RHCSA SELinux Administration Quiz

1. Which SELinux policy type is the default on Red Hat Enterprise Linux?

Strict

Targeted

MLS

Unconfined

2. Which directory typically contains SELinux policy files and modules?

/etc/selinux/

/usr/share/selinux/

/var/lib/selinux/

All of the above

3. How do you temporarily disable SELinux without rebooting?

Setenforce 0

Edit /etc/selinux/config and set SELINUX=disabled

Systemctl stop selinux

Getenforce 0

4. What command displays all SELinux policy modules currently loaded?

Semodule -l

Semanage module -l

Getsebool -a

Sestatus -p

5. Which SELinux user typically represents standard system users?

System_u

User_u

Staff_u

Sysadm_u

6. What is the difference between 'audit2allow -a' and 'audit2allow -a -M policy_name'?

First displays rules; second creates a policy module file

First is faster; second is more secure

They are identical

First requires root; second does not

7. Which tool can generate SELinux policy recommendations from audit logs?

Audit2why

Audit2allow

Audit2selinux

Auditctl

8. What does the audit daemon (auditd) do in relation to SELinux?

Logs SELinux policy violations and denials

Enforces SELinux policies

Compiles SELinux policies

Manages SELinux user accounts

9. When troubleshooting SELinux denials, which log file should you consult?

/var/log/audit/audit.log

/var/log/messages

/var/log/selinux.log

/var/log/secure

10. What command is used to add a custom file context rule to SELinux?

Semanage fcontext -a

Chcon -R

Restorecon -Rv

Fixfiles check

11. What command displays the current SELinux enforcement mode on a system?

Getenforce

Setstatus

Sestatus -v

Getpolicy

12. How do you persistently change an SELinux boolean setting?

Setsebool boolean_name on

Setsebool -P boolean_name on

Semanage boolean -m boolean_name

Edit /etc/selinux/config directly

13. Which command lists all available SELinux booleans and their current status?

Getsebool -a

Semanage boolean -l

Sestatus -b

Both a and b

14. What is the purpose of SELinux booleans in policy management?

Enable or disable specific policy rules without reloading the policy

Set user passwords

Define file ownership

Configure network interfaces

15. Which command displays the SELinux context of a file?

Ls -Z

Stat -c %C

Getfattr -n security.selinux

All of the above

16. In SELinux, a security context consists of three primary components. Which is NOT one of them?

User identity

Role

Type

Priority level

17. What does SELinux stand for?

Security Enhanced Linux

System Enforcement Linux

Secure Extended Libraries

Security Extension Layer

18. Which tool is used to restore default SELinux file contexts across the filesystem?

Restorecon

Fixfiles

Semanage fcontext

Both a and b

19. What is the correct syntax to change a file's SELinux context using chcon?

Chcon -u user_u file.txt

Chcon -t type_t file.txt

Chcon -r role_r file.txt

All of the above

20. Which SELinux mode allows policy rules to be checked but violations are only logged, not enforced?

Enforcing

Permissive

Disabled

Warning

RHCSA SELinux Administration Quiz

1. Which SELinux policy type is the default on Red Hat Enterprise Linux?

2.

What first name or nickname would you like us to use?

2. Which directory typically contains SELinux policy files and modules?

3. How do you temporarily disable SELinux without rebooting?

4. What command displays all SELinux policy modules currently loaded?

5. Which SELinux user typically represents standard system users?

6. What is the difference between 'audit2allow -a' and 'audit2allow -a -M policy_name'?

7. Which tool can generate SELinux policy recommendations from audit logs?

8. What does the audit daemon (auditd) do in relation to SELinux?

9. When troubleshooting SELinux denials, which log file should you consult?

10. What command is used to add a custom file context rule to SELinux?

11. What command displays the current SELinux enforcement mode on a system?

12. How do you persistently change an SELinux boolean setting?

13. Which command lists all available SELinux booleans and their current status?

14. What is the purpose of SELinux booleans in policy management?

15. Which command displays the SELinux context of a file?

16. In SELinux, a security context consists of three primary components. Which is NOT one of them?

17. What does SELinux stand for?

18. Which tool is used to restore default SELinux file contexts across the filesystem?

19. What is the correct syntax to change a file's SELinux context using chcon?

20. Which SELinux mode allows policy rules to be checked but violations are only logged, not enforced?