RH302 RedHat RHCE (Redhat Certified Engineer) Free Practice Exam Questions (2025 Updated)

Do the following steps as:

1.vi /etc/samba/smb.conf

[global]

netbios name=station?

workgroup=station?

security=user

smb passwd file=/etc/samba/smbpasswd

encrypt passwords=yes

hosts allow= .example.com

[data]

path=/data

public=no

writable=no

write list=john

browsable=yes

2.smbpasswd -a john

3.service smb start

4.chkconfig smb on

/etc/samba/smb.conf. There are some pre-defined section, i. globaluse to define the global options, ii. Printersuse to share the printers, iii. homesuse the share the user’s home directory.

Security=uservalidation by samba username and password. May be there are other users also. To allow certain share to certain user we should use valid users option.

smbpasswdHelps to change user’s smb password. –a option specifies that the username following should be added to the local smbpasswd file.

If any valid users option is not specified, then all samba users can access the shared data. By Default shared permission is on writable=no means read only sharing. Write listoption is used to allow write access on shared directory to certain users or group members.

Do the following steps as:

1.vi /etc/httpd/conf/httpd.conf

ServerNamestation?.example.com

DocumentRoot /var/www/station?

DirectoryIndexindex.html

ServerAdminwebmaster@example.com

2.Create the directory and index page on specified path. (Index page can download fromftp://server1.example.comat exam time)

Check the SELinux context of index page , should like this:

-rw-r--r-- root root system_u:object_r:httpd_sys_content_t /var/www/html/index.html

If SELinux Context is mismatched, use the restorecon –R /var command

3.service httpd start|restart

4.chkconfig httpd on

Do the following steps as:

1.touch /etc/nologin

2.vi /etc/securetty

comment all available terminall then first.

If /etc/nologin file is created, then pam modules pan_nologin deny to all non-root users to login locally.

/etc/pam.d/login file calls the module.

#%PAM-1.0

auth requiredpam_securetty.so

auth requiredpam_stack.so service=system-auth

auth requiredpam_nologin.so

account requiredpam_stack.so service=system-auth

password requiredpam_stack.so service=system-auth

# pam_selinux.so close should be the first session rule

session requiredpam_selinux.so close

session requiredpam_stack.so service=system-auth

session optionalpam_console.so

# pam_selinux.so open should be the last session rule

session requiredpam_selinux.so multiple open

pam_securetty modules checks the /etc/securetty file, which terminal are available to root. If terminal is not available in this file then pam_securetty module deny to login on unavailable terminal to root user.

Do the following steps as:

1.vi /etc/security/limits.conf

user1hardnproc7

2.vi /etc/pam.d/system-auth

sessionrequired/lib/security/pam_limits.so

To limit the number of process or number of logins, we should configure on /etc/security/limits.conf. First Columns contains the username separated by comma or @group name. Second column either hard or soft limits. Third columns called the item, maxloigns or nproc etc.

To identify the session of users we should call the pam_limits module in /etc/pam.d/system-auth.

Do the following steps as:

Use netconfig command

Enter the IP Address as given station number by your examiner: example: 172.24.0.1

Enter Subnet Mask

Enter Default Gateway and primary name server

press on ok

ifdown eth0

ifup eth0

verify using ifconfig

In the lab server is playing the role of router, IP forwarding is enabled. Just set the Correct IP and gateway, you can ping to 172.25.254.254.

#vi /etc/resolv.conf

nameserver 172.24.254.254

# dig server1.example.com

#host server1.example.com

DNS is the Domain Name System, which maintains a database that can help your computer translate domain names such as www.redhat.com to IP addresses such as 216.148.218.197. As no individual DNS server is large enough to keep a database for the entire Internet, they can refer requests to other DNS servers.

DNS is based on thenameddaemon, which is built on the BIND (Berkeley Internet Name Domain) package developed through the Internet Software Consortium

Users wants to access by name so DNS will interpret the name into ip address. You need to specify the Address if DNS server in each and every client machine. In Redhat Enterprise Linux, you need to specify the DNS server into /etc/resolv.conf file.

After Specifying the DNS server address, you can verify using host, dig and nslookup commands.

At exam time read the Lab Scenario carefully. Actually there are two different networks one is 192.168.0.0/24 where your system resides know as example.com domain and another is 192.168.1.0/24 know as cracker.org domain.

One server named sever1.example.com having 192.168.0.254 and 192.168.1.254 is running in your exam. If you make a gateway to that server, you will can ping because IP forwarding is enabled on that server.

1.vi /etc/sysconfing/network

NETWORKING=yes

HOSTNAME=station?.example.com

GATEWAY=192.168.0.254

2.service network restart

Or

1.vi /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE=eth0

ONBOOT=yes

BOOTPROTO=static

IPADDR=X.X.X.X

NETMASK=X.X.X.X

GATEWAY=192.168.0.254

2.ifdown eth0

3.ifup eth0

Note: If gateway is specified in both file, default gateway takes from interface specific file.

You should know about the /etc/inittab file, where default runlevel will define. And Much more runlevel specific Scripts are called here.

Actually that problem will occur if you don’t specify the default runlevel.

Reboot the system

Boot the System on single user mode.

Except for a normal boot of Linux, single-user mode is the most commonly used option. This is the system maintenance mode for experienced Linux administrators. It allows you to perform clean backups and restores to any partitions as needed from local hardware. It also allows you to run administration commands, recover or repair password and shadow password files, run filesystem checks, and so forth.

vi /etc/inittab and Write

id:runlevel:initdefault:

Standard Runlevels in RedHat Enterprise Linux

Runlevel

Description

0

Halt

1

Single-user mode, for maintenance (backups/restores) and repairs

2

Multiuser, without networking

3

Multiuser, with networking

4

Unused

5

X11, defaults to a GUI login screen. Logins bring the user to a GUI desktop.

6

Reboot (never set initdefault in /etc/inittab to this value!)

We know that every files/directories are owned by certain user and group. And Permissions are defines to owner user, owner group and other.

-rwxr-x---Full permission to owner user, read and write to owner group and no permission to others.

According to question: We should give the full permission to user user1 without changing the previous permission.

ACL (Access Control List), in ext3 file system we can give permission to certain user and certain group without changing previous permission. But that partition should mount using acl option. Follow the steps

vi /etc/fstab

/dev/hda14/dataext3defaults,acl0 1

Either Reboot or use: mount –o remount /data

setfacl –m u:user1:rwx /data

Verify using: getfacl /data

Very Tricky question from redhat. Actually question is giving scenario to you to implement quota to neo user. You should apply the quota to neo user on /home that neo user shouldn’t occupied space more than 70K.

1.vi /etc/fstab

LABEL=/home/homeext3defaults,usrquota0 0To enable the quota on filesystem you should mount the filesystem with usrquota for user quota and grpquota for group quota.

2.touch /home/aquota.userCreating blank quota database file.

3.mount -o remount /homeRemounting the /home with updated mount options. You can verify that /home is mounted with usrquota options or not using mount command.

4.quotacheck -u /homeInitialization the quota on /home

5.edquota –u neo /homeQuota Policy editor

See the snapshot

1 Disk quotas for user neo (uid 500):

2 Filesystem blocks soft hard inodes soft hard

4 /dev/mapper/vo-myvol 2 30 70 1 0 0

Can you set the hard limit 70 and soft limit as you think like 30.

When root unable to login into the system think:

Is password correct?

Is account expired?

Is terminal Blocked?

Do these Steps:

Boot the System on Single user mode.

Change the password

Check the account expire date by using chage –l root command.

If account is expired, set net expire date: chage –E “NEVER” root

Check the file /etc/securettyWhich file blocked to root login from certain terminal.

If terminal is deleted or commented write new or uncomment.

Reboot the system and login as a root.

The LVM system organizes hard disks into Logical Volume (LV) groups. Essentially, physical hard disk partitions (or possibly RAID arrays) are set up in a bunch of equal-sized chunks known as Physical Extents (PE). As there are several other concepts associated with the LVM system, let's start with some basic definitions:

Physical Volume (PV)is the standard partition that you add to the LVM mix. Normally, a physical volume is a standard primary or logical partition. It can also be a RAID array.

Physical Extent (PE)is a chunk of disk space. Every PV is divided into a number of equal sized PEs. Every PE in a LV group is the same size. Different LV groups can have different sized PEs.

Logical Extent (LE)is also a chunk of disk space. Every LE is mapped to a specific PE.

Logical Volume (LV)is composed of a group of LEs. You can mount a filesystem such as /home and /var on an LV.

Volume Group (VG)is composed of a group of LVs. It is the organizational group for LVM. Most of the commands that you'll use apply to a specific VG.

1.Verify the size of Logical Volume:lvdisplay /dev/vg0/lv1

2.Verify the Size on mounted directory:df –h or df –h mounted directory name

3.Use :lvextend –L+400M /dev/vg0/lv1

4. ext2online –d /dev/vg0/lv1to bring extended size online.

5. Again Verify using lvdisplay and df –h command.

1. vi /etc/resolv.conf

Write : nameserver 192.168.0.254

Do the following steps as:

1.rpm –ivhftp://server1/example.com/pub/updates/zsh-*

or

1.Login to ftp server : ftpftp://server1.example.comusing anonymous user.

2.Change the directory: cd pub and cd updates

3.Download the package: mget zsh-*

4.Quit from the ftp prompt : bye

5.Install the package

6.rpm -ivh zsh-*

7.Verify Either package installed or not : rpm -q zsh

Do the following steps as:

1.Use fdisk /dev/hdaTo create new partition.

Type nFor New partition

It will ask for Logical or Primary Partitions. Press l for logical.

It will ask for the Starting Cylinder: Use the Default by pressing Enter Key.

Type the Size: +100MYou can Specify either Last cylinder of Size here.

Press P to verify the partitions lists and remember the partitions name. Default System ID is 83 that means Linux Native.

Type t to change the System ID of partition.

Type Partition Number

Type 82 that means Linux Swap.

Press w to write on partitions table.

Either Reboot or use partprobe command.

mkswap /dev/hda?To create Swap File system on partition.

swapon /dev/hda?To enable the Swap space from partition.

free –mVerify Either Swap is enabled or not.

vi /etc/fstab

/dev/hda?swapswapdefaults0 0

Reboot the System and verify using free command that swap is automatically enabled or not.

Maintenance mode also known as emergency mode. System boots on emergency mode when file system error occurred. It is due to unknown partition, bad filesystem specified in /etc/fstab. To slove follow the steps

Give the Root password

fdisk –lVerify the Number of parations.

Identify the Root partition, e2label /dev/hda1, e2label /dev/hda2…..

Remount the root partation on rw mode: mount –o remount,defaults /dev/hda6 /

vi /etc/fstab

Correct all partitions, mount point, mount options, file system etc.

6.Press ctrl+d