{ "A systems administrator is preparing a Linux system for application setup. The administrator needs to create an environment variable with a persistent value in one of the user accounts. Which of the following commands should the administrator use for this task?" }

A{ "export \"VAR=$VAR:value\" \u003e\u003e ~/.ssh/profile" }
B{ "export VAR=value" }
C{ "VAR=value" }
D{ "echo \"export VAR=value\" \u003e\u003e ~/.bashrc" }

Answer: D

{ "Adding export VAR=value to ~/.bashrc ensures the environment variable is set persistently for the user. The variable will load automatically in every new shell session." }

{ "A Linux user frequently tests shell scripts located in the /home/user/scripts directory. Which of the following commands allows the user to run the program by invoking only the script name?" }

A{ "export SHELL=$SHELL=/home/user/scripts" }
B{ "export TERM=$TERM=/home/user/scripts" }
C{ "export PATH=$PATH:/home/user/scripts" }
D{ "export alias /home/user/scripts='/bin'" }

Answer: C

{ "By appending /home/user/scripts to the PATH environment variable, the user can execute scripts from that directory by simply typing the script name without specifying the full path." }

{ "Which of the following is the main reason for setting up password expiry policies?" }

A{ "To avoid using the same passwords repeatedly" }
B{ "To mitigate the use of exposed passwords" }
C{ "To force usage of passwordless authentication" }
D{ "To increase password strength and complexity" }

Answer: B

{ "Password expiry policies ensure that even if a password has been compromised, its period of validity is limited, reducing the risk of long-term unauthorized access." }

{ "An administrator must secure an account for a user who is going on extended leave. Which of the following steps should the administrator take? (Choose two)." }

Choose two.

A{ "Set the user’s files to immutable." }
B{ "Instruct the user to log in once per week." }
C{ "Delete the user’s /home folder." }
D{ "Run the command passwd -l user." }
E{ "Change the date on the /home folder to that of the expected return date." }
F{ "Change the user’s shell to /sbin/nologin." }

Answer: DF

{ "passwd -l user locks the user’s account by disabling the password, preventing logins. Change the user’s shell to /sbin/nologin ensures the account cannot be used for interactive logins, further securing it." }

{ "A Linux administrator is updating the group membership by executing the following commands: However, the group membership is not changing. Which of the following explains this issue?" }

A{ "Executing usermod with sudo is not permitted." }
B{ "Users cannot be added to the wheel group with the usermod command." }
C{ "The command groups was run with sudo privileges." }
D{ "The options wheel and admin are transposed." }

Answer: C

{ "Running groups with sudo shows the groups for the root user, not for the admin user. That’s why the output only shows root. Without sudo, groups admin (or re-login) would correctly show the updated group membership, including wheel." }

{ "An administrator needs to verify the user ID, home directory, and assigned shell for the user named “accounting.” Which of the following commands should the administrator use to retrieve this information?" }

A{ "qetent passwd accounting" }
B{ "id accounting" }
C{ "grep accounting /etc/shadow" }
D{ "who accounting" }

Answer: A

{ "The getent passwd accounting command retrieves the user’s entry from the system’s password database, showing fields such as username, UID, GID, home directory, and assigned shell." }

{ "A Linux administrator wants to add a user to the Docker group without changing their primary group. Which of the following commands should the administrator use to complete this task?" }

A{ "sudo groupmod docker user" }
B{ "sudo usermod -g docker user" }
C{ "sudo usermod -aG docker user" }
D{ "sudo groupmod -G docker user" }

Answer: C

{ "The usermod -aG command appends (-a) the user to a supplementary group (-G) without changing their primary group. This is the correct way to add a user to the docker group." }

{ "Which of the following is a reason multiple password changes on the same day are not allowed?" }

A{ "To avoid brute-forced password attacks by making them too long to perform" }
B{ "To increase password complexity and the system’s security" }
C{ "To stop users from circulating through the password history to return to the originally used password" }
D{ "To enforce using multifactor authentication with stronger encryption algorithms instead of passwords" }

Answer: C

{ "Restricting multiple password changes in one day prevents users from cycling through password changes just to reuse an old password, thereby enforcing stronger security practices." }

{ "A Linux administrator wants to make the ENABLE_AUTH variable set to 1 and available to the environment of subsequently executed commands. Which of the following should the administrator use for this task?" }

A{ "let ENABLE_AUTH=1" }
B{ "ENABLE_AUTH=1" }
C{ "ENABLE_AUTH=$(echo $ENABLE_AUTH)" }
D{ "export ENABLE_AUTH=1" }

Answer: D

{ "The export command sets an environment variable and makes it available to subsequently executed commands and child processes, ensuring ENABLE_AUTH=1 is recognized system- wide in that shell session." }

{ "A systems administrator changed the file permissions on the myfile file: $ sudo chmod g+w myfile $ ls -l myfile -rwxrwxr-x 1 admin editors C 2022-10-13 10:45 myfile Then the administrator added an existing user test to the editors group: $ sudo usermod -aG editors test However, the user test is still unable to edit the file. Which of the following solutions will fix this issue?" }

A{ "The user test needs to log out and log back in before editing the myfile file." }
B{ "The file is only writable by the root user, and the user test needs root permissions." }
C{ "The group for the user test needs to be reloaded by running sudo source /etc/group." }
D{ "In order to edit the file, additional permissions are required that the user test does not have." }

Answer: A

{ "Group membership is only applied at login time. Having added “test” to the editors group, they must log out and log back in before the new group permissions take effect." }

{ "A Linux systems administrator is resolving a privileged access issue for users who are members of an admin group. Which of the following configuration files should the administrator update so the users in the admin group will have root privileged access to the Linux system?" }

A{ "/etc/sudoers" }
B{ "/etc/login.defs" }
C{ "/etc/group" }
D{ "/etc/shadow" }

Answer: A

{ "The /etc/sudoers file controls which users and groups can elevate privileges via sudo. By adding a line such as %admin ALL=(ALL) ALL to /etc/sudoers, members of the admin group gain root-level access." }

{ "A systems administrator needs to report the IP addresses of the users currently connected to the server. Which of the following commands should the administrator use to find the required information?" }

A{ "$ whois @localhost" }
B{ "$ w -i" }
C{ "$ cat /etc/hosts" }
D{ "$ who -l" }

Answer: B

{ "This command displays information about currently logged-in users and includes the IP addresses they are connected from, making it suitable for reporting active user connections." }

{ "A systems administrator must provide privileged access to a specific user in a Linux system. Which of the following commands should the administrator use?" }

A{ "usermod -aG sudo username" }
B{ "echo username \u003e\u003e /etc/sudoers.d/privileged" }
C{ "visudo username" }
D{ "sed -i 's/username/root/' /etc/passwd" }

Answer: A

{ "Adding the user to the sudo group grants privileged access by allowing the user to execute commands with elevated permissions through sudo, which is the standard and supported method on Linux systems." }

{ "While reviewing local accounts on a server, a Linux administrator discovers that multiple users have not changed their passwords in more than a year. Which of the following commands should the administrator execute to bring the users' accounts into compliance with the 90-day guideline?" }

A{ "chage -M 90" }
B{ "usermod -aG 90" }
C{ "passwd -d 90" }
D{ "loginctl -H 90" }

Answer: A

{ "The chage command is used to manage password aging policies, and setting the maximum password age to 90 days enforces the required password change interval for user accounts." }

{ "Which of the following is the best way to create a non-interactive account in a Linux system?" }

A{ "With no elevated privileges" }
B{ "By using adduser with no password" }
C{ "With no home directory" }
D{ "With the shell set to /sbin/nologin" }

Answer: D

{ "Setting the user’s shell to /sbin/nologin prevents interactive logins while still allowing the account to exist for services or background processes, which is the standard method for creating non- interactive accounts." }

{ "An administrator receives a report that a user is unable to execute the run report utility that is used to generate weekly reports. The administrator logs in as the user to verify the issue, runs the following commands, and receives the following output: Which of the following best describes the issue and how to resolve it?" }

      
        { "$ runreports\nbash: runreports: command not found\n$ ls -l /usr/local/bin/runreports\n-rwxr-xr-x. 1 root root 1289 Aug 14 09:12 /usr/local/bin/runreports\n$ echo $PATH\n/usr/local/sbin:/usr/sbin:/home/user/.local/bin:/home/user/bin" }

A{ "The runreports utility is not in the user's PATH. The administrator should modify the .bash_profile file." }
B{ "The runreports utility is a shell script, but not owned by the user, and is therefore unable to be run. The administrator should use the chown command." }
C{ "The user does not have the correct SELinux context to use the runreports utility. The administrator should modify the SELinux template." }
D{ "The runreports utility does not have execute permissions for the user. The administrator should add execute permissions for the user." }

Answer: A

{ "The runreports script exists in /usr/local/bin and has execute permissions, but /usr/local/bin is missing from the user’s PATH. Because the shell cannot find the command by name, adding /usr/local/bin to the user’s shell startup configuration resolves the issue." }

{ "A small group of remote users needs permission to run some administrative commands on a Linux server. Which of the following approaches is the best way to address this request?" }

A{ "Set the sticky bit in all binaries requested for use by this group of users." }
B{ "Request a list of utilities they need to use with elevated privileges, and add the appropriate rules." }
C{ "Set the configuration parameter PermitRootLogin on sshd_config to \"yes\" and share the root password with this group of users." }
D{ "Create a Linux group, add the users, and configure this group on /etc/sudoers to use sudo, thus allowing them to switch to root user." }

Answer: B

{ "The best approach is to follow least privilege by identifying the specific administrative commands the users need and creating sudo rules that allow only those commands with elevated privileges." }

{ "A Linux administrator installed a new program inside $HOME/.local/bin and is trying to execute it without using an absolute path. Which of the following should the administrator use for this task?" }

A{ "export PATH=PATH:$HOME/.local/bin" }
B{ "export $PATH=PATH:$HOME/.local/bin" }
C{ "export PATH=$PATH:$HOME/.local/bin" }
D{ "export $PATH-$PATH:$HOME/.local/bin" }

Answer: C

{ "The PATH variable must be updated by appending the new directory to the existing value. Using $PATH preserves the current search paths, and adding $HOME/.local/bin allows the shell to find executables in that directory without requiring an absolute path." }

{ "A systems administrator is reconfiguring existing user accounts in a Linux system. Which of the following commands should the administrator use to include \"myuser\" in the finance group?" }

A{ "groupadd finance myuser" }
B{ "groupmod finance myuser" }
C{ "useradd -g finance myuser" }
D{ "usermod -aG finance myuser" }

Answer: D

{ "To add an existing user (myuser) to an existing group (finance) without removing them from other groups, the correct command is usermod -aG finance myuser. The -aG option appends the user to the supplementary group(s) specified." }

{ "A user receives the following message when attempting to log in to a Linux workstation with the account named \"developer\": This account is currently not available A Linux administrator, who is working on the issue for the user, runs a few commands and receives the following output: Output 1: # grep -i developer /etc/passwd developer:x:1000:1000:Dev User:/home/developer:/sbin/nologin Output 2: # faillock —-user developer developer: When Type Source Valid # Output 3: # passwd -S developer developer PS 2022-03-09 0 99999 7 -l (Password set, unknown crypt variant.) Output 4: Which of the following commands can the administrator use to resolve the login issue for the account named \"developer\"?" }

A{ "passwd -u developer" }
B{ "chage -M -l developer" }
C{ "usermod developer -s /bin/bash" }
D{ "faillock --user developer --reset" }

Answer: C

{ "The account’s login shell is set to /sbin/nologin (which prevents interactive logins). Using usermod -s /bin/bash developer changes the shell to a valid login shell (/bin/bash), allowing the user to log in." }

{ "Before a Linux administrator restarts a system using systemd, the administrator wants to know if any of the server users are currently logged in. Which of the following commands should the administrator use to verify that the server is not being used?" }

A{ "loginctl list-sessions" }
B{ "journalctl -u" }
C{ "systemctl status user-sessions" }
D{ "systemd --user" }

Answer: A

{ "loginctl list-sessions shows all active user sessions on a systemd-based host, allowing the administrator to confirm whether any users are currently logged in." }

{ "A systems administrator wants to execute /usr/local/bin/script.sh from the user1 account. Which of the following commands will accomplish this task?" }

A{ "su -c user1 /usr/local/bin/script.sh" }
B{ "su - user1 /usr/local/bin/script.sh" }
C{ "sudo user1 /usr/local/bin/script.sh" }
D{ "sudo -1 user1 /usr/local/bin/script.sh" }

Answer: B

{ "The su - user1 /usr/local/bin/script.sh command switches to the user1 account with a login shell (the -), and passes the script path so that it runs under user1’s identity. The other options either misuse the -c flag or invoke sudo incorrectly." }