VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Red Hat Certified Specialist in Services Management and Automation Free Sample Questions

Description

Covers configuring network clients and firewalls, SELinux, DNS and DHCP servers, MariaDB databases, Apache and Nginx web access, and iSCSI, NFS and SMB file sharing.

12 free sample questions153 in the full practice test

Try simulator

EX358 Sample Questions

  1. Question 1

    Intermediate

    Manage Network Services · Configure Network Clients

    You are configuring a new static network profile for a server named 'prod-db-01' using NetworkManager. The server requires a manual IPv6 address of 2001:db8:1::10/64 and must not attempt to use SLAAC (Stateless Address Autoconfiguration) or DHCPv6. Which nmcli command sequence correctly configures these requirements?

    Answer and explanation

    Correct answer: A

    To configure a static IPv6 address and disable autoconfiguration (SLAAC/DHCPv6), you must set the 'ipv6.method' to 'manual'. Setting only the address without changing the method from 'auto' (default) might result in the interface still attempting to acquire dynamic addresses.

  2. Question 2

    Beginner

    Manage Network Services · Configure Network Clients

    You have modified the configuration file /etc/NetworkManager/system-connections/ens192.nmconnection directly using a text editor to change the IP address. However, ip addr show still displays the old IP address. What is the most efficient command to apply these changes without disrupting other network connections?

    Answer and explanation

    Correct answer: A

    When editing connection files directly, NetworkManager is not automatically aware of the changes. You must run nmcli connection reload to read the file changes, followed by nmcli connection up to apply the new configuration to the interface.

  3. Question 3

    Intermediate

    Manage Firewall Services · Configure System Firewalls

    A security audit requires that you permanently block all traffic from the specific subnet 192.168.100.0/24 on your web server, regardless of the service being accessed. The server uses firewalld. Which command achieves this using a rich rule?

    Answer and explanation

    Correct answer: C

    Rich rules allow for granular control. The correct syntax specifies the rule family, the source address, and the action (drop/reject). The --permanent flag ensures persistence.

  4. Question 4

    Intermediate

    Manage Firewall Services · Configure System Firewalls

    You need to configure the default firewall zone on a server such that it rejects all incoming connections with an ICMP 'host-prohibited' message, unless explicitly allowed. Which target should be set for the zone?

    Answer and explanation

    Correct answer: C

    In firewalld, the special target %%REJECT%% (often displayed as just REJECT in output but configured internally) ensures that blocked packets receive an ICMP host-prohibited response. The DROP target silently discards packets.

  5. Question 5

    Advanced

    Manage SELinux · SELinux Booleans and Contexts

    A system administrator has configured a MariaDB server to listen on non-standard port 3307. The service fails to start, and audit logs indicate an SELinux denial. Which command sequence permanently resolves this issue?

    Answer and explanation

    Correct answer: A

    SELinux enforces port binding restrictions. By default, mysqld_t can only bind to ports labeled mysqld_port_t. To allow binding to 3307, you must add that port to the mysqld_port_t context using semanage port.

    flowchart TD Start[Service Start] --> Bind{Bind Port 3307?} Bind -->|Check SELinux| Context{Port Context?} Context -->|Unlabeled| Deny[AVC Denial] Context -->|mysqld_port_t| Allow[Service Starts] Deny --> Fix[semanage port -a -t mysqld_port_t -p tcp 3307] Fix --> Allow

  6. Question 6

    Beginner

    Manage SELinux · SELinux Booleans and Contexts

    You are configuring a web server to allow scripts to connect to a remote database. You run setsebool httpd_can_network_connect 1. After a system reboot, the application fails to connect. What was the mistake?

    Answer and explanation

    Correct answer: D

    The setsebool command modifies the runtime state of SELinux booleans. Without the -P (permanent) flag, changes are lost upon reboot.

Register free for 6 more questions

Or unlock all 153 EX358 questions with explanations, timed mode and flashcards.

Related practice tests

All Red Hat practice exams