最新なRedHat RHCE問題集（111題）、真実試験の問題を全部にカバー！

質問 1：
CORRECT TEXT
Resize the logical volume vo and its filesystem to 290 MB. Make sure that the filesystem contents remain intact.
Note: Partitions are seldom exactly the same size requested, so a size within the range of 260 MB to 320 MiB is acceptable.
正解：
df-hTlvextend-L+100M/dev/vg0/volvscanxfs_growfs/home///homeisLVMmounteddirectoryNote:Thisstepisonlyneedtodoinourpracticeenvironmentyoudonotneedtodointherealexamresize2fs/dev/vg0/vo//Usethiscomandtoupdateintherealexamdf-hTORe2fsck-f/dev/vg0/voumount/homeresize2fs/dev/vg0/vorequiredpartitioncapacitysuchas100Mlvreduce-l100M/dev/vg0/vomount/dev/vg0/vo/homedf-Ht

質問 2：
CORRECT TEXT
Binding to an external validation server.
System server.domain11.example.com provides a LDAP validation service, your system should bind to this service as required:
Base DN of validation service is dc=example,dc=com
LDAP is used for providing account information and validation information Connecting and using the certification of http://server.domain11.example.com/pub/EXAMPLE-CA-CERT to encrypt
After the correct configuration, ldapuser1 can log into your system, it does not have HOME directory until you finish autofs questions, ldapuser1 password is password.
正解：
yum-yinstallsssdauthconfig-gtkkrb5-workstationauthconfig-gtk//openthegraphicalinterfaceModifyuseraccountdatabasetoldapfillupDNandLDAPSERVERasquestionsrequireduseTLStoencryptconnectionsmakingtickwritehttp://server.domain11.example.com/pub/EXAMPLE-CA-CERTtodownloadcaauthenticationmethodchooseldappassword.Youcantestiftheldapuserisaddedbythefollowingcommand:Idldapuser1Note:userpassworddoesn'tnotneedtoset

質問 3：
CORRECT TEXT
You have a domain named www.rhce.com associated IP address is 192.100.0.2. Configure the Apache web server by implementing the SSL for encryption communication.
正解：
vi/etc/httpd/conf.d/ssl.conf<VirtualHost192.100.0.2>ServerNamewww.rhce.comDocumentRoot/var/www/rhceDirectoryIndexindex.htmlindex.htmServerAdminwebmaster@rhce.comSSLEngineonSSLCertificateFile/etc/httpd/conf/ssl.crt/server.crtSSLCertificateKeyFile/etc/httpd/conf/ssl.key/server.key</VirtualHost>
cd/etc/httpd/conf3maketestcert
Createthedirectoryandindexpageonspecifiedpath.(Indexpagecandownloadfromftp://server1.example.comatexamtime)
servicehttpdstart|restart
chkconfighttpdonApachecanprovideencryptedcommunicationsusingSSL(SecureSocketLayer).Tomakeuseofencryptedcommunicationaclientmustrequesttohttpsprotocolwhichisusesport443.ForHTTPSprotocolrequiredthecertificatefileandkeyfile.

質問 4：
CORRECT TEXT
User mary must configure a task.
Requirement: The local time at 14:23 every day echo "Hello World.".
正解：
crontab-umary-e2314***echo"HelloWorld."

質問 5：
CORRECT TEXT
Configure the permissions of /var/tmp/fstab
Copy the file /etc/fstab to /var/tmp/fstab. Configure the permissions of /var/tmp/fstab so that:
the file /var/tmp/fstab is owned by the root user.
the file /var/tmp/fstab belongs to the group root.
the file /var/tmp/fstab should not be executable by anyone.
the user natasha is able to read and write /var/tmp/fstab.
the user harry can neither write nor read /var/tmp/fstab.
all other users (current or future) have the ability to read /var/tmp/fstab.
正解：
cp-a/etc/fstab/var/tmp
cd/var/tmp
ls-l
getfacl/var/tmp/fstab
chmodugo-x/var/tmp/fstab[Noneedtodothistherewon'tbeexecutepermissionforthefilebydefault]
#setfacl-mu:natasha:rw/var/tmp/fstab
#setfacl-mu:harry:0/var/tmp/fstab(zero)[Readpermissionwillbethereforalltheusersbydefault.Checkitusingls-l/var/tmp/fstab]Verifyby[ls-la/var/tmp/fstab]

質問 6：
CORRECT TEXT
Create a 512M partition, make it as ext4 file system, mounted automatically under /mnt/data and which take effect automatically at boot-start.
正解：
#fdisk/dev/vdan+512Mw
#partprobe/dev/vda
#mkfs-text4/dev/vda5
#mkdir-p/data
#vim/etc/fstab/dev/vda5/dataext4defaults00
#mount-a

質問 7：
CORRECT TEXT
Add a swap partition.
Adding an extra 500M swap partition to your system, this swap partition should mount automatically when the system starts up. Don't remove and modify the existing swap partitions on your system.
正解：
fdisk-cu/dev/vda//inthewayofexpandingthepartitiondon'tmakemainpartitionpartx-a/dev/vdamkswap/dev/vdaxswapon/dev/vdaxswapon-svi/etc/fstab/dev/vdaxswapswapdefaults00mount-a

質問 8：
CORRECT TEXT
Configure iptables, there are two domains in the network, the address of local domain is 172.24.0.0/16 other domain is 172.25.0.0/16, now refuse domain 172.25.0.0/16 to access the server.
正解：
below
iptables-F
serviceiptablessave
iptables-AINPUT-s172.25.0.0/16-jREJECT
serviceiptablessave
serviceiptablesrestart