Q71. CORRECT TEXT
Using squid block Internet to 192.168.1.0/24 Network and allow to 192.168.0.0/24 Network.
Answer and Explanation:
1. vi /etc/squid/squid.conf
#detault:
http_port 8080
#Recommended minimum configuration:
# Near the src acl src section
acl allownet src 192.168.0.0/255.255.255.0
acl denynet src 192.168.1.0/255.255.255.0
#Default:
# http_access deny all
#Under Here
http_access allow allownet
http_access deny denynet
2. service squid start
3. chkconfig squid on
squid is a proxy caching server, using squid we can share the internet, block the internet, to certain network. First we should define the port for squid, the standard port for squid is 3128. We can run squid on different port by specifying http_port portnumber.
To block or allow the Internet access to hosts, we should create the acl (Access Control List). In this file we can specify only the IP address.
Example: acl aclname src IP/Netmask
After creating acl we can block or allow the internet to specified acl.
http_access allow | deny alcname
Q72. CORRECT TEXT
You are giving RHCE exam. You should boot the system in Run level 3. When you start the system after while it is going on runlevel 6 : like
INIT: Entering Run level 6
Sending TERM Single
Fix the problem and boot the system.
Answer and Explanation:
It is due to either default runlevel or runlevel specific scripts.
3. id:?:initdefault: àWhere default runlevel is specified. It shouldn't be 6.
4. l3:3:wait:/etc/rc.d/rc 6 àIt reads the scripts of runlevel 6 while booting system on rulevel 3.
It should be like:
si::sysinit:/etc/rc.d/rc.sysinit
l0:0:wait:/etc/rc.d/rc 0
l1:1:wait:/etc/rc.d/rc 1
l2:2:wait:/etc/rc.d/rc 2
l3:3:wait:/etc/rc.d/rc 3 Should be like this
l4:4:wait:/etc/rc.d/rc 4
l5:5:wait:/etc/rc.d/rc 5
l6:6:wait:/etc/rc.d/rc 6
Q73. CORRECT TEXT
All mails to my133t.org should get by marion user.
Answer and Explanation:
3. vi /etc/mail/virtusertable
@my133t.org marion
# service sendmail restart
/etc/mail/virtusertable file is used to send the mail coming for virtual user to real user. According to question, all mail to cracker.org should get by eric user so
@my133t.org eric : Which sends all mail of cracker.org to eric user.
Q74. CORRECT TEXT
Make user1, user2 and user3 belongs to training group.
Answer and Explanation:
1. usermod -G training user1
2. usermod -G training user2
3. usermod -G training user3
4. Verify from : cat /etc/group
There are two types of group, I) primary group II) Secondary or supplementary group.
5. Primary Group: Primary group defines the files/directories and process owner group there can be only one primary group of one user.
6. Secondary Group is used for permission. Where permission are defined for group members, user can access by belonging to that group.
Here user1, user2 and user3 belong as supplementary to training group. So these users get the permission of group member.
Q75. CORRECT TEXT
You are new System Administrator and from now you are going to handle the system and your main task is Network monitoring, Backup and Restore. But you don't know the root password. Change the root password to redhat and login in default Runlevel.
Answer and Explanation:
When you Boot the System, it starts on default Runlevel specified in /etc/inittab:
Id:?:initdefault:
When System Successfully boot, it will ask for username and password. But you don't know the root's password. To change the root password you need to boot the system into single user mode.
You can pass the kernel arguments from the boot loader.
7. Restart the System.
8. You will get the boot loader GRUB screen.
9. Press a and type 1 or s for single mode
ro root=LABEL=/ rhgb queit s
10. System will boot on Single User mode.
11. Use passwd command to change.
12. Press ctrl+d
Q76. CORRECT TEXT
There is a HTTP server 192.168.0.254 and all required packages are dumped in /var/www/html/rhel4 of that server. Install the Redhat Enterprise Linux 5 by creating following partitions:
/ 1000
/boot 200
/home 1000
/var 1000
/usr 4000
swap 2X256 (RAM SIZE)
Answer and Explanation:
Note: Examiner will provide you the Installation startup CD. And here mentioned size may vary see on the exam paper.
1. Insert the CD on CD-ROM and start the system.
2. In Boot: Prompt type linux askmethod
3. It will display the Language, keyboard selection.
4. It will ask you for the installation method.
5. Select the HTTP from the list
6. It will ask the IP Address, Net mask, Gateway and Name Server. Select Use
Dynamic IP Configuration: because DHCP Server will be configured in your exam lab.
7. It will ask for the Web site name and Redhat Enterprise Linux Directory.
Specify the HTTP Server: 192.168.0.254
Directory: rhel4 à Because Default Directory for http is /var/www/html
8. After Connecting to the HTTP Server Installation start. Go upto the partition screen by selecting the different Options.
9. Create the partition According to the Question because Size and what-what partition should you create at installation time is specified in your question
10. Then select the MBR Options, time zone and go upto package selections.
It is another Most Important Time of installation. Due to the time limit, you should be care about the installation packages. At Exam time you these packages are enough.
X-Window System
GNOME Desktop
(these two packages are generally not required)
Administration Tools.
System Tools
Windows File Server
FTP Servers
Mail Servers
Web Servers
Network Servers
Editors
Text Based Internet
Server Configuration Tools
Printing Supports
When installation will complete, your system will reboot. Jump for another Question.
Q77. CORRECT TEXT
Allow the NFS service only to example.com, trusted.cracker.org
Answer and Explanation:
1. vi /etc/hosts.deny
nfs,portmap:ALL EXCEPT .example.com, trusted.cracker.org
We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.
There will be three stage access checking
-Is access explicitly permitted? Means permitted from /etc/hosts.allow?
- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?
- Otherwise, by default permit access if neither condition matched.
To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation.
Pattern of /etc/hosts.allow and /etc/hosts.deny file is:
Demon_list:client_list:options
In Client list can be either domain name or IP address.
Q78. CORRECT TEXT
Configure to allow the pop3 and imap connection from your domain example.com
and my133t.org domain.
Answer and Explanation:
1. vi /etc/hosts.deny
dovecot:ALL EXCEPT .example.com, .my133t.org
We can secure the services using tcp_wrappers. There are main two files, /etc/hosts.allow and /etc/hosts.deny.
There will be three stage access checking
- Is access explicitly permitted? Means permitted from /etc/hosts.allow?
- Otherwise, Is access explicitly denied? Means denied from /etc/hosts.deny?
- Otherwise, by default permit access if neither condition matched.
To deny the services we can configure /etc/hosts.deny file using ALL and EXCEPT operation.
Pattern of /etc/hosts.allow and /etc/hosts.deny file is:
Demon_list:client_list:options
In Client list can be either domain name or IP address.
Q79. CORRECT TEXT
One Package named zsh is dump on ftp://server1.example.com under pub directory. Install the package from ftp server.
Answer and Explanation:
1. rpm -ivh ftp://server1.example.com/pub/zsh-*
2. Package will install
rpm command is used to install, update and remove the package, -i means install, -v means verbose and -h means display the hash mark.
Q80. CORRECT TEXT
One Domain RHCE is configured in your lab, your domain server is server1.example.com. nisuser2001, nisuser2002, nisuser2003 user are created on your server 192.168.0.254:/rhome/stationx/nisuser2001. Make sure that when NISuser login in your system
automatically mount the home directory. Home directory is separately shared on server /rhome/stationx/ where x is your Station number.
Answer and Explanation:
1. use the authconfig --nisserver=<NIS SERVER> --nisdomain=<NIS DOMAIN> --update
Example: # authconfig --nisserver=192.168.0.254 --nisdomain=RHCE --update
or system-config-authentication
2. Click on Enable NIS
3. Type the NIS Domain: RHCE
4. Type Server 192.168.0.254 then click on next and ok
5. You will get a ok message.
6. Create a Directory /rhome/stationx where x is your station number.
6. vi /etc/auto.master and write at the end of file
/rhome/stationx /etc/auto.home --timeout=60
7. vi /etc/auto.home and write
* -rw,soft,intr 192.168.0.254:/rhome/stationx/&
Note: please specify your station number in the place of x.
8. Service autofs restart
9. Login as the nisuser2001 or nisuser2002 on another terminal will be Success.
According to question, RHCE domain is already configured. We have to make a client of RHCE domain and automatically mount the home directory on your system. To make a member of domain, we use the authconfig with option or system-config-authentication command. There a are lots of authentication server i.e NIS, LDAB, SMB etc. NIS is a RPC related Services, no need to configure the DNS, we should specify the NIS server address.
Here Automount feature is available. When user tried to login, home directory will automatically mount. The automount service used the /etc/auto.master file. On /etc/auto.master file we specified the mount point the configuration file for mount point.