1z0-105 試験問題を無料オンラインアクセス

Examine the current SELinux status:
# sestatus
SELinux status:
enabled
SELinuxfs mount:
/selinux
Current mode:
enforcing
Mode from config file:
permissive
Policy version:
Police from config file:
targeted
You have to meet these requirements:
1.Network services must run in a confined domain.
2.The guest user must be confined.
3.The guest user must not be allowed from using the su command.
4.Access to files and directories must be granted based only of the SELinux contexts.
5.The SELinux configuration must be persistent across system restarts.
6.Users must be able to publish private HTML content.
You issued these commands:
# setenforce enforcing
# semanage login -d -s guest_u guest
# setsebool -P httpd_enabled_homedirs on
Which requirements do you meet?

• A.2, 3, 4, 5, 6
• B.1, 2, 3, 6
• C.1, 2, 3, 4, 5, 6
• D.1, 6
• E.1, 2, 3, 5, 6
• F.1, 2, 3, 4, 6

Examine the output of the command: lssubsys -am
devices freezer net_cls perf_event hugetlb cpuset, cpu, memory /cgroup/A cpuacct /cgroup/cpuacct blkio /cgroup/B Now the lssubsys command is executed and new output is generated: ssubsys -am
devices perf_event hugetlb cpuset, cpu, memory /cgroup/A cpuacct /cgroup/cpuacct freezer, net_cls cgroup/C blkio /cgroup/B Which command or sequence of commands is correct?

• A.mkdir -p /cgroup/C; mount -t cgroup -o freezer C /cgroup/C; mount -t cgroup -o remount, freezer, net_cls C /cgroup/C
• B.mkdir -p /cgroup/C; mount -o freezer, net_cls cgroup /cgroup/C
• C.mkdir -p /cgroup/C; mount -t cgroup -o freezer freezer /cgroup/C; mount -tcgroup -o net_cls net_cls /cgroup/C
• D.mkdir -p /cgroup/C; mount -t cgroup -o freezer, net_cls /cgroup/c

Examine the sequence:
# sealert -l dda34207-61fd-4de2-831d-039c79270864
SELinux is preventing /usr/sbin/httpd from read access on the
file /var/www/manual/new_features_2_2.html.
***** Plugin restorecon (85.9 confidence) suggests *****
If you want to fix the label.
/var/www/manual/new_features_2_2.html default label should be httpd_sys_content_t.
Then you can run restorecon.
Do
# /sbin/restorecon -v /var/www/manual/new_features_2_2.html
***** Plugin catchall_boolen (7.33 confidence) suggests *****
If you want to allow httpd to read user content
Then you must tell SELinux about this by enabling the 'httpd_read_user_content' boolean. You
can read 'user_selinux' man page for more details.
Do
setsebool -P httpd_read_user_content 1
What action must you take for fix this problem?

• A.Report a bug.
• B.Relabel the file in question by using therestoreconcommand.
• C.Allowhttpdto read home directories by using thesetseboolcommand.
• D.Allowhttpdto read user content by using thesetseboolcommand.
• E.Generate a local policy by using theaudit2allowcommand.

A system has several multipathed devices. Some of them are in use with mounted file systems.
The remaining multipathed devices are unused.
The multipath command with the -F option is issued as shown:
[root@host03 /]# multipath -F
Which statement is true?

• A.The command returns a syntax error because an mpath device name must be supplied as the argument to the-Fswitch.
• B.Any faulted multipath devices are fixed, causing their faulty paths to be rediscovered if the underlying device is found to be available again. The mounted file system is unaffected.
• C.All multipath mapping except those that are in use are flushed, removing their mappings. The mounted file system is unaffected.
• D.All multipath mapping are flushed, thus removing theirmpathmappings. The mounted file system is unusable.

Examine the contents of /etc/mail/access:
Connect:localhost.localdomain
RELAY
Connect: localhost
RELAY
Connect:127.0.0.1
RELAY
This system is to be used as an MTA or mail gateway for the local LAN network address
192.168.1.0/24.
Which two actions allow this mail host to route email for the network?

• A.Runsendmailagain; and the updated file can be accessed automatically.
• B.Rebuild the access database file after the source files have been modified. Restarting the sendmail service automatically rebuilds the maps.
• C.Add this line to/etc/mail/access: To:192.168.1 RELAY
• D.Add this line to/etc/mail/access: From:192.168.1.0 RELAY
• E.Add this line to/etc/mail/access: Connect:192.168.1 RELAY