EX342 sample questions

Question 1

You are configuring Performance Co-Pilot (PCP) on a fleet of web servers to collect historical performance metrics for retrospective analysis. You need to ensure that the `pmlogger` service collects metrics for the correct host and persists them across reboots. After installing the `pcp` package, what is the correct sequence of actions to enable the primary logger?

Accepted Answer

Edit /etc/pcp/pmlogger/control, run `systemctl enable --now pmlogger`

Answer

Run `pmcreate` to initialize archives, then `systemctl start pcp-archive`

Answer

Edit /etc/pcp.conf, set logging=true, run `systemctl restart pmcd`

Answer

Run `pmlogger -c config.default`, then `chkconfig pcp on`

Question 2

A security audit requires that you verify the integrity of system binaries daily. You have installed and initialized AIDE (Advanced Intrusion Detection Environment). After applying a legitimate system update using `dnf update`, you notice that AIDE reports thousands of discrepancies. What is the correct procedure to resolve this and prepare for the next audit?

Accepted Answer

Run `aide --update` and then replace the old database file with the newly generated one.

Answer

Run `aide --check` and ignore the output since the update was authorized.

Answer

Run `aide --init` to completely wipe the previous history and start over.

Answer

Edit `/etc/aide.conf` to exclude the updated directories and restart the AIDE service.

Question 3

You are configuring a centralized log server using `rsyslog`. The requirement is to accept logs from clients over TCP on port 514 and store them in dynamic directories based on the hostname. Which TWO configuration directives must be present in `/etc/rsyslog.conf` on the server? (Select TWO)

Accepted Answer

$template RemoteLogs,"/var/log/remote/%HOSTNAME%/%PROGRAMNAME%.log"
*.* ?RemoteLogs

Accepted Answer

module(load="imtcp") input(type="imtcp" port="514")

Answer

module(load="imudp") input(type="imudp" port="514")

Answer

action(type="omfwd" target="192.168.1.50" port="514" protocol="tcp")

Question 4

A system administrator needs to troubleshoot a recurring issue where the `systemd-journald` service rotates logs too frequently, losing critical historical data. The system has a dedicated `/var/log/journal` directory. Which configuration in `/etc/systemd/journald.conf` should be adjusted to increase the maximum disk space used by the journal?

Accepted Answer

SystemMaxUse

Answer

ForwardToSyslog

Answer

RuntimeMaxUse

Answer

Storage=volatile

Question 5

You are troubleshooting a system that hangs indefinitely during the boot process. You suspect a specific service is failing to start and blocking the boot sequence. To diagnose this, you want to enable a root shell on TTY9 early in the boot process. Which kernel command line parameter should you append to the boot loader entry?

Accepted Answer

systemd.debug-shell=1

Answer

systemd.unit=rescue.target

Answer

init=/bin/sh

Answer

rd.break=pre-mount

Question 6

A system administrator has lost the root password for a Red Hat Enterprise Linux 8 system. They have rebooted the system, interrupted the GRUB boot loader, and appended `rd.break` to the kernel line. After the system boots into emergency mode, which sequence of commands is required to reset the password and ensure the system remains accessible after reboot?

Accepted Answer

mount -o remount,rw /sysroot; chroot /sysroot; passwd root; touch /.autorelabel; exit; exit

Answer

mount -o remount,rw /; passwd root; touch /etc/autorelabel; reboot

Answer

chroot /sysroot; mount -o remount,rw /; passwd root; exit; reboot

Answer

chroot /sysroot; passwd root; setenforce 0; exit; exit

Free EX342 sample questions

You are configuring a centralized log server using `rsyslog`. The requirement is to accept logs from clients over TCP on port 514 and store them in dynamic directories based on the hostname. Which TWO configuration directives must be present in `/etc/rsyslog.conf` on the server? (Select TWO)

6 more free samples are waiting