Red Hat Certified Specialist In Security- Linux Free Sample Questions

You are the lead security administrator for a financial institution using Red Hat Enterprise Linux 9. You need to configure Network-Bound Device Encryption (NBDE) to ensure your servers can decrypt their root volumes automatically upon reboot only when they are within the secure corporate network. You have deployed a Tang server at 192.168.10.5. Which command must be executed on the client machine to bind the existing LUKS-encrypted device /dev/nvme0n1p3 to this Tang server using Clevis?

A security auditor requires a report of all file integrity changes on a production server over the last 24 hours. You have AIDE (Advanced Intrusion Detection Environment) installed and initialized. You run a manual check and find differences. To update the database so that the current state becomes the new baseline for future checks, which sequence of commands should you run?

You are configuring USBGuard on a kiosk system that should only allow a specific USB touch screen and keyboard. You have generated an initial policy allowing connected devices. However, you want to ensure that if the USBGuard daemon stops or crashes, all USB devices are blocked immediately to prevent tampering. Which configuration directive in /etc/usbguard/usbguard-daemon.conf controls this behavior?

While investigating a permission issue on a web server, you notice that the Apache service cannot read files in a custom directory /srv/www/html. You suspect an SELinux context mismatch. You decide to compare the file contexts of the working default directory /var/www/html with your custom directory. Which command should you use to view the security context of the files?

You need to configure the Linux Audit system to monitor all write access and attribute changes to the /etc/passwd file by any user. The rule must add a key named 'identity_change' to the log entries. Which audit rule is correct?

Your organization uses Red Hat Ansible Automation Platform. You need to ensure that a junior administrator, 'UserA', can only run playbooks against a specific set of development servers defined in an inventory named 'DevInventory'. They should not see or access the 'ProdInventory'. Which combination of permissions must be assigned to UserA in the Automation Controller?