RHCSA practice exam 1
A timed, hands-on practice exam.
Level 301 · 20 lessons · 18 practice labs
Lessons
Task sets
- Task set A: essential tools and users: In the first part of the timed practice exam, you solve essential tools and user management tasks in your own lab.
- Task set B: storage and file systems: In the second part of the timed practice exam, you solve storage and file system tasks and verify the results.
- Task set C: services, networking and security: In the last part of the timed practice exam, you solve service, network and security tasks and verify that they work.
- Short task: redo your hardest task set against the clock
Scenarios: files, accounts and packages
- Scenario: a weekly archive rotation on a backup server: You will build an archive routine with tar and find that removes old archives, and schedule it.
- Scenario: auditing orphaned files and setuid entries on an inherited server: You will use find to locate ownerless or specially permissioned files and prepare an audit list.
- Scenario: accounts, a shared group and password age for a new team: You will add several users to a shared group and set the password age and first-login requirement.
- Scenario: letting an intern restart one service only: You will define single-command sudo rights in sudoers.d and test that other commands are refused.
- Scenario: fixing the network identity of a cloned virtual machine: You will give a cloned machine a unique identity with hostnamectl and nmcli when it shares a name and address.
- Scenario: installing from an internal repository and reviewing history: You will define a local repository, install a package, and review changes with dnf history.
- Short task: prepare a new team server with accounts and a repo
Scenarios: boot, storage and security
- Scenario: repairing a service that fails at boot and choosing the boot target: You will find a service fault with journalctl, fix it, and verify it starts at boot under the right target.
- Scenario: creating XFS on a new disk and mounting it persistently: You will create a partition and an XFS file system and keep it mounted across reboots using fstab.
- Scenario: growing a full logical volume and adding swap: You will grow a logical volume and its file system online, and make extra swap persistent.
- Scenario: moving shared reports to an on-demand NFS mount: You will set up an NFS share with autofs so it mounts on use, and verify access.
- Scenario: resolving a SELinux denial after moving web content: You will read the denial in the log and give the directory the right context permanently with semanage and restorecon.
- Scenario: allowing SSH only from the management network: You will narrow SSH access to one network with a firewalld source rule and check outside access is blocked.
- Short task: verify the storage and SELinux tasks after a reboot
Review and final
- Review and closing the gaps: You will review the mistakes and skipped tasks from the practice, identify the weak topics and draw up a plan to close them.
- Capstone: a timed 2.5-hour full mock exam
Practice labs
- Find one user's files and copy them: You find every file owned by one user on the server and copy them into one directory keeping their permissions.
- Archive a service configuration with bzip2: On a Nehirsu Enerji server you archive a service directory under /etc with bzip2, list its contents and extract it elsewhere to compare.
- Archive large, old logs with their SELinux contexts: You select files larger than 10 MB and older than 30 days with find, archive them preserving SELinux contexts and safely delete the originals.
- Create a service account with a given UID and shell: You create a service account with the requested UID, supplementary group and a non-interactive shell and verify with id and getent.
- Create six users with groups from a list: For Bulutkuşu Ajans's new team you create six users from a file with their primary and supplementary groups and set initial passwords.
- Set the default environment for new accounts: You add a welcome file and shell setting to /etc/skel, set umask 027 for new accounts and prove the result with a freshly created account.
- Give a new admin sudo through the wheel group: You add a new system administrator to the wheel group and verify they can run an admin command with sudo.
- Open only nmcli and ip to the network team: With a command alias you let the network group run only nmcli and ip as root and show another command is refused.
- Narrow over-broad sudo rules: In three files under sudoers.d you find rules granting passwordless full rights and broken syntax using visudo checks and cut them to least privilege.
- Create a volume group and an ext4 volume on a new disk: You make the second disk a physical volume, create a volume group and an 800 MB logical volume, format it ext4 and mount it.
- Build a volume group with a given extent size: You create a volume group with 16 MB physical extents and a logical volume of exactly 50 extents and mount it persistently with XFS.
- Move a volume group to a second disk without downtime: You add a second disk to a nearly full volume group, move the data with pvmove and remove the old disk from the group without downtime.
- Set SELinux to enforcing persistently: On a server left in permissive mode you set SELinux to enforcing both now and persistently and verify it.
- Define a persistent SELinux context for a share directory: For Selvi Klinik's file share directory under /srv you write a persistent context rule with semanage and show the share is readable after restorecon.
- Solve a denied write from the audit log: You find with ausearch and sealert why a service cannot write its log file and fix it with the right context without disabling SELinux.
- Open the https service permanently in firewalld: You open the https service permanently in firewalld and verify the rule remains after a reload.
- Bind the backup network to a separate firewalld zone: You assign the backup subnet as a source to a separate zone and allow the rsync port only in that zone.
- Write a rich rule and a port forward together: You write a permanent rich rule rejecting one subnet with logging and a forward from 8443 to 443 and test from two sources.
About this course
A timed, hands-on practice exam.
What you will learn
- Task sets
- Scenarios: files, accounts and packages
- Scenarios: boot, storage and security
- Review and final
Prerequisites
You should be comfortable with the level 101 and 201 topics of the same path.
Lab environment
Lessons run in your own Kali Linux terminal in the browser, connected to a private lab network. Nothing to install.
Frequently asked questions
- Is this course right for my level?
- The course is at level 301; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.