so portmapper service should restart after starting the nfs service.

Do the following steps as:

1.vi /etc/security/time.conf

login;*;user15|user16;Sa0000-2400

2.vi /etc/pam.d/login

accountrequiredpam_time.so

For Time based authentication, we should configured in /etc/security/time.conf

Syntax of /etc/security/time.conf

services;ttys;users;times

services

is a logic list of PAM service names that the rule applies to.

ttys

is a logic list of terminal names that this rule applies to.

users

is a logic list of users to whom this rule applies.

times

the format here is a logic list of day/time-range entries the days are specified by a sequence of two character entries, MoTuSa for example is Monday Tuesday and Saturday. Note that repeated days are unset MoMo = no day, and MoWk = all weekdays bar Monday. The two character combinations accepted are

Mo Tu We Th Fr Sa Su Wk Wd Al

the last two being week-end days and all 7 days of the week respectively. As a final example, AlFr means all days except Friday.

pam_time modules checks the file /etc/security/time.conf for authentication. So, we should call the pam_time modules in /etc/pam.d/login.

Do the following steps as:

1.vi /etc/exports

/local*.example.com(rw,sync) trusted.cracker.org(ro,sync)

Check the SELinux Context, should be like this:

-rw-r--r-- root root system_u:object_r:exports_t /etc/exports

Use the restorecon –R /etc command to restore the selinux context of the file.

service nfs start | restart

service portmap start | restart

chkconfig nfs on

chkconfig portmap on

In Linux to share the data we use the /etc/exports file. Pattern is:

Pathclient(permission)

Shared Directory Path, Client can be single host or domain name or ip address. Permission should specify without space with client lists in parentheses. NFS is RPC service so portmapper service should restart after starting the nfs service. We can specify multiple clients’ list separating by space with different shared option.

Do the following steps as:

1.vi/var/named/chroot/etc/named.conf

acl localnet { 192.168.0.0/24; };

options {

allow-query { localnet; };

};

2.service named restart | start

allow-query is a global option on/var/named/chroot/etc/named.conf, specifies an address match list of hosts allowed to query this server. If this option is not set, any host can query the server.

Do the following steps as:

1.vi /etc/hosts.deny

nfs,portmap:ALL EXCEPT .example.com, trusted.cracker.org

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

-Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/dhcpd.conf

ddns-update-style none;

option routers 192.168.0.1;

option domain-name “example.com”;

option domain-name-servers 192.168.0.254;

default-lease-time 21600;

max-lease-time 43200;

subnet 192.168.0.0 netmask 255.255.255.0

{

range 192.168.0.1 192.168.0.254;

host dns1 {

hardware ethernet 00:50:FC:98:8D:00;

fixed-address 192.168.0.254;

}

host dns2 {

hardware ethernet 00:50:FC:98:8C:00;

fixed-address 192.168.0.253;

}

}

/etc/dhcpd.conf file is used to configure the DHCP. Some global options i.e Gateway, domainname, DNS server specified using option keyword. To assign as static ip from dhcp server, required the mac address of interface.

2. Check the SELinux Context, should be like this:

-rw-r--r-- root root system_u:object_r:dhcp_etc_t /etc/dhcpd.conf

3. Use the restorecon –R /etc command to restore the selinux context of the file.

4.service dhcpd start | restart

Outside the LAN means cracker.org. All host on exam on example.com domain and outside domain means cracker.org.

To block the mail coming from cracker.org

1.vi /etc/mail/access

@cracker.rogREJECT

2.service sendmail start | restart

3.chkconfig sendmail on

Do the following steps as:

1.vi /etc/security/time.conf

login;*;user1|user2|user3;Al0900-1700

2.vi /etc/pam.d/login

accountrequiredpam_time.so

For Time based authentication, we should configured in /etc/security/time.conf

Syntax of /etc/security/time.conf

services;ttys;users;times

services

is a logic list of PAM service names that the rule applies to.

ttys

is a logic list of terminal names that this rule applies to.

users

is a logic list of users to whom this rule applies.

times

the format here is a logic list of day/time-range entries the days are specified by a sequence of two character entries, MoTuSa for example is Monday Tuesday and Saturday. Note that repeated days are unset MoMo = no day, and MoWk = all weekdays bar Monday. The two character combinations accepted are

Mo Tu We Th Fr Sa Su Wk Wd Al

the last two being week-end days and all 7 days of the week respectively. As a final example, AlFr means all days except Friday.

pam_time modules checks the file /etc/security/time.conf for authentication. So, we should call the pam_time modules in /etc/pam.d/login.

Do the following steps as:

1.vi /etc/hosts.deny

dovecot:ALL EXCEPT .example.com, .my133t.org

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

- Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /var/named/chroot/etc/named.conf

options {

forwarders { 192.168.22.250; };

forward only;

};

2. service named start | restart

Caching-only name server forwards a request to another name server or to the root name servers in orders to determine the authoritative name server for the resolution. Once resolution has taken place, the caching-only name server stores the resolved information in a cache for the designated time to live period.

Do the following steps as:

1.vi /etc/hosts.deny

vsftpd:ALL EXCEPT .example.com

or

1.vi /etc/hosts.deny

vsftpd:ALL

2.vi /etc/hosts.allow

vsftpd:.example.com

We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.

There will be three stage access checking

- Is access explicitly permitted? Means permitted from /etc/hosts.allow?

- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?

- Otherwise, by default permit access if neither condition matched.

To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation. Pattern of /etc/hosts.allow and /etc/hosts.deny file is:

Demon_list:client_list:options

In Client list can be either domain name or IP address.

Do the following steps as:

1.vi /etc/samba/smb.conf

[global]

netbios name=station?

workgroup = mygroup

server string=Share from Linux Server

security=user

smb passwd file=/etc/samba/smbpasswd

encrypt passwords=yes

hosts allow=192.168.0.

[data]

path=/data

writable=yes

public=no

browsable=yes

2.service smb start| restart

3.chkconfig smb on

Samba servers helps to share the data between linux and windows. Configuration file is /etc/samba/smb.conf. There are some pre-defined section, i. globaluse to define the global options, ii. Printersuse to share the printers, iii. homesuse to share the user’s home directory.

Security=uservalidation by samba username and password. May be there are other users also. To allow certain share to certain user we should use valid users option.

smbpasswdHelps to change user’s smb password. –a option specifies that the username following should be added to the local smbpasswd file.

If any valid users option is not specified, then all samba users can access the shared data. By Default shared permission is on writable=no means read only sharing. Write list option is used to allow write access on shared directory to certain users or group members.

To allow access the shared directory only from certain network or hosts, there is a option hosts allow= host or network. If this option is applied on global option, then it will apply to all shared directory.