D281 ITEC 3004 Linux Foundations
Final Assessment Review
(Questions & Solutions)
2025
©2025
, 1. Case Study – Kernel Modules and System Performance
A network engineer at a data center notices that certain services
requiring specialized hardware interfaces suddenly fail. Upon
investigation, it is discovered that essential kernel modules are not
loaded at boot.
Question: Which Linux command would best help diagnose missing or
unloaded kernel modules?
A. modinfo
B. lsmod
C. insmod
D. rmmod
ANS: B. lsmod
Rationale: The `lsmod` command lists the currently loaded kernel
modules. It is the primary diagnostic tool to verify whether necessary
modules are active.
---
2. Case Study – Boot Process and systemd
While troubleshooting a server that fails to boot, a system administrator
discovers errors in the system initialization process. The server uses
systemd.
Question: Which systemd command can be used to review boot logs
for diagnosing the boot failure?
A. systemctl status
B. journalctl -b
C. chkconfig
D. dmesg -n
ANS: B. journalctl -b
Rationale: The command `journalctl -b` displays systemd’s journal
messages from the current boot, helping administrators pinpoint errors
during startup.
©2025
, ---
3. Case Study – File-system Hierarchy and Permissions
A security auditor reviews critical configuration files and notes that
sensitive files in `/etc` must be protected.
Question: Which special permission bit, when set on an executable file,
runs the file with the owner’s privileges?
A. Sticky bit
B. Setgid
C. Setuid
D. SUID
ANS: C. Setuid
Rationale: The setuid (SUID) bit, when applied to an executable, causes
the program to run with the permissions of the file’s owner, which is
critical for secure system operations.
---
4. Case Study – Security Policies with SELinux
A network security specialist is tasked with ensuring that a web server
supports SELinux for enhanced security. The server’s SELinux mode is set
to _permissive_.
Question: What is the primary difference between _permissive_ and
_enforcing_ modes in SELinux?
A. Permissive mode disables logging of breeches
B. Enforcing mode restricts actions based on policy and logs violations
C. Permissive mode restricts actions without logging
D. Enforcing mode has no effect on the system’s behavior
ANS: B. Enforcing mode restricts actions based on policy and logs
violations
Rationale: In enforcing mode, SELinux actively prevents actions that
violate policy, while in permissive mode it only logs these actions without
enforcement, which is important to understand for system hardening.
---
©2025
Final Assessment Review
(Questions & Solutions)
2025
©2025
, 1. Case Study – Kernel Modules and System Performance
A network engineer at a data center notices that certain services
requiring specialized hardware interfaces suddenly fail. Upon
investigation, it is discovered that essential kernel modules are not
loaded at boot.
Question: Which Linux command would best help diagnose missing or
unloaded kernel modules?
A. modinfo
B. lsmod
C. insmod
D. rmmod
ANS: B. lsmod
Rationale: The `lsmod` command lists the currently loaded kernel
modules. It is the primary diagnostic tool to verify whether necessary
modules are active.
---
2. Case Study – Boot Process and systemd
While troubleshooting a server that fails to boot, a system administrator
discovers errors in the system initialization process. The server uses
systemd.
Question: Which systemd command can be used to review boot logs
for diagnosing the boot failure?
A. systemctl status
B. journalctl -b
C. chkconfig
D. dmesg -n
ANS: B. journalctl -b
Rationale: The command `journalctl -b` displays systemd’s journal
messages from the current boot, helping administrators pinpoint errors
during startup.
©2025
, ---
3. Case Study – File-system Hierarchy and Permissions
A security auditor reviews critical configuration files and notes that
sensitive files in `/etc` must be protected.
Question: Which special permission bit, when set on an executable file,
runs the file with the owner’s privileges?
A. Sticky bit
B. Setgid
C. Setuid
D. SUID
ANS: C. Setuid
Rationale: The setuid (SUID) bit, when applied to an executable, causes
the program to run with the permissions of the file’s owner, which is
critical for secure system operations.
---
4. Case Study – Security Policies with SELinux
A network security specialist is tasked with ensuring that a web server
supports SELinux for enhanced security. The server’s SELinux mode is set
to _permissive_.
Question: What is the primary difference between _permissive_ and
_enforcing_ modes in SELinux?
A. Permissive mode disables logging of breeches
B. Enforcing mode restricts actions based on policy and logs violations
C. Permissive mode restricts actions without logging
D. Enforcing mode has no effect on the system’s behavior
ANS: B. Enforcing mode restricts actions based on policy and logs
violations
Rationale: In enforcing mode, SELinux actively prevents actions that
violate policy, while in permissive mode it only logs these actions without
enforcement, which is important to understand for system hardening.
---
©2025
