Question 1

Examine this udev device naming rule which gets processed successfully: makefile KERNEL=="hdb", DRIVER=="ide-disk", SYMLINK+="sparedisk" Which two statements are true?

Accepted Answer

C, D

Explanation: The provided udev rule KERNEL=="hdb", DRIVER=="ide-disk", SYMLINK+="sparedisk" is processed based on a set of conditions and an action. The comma separating the key-value pairs acts as a logical AND operator. Therefore, the rule will only trigger if a device event occurs where the kernel-assigned name is "hdb" and the device is using the "ide-disk" driver. The SYMLINK+="sparedisk" directive instructs udev to create a symbolic link named /dev/sparedisk that points to the actual device node, which is /dev/hdb. This does not rename the original device node; it only provides an additional, persistent name.

Question 2

Which three statements are true about DNF modules?

Accepted Answer

A, B, F

Explanation: DNF modules, a feature of Application Streams, are designed to manage different versions of software within a single OS release. A module is a logical group of related RPM packages that constitute a component, such as a specific application or database. When installing a module, a user must select a "stream," which typically corresponds to a major version of the software (e.g., postgresql:10 or postgresql:12). This allows packages for different software versions to be available in the repositories simultaneously, organized by their respective streams.

Question 3

Which command produces human-readable timestamps in kernel ring buffer messages?

Accepted Answer

C

Explanation: The dmesg -T (or --ctime) command is used to print kernel ring buffer messages with human-readable timestamps. This option converts the kernel's internal timestamp, which is typically the number of seconds since boot, into a standard wall-clock time format (e.g., [Tue May 21 10:30:00 2024]). This functionality is crucial for administrators who need to correlate kernel events with other system logs or real-world time, especially during troubleshooting and system analysis.

Question 4

Which two statements are true about the configuration and use of cron or anacron?

Accepted Answer

D, E

Explanation: The anacron utility is designed for systems that are not running continuously, such as laptops or desktops. Its configuration file, /etc/anacrontab, specifies job frequency in days, meaning the highest frequency a job can run is once per day. The primary purpose of anacron is to ensure that periodic system jobs (e.g., daily, weekly, monthly scripts typically managed by cron) are executed even if the system was powered off at their scheduled time. It checks timestamps to see if a job was missed and runs it if necessary after the system boots.

Question 5

Examine this output:
Last metadata expiration check: 4:30:21 ago on Mon 26 Oct 2020 03:09:52 PM GMT
Installed Packages
Name
: gzip
Version
: 1.9
Release
: 9.el8
Architecture : x86_64
Size
: 412 k
Source
: gzip-1.9-9.el8.src.rpm
Repository : @System
From repo
: anaconda
Summary
: The GNU data compression program
URL
: http://www.gzip.org/
License
: GPLv3+ and GFDL
Description : The gzip package contains the popular GNU gzip data compression
program. Gzipped files have a .gz extension.
Gzip should be installed on your system, because it is a very
commonly used data compression program.
Which command generated it?

Accepted Answer

C

Explanation: The dnf info command is used to display detailed information about a package. The output provided in the question, which includes fields like Name, Version, Release, Size, Source, Repository, and a full Description, is the standard format for this command. DNF is capable of resolving a file path, such as /usr/bin/gzip, to the package that owns it (gzip) and then displaying the detailed information for that specific package. The "Installed Packages" heading confirms that information for a package on the local system is being displayed.

Question 6

Which two statements are true about the proc and sys file systems?

Accepted Answer

A, C

Explanation: The /proc filesystem is a virtual filesystem that provides a direct interface to kernel data structures. It contains numerous files that report on the system's state, including /proc/cpuinfo for detailed processor information and /proc/meminfo for memory usage statistics. Similarly, the /sys filesystem (sysfs) exports information from the kernel's device model to user space in a structured way. It also contains detailed information about core hardware, with CPU topology and control files located under /sys/devices/system/cpu/ and memory block information under /sys/devices/system/memory/. Both filesystems serve as sources for CPU and memory information, though they present it differently.

Question 7

Which is true about the /etc/sysconfig directory in an Oracle Linux 8 system?

Accepted Answer

C

Explanation: The /etc/sysconfig directory in Oracle Linux 8 contains static configuration files and scripts that control the behavior of system services and utilities. When a software package that provides a system service (e.g., chronyd, sshd, network-scripts) is installed, it often places a corresponding configuration file in this directory. For example, installing the chronyd package creates /etc/sysconfig/chronyd. Therefore, the contents of the /etc/sysconfig directory are directly dependent on which packages are installed on the system, allowing administrators to customize service parameters.

Question 8

Which three statements are true about the journalctl command?

Accepted Answer

B, D, E

Explanation: The journalctl command is used to query and display logs from the systemd journal. B: The -p or --priority option filters messages by a specified priority level and all levels that are more severe. Specifying -p err (priority 3) will display messages logged at the err, crit (2), alert (1), and emerg (0) levels. While the wording "only error log level" is imprecise, it is interpreted in this context as filtering based on the error level, which is correct. D: The -k or --dmesg flag is a shortcut to show only kernel messages. This option implicitly applies the -b flag, which restricts the output to messages from the current boot only. E: The -p option accepts numerical priority values. info corresponds to priority 6. Therefore, journalctl -p 6 will display all messages with a priority of 6 (info) or a more severe priority (0-5).

Question 9

Which three are features of the btrfs file system?

Accepted Answer

A, B, E

Explanation: The B-tree file system (btrfs) is a modern, copy-on-write (CoW) file system for Linux. Its core design includes several advanced features. It has integrated volume management, which allows it to manage multiple block devices, supporting various RAID levels, including mirroring (RAID1). As a fundamental characteristic, it uses a copy-on-write technique for both data and metadata, which enables robust features like snapshots and data integrity checks. Btrfs also supports online operations, including the ability to add or remove devices and resize the file system while it is mounted and in active use.

Question 10

Which two components are used for creating a new rsyslog rule?

Accepted Answer

A, B

Explanation: An rsyslog rule defines how to process a specific log message and consists of two fundamental components. The first is a filter (also known as a selector), which specifies the conditions a message must meet to be selected, such as its facility (e.g., kern, mail) and priority level (e.g., info, err). The second component is the action, which defines what to do with the selected message, such as writing it to a specific file, sending it to a remote server, or discarding it. This filter-action structure forms the basis of all rules in the rsyslog.conf file.

Question 11

Examine this command: # ssh -L 5011:127.0.0.1:80 bob@10.10.2.20 -f sleep 30 Which two are true upon execution?

Accepted Answer

B, E

Explanation: The command ssh -L 5011:127.0.0.1:80 bob@10.10.2.20 -f sleep 30 performs two primary actions. First, the -L 5011:127.0.0.1:80 option creates a local port forward. This means the local client will listen on port 5011, and any connection to this port will be securely tunneled through the SSH connection and forwarded to port 80 on the remote server (10.10.2.20). Second, the -f option instructs the ssh client to go into the background after successful authentication. The sleep 30 command simply keeps the connection alive for 30 seconds, after which the tunnel will close.

Question 12

Examine these commands, which execute successfully:
# firewall-cmd --zone=public --add-service=cockpit --permanent
# firewall-cmd --zone=public --add-port=1313/tcp --permanent
# firewall-cmd --reload
Which are true upon execution?

Accepted Answer

A, C

Explanation: The command firewall-cmd --zone=public --add-service=cockpit --permanent specifically targets the public zone using the --zone=public option. Therefore, the rule for the Cockpit service is applied exclusively to this zone. The --permanent flag is used in both rule-adding commands, which writes the changes to the configuration files on disk (e.g., /etc/firewalld/zones/public.xml). The firewalld daemon reads these permanent configuration files on startup or when reloaded. This ensures that the configuration persists and is not lost after a system reboot or a restart of the firewalld service. The firewall-cmd --reload command then applies these saved permanent rules to the active runtime configuration.

Question 13

Examine this content from /etc/chrony.conf: ... pool pool.ntp.org offline driftfile /var/lib/chrony/drift keyfile /etc/chrony.keys ... Which statement is true about pool.ntp.org?

Accepted Answer

D

Explanation: The offline option specified for the pool pool.ntp.org directive in the /etc/chrony.conf file instructs the chronyd daemon to not poll this source upon startup. The source is considered to be unavailable by default. For chronyd to start using this pool for time synchronization, an administrator must manually enable it. This is accomplished by using the online command within the chronyc command-line interface, which is the user-facing tool for monitoring and controlling the chronyd daemon. This feature is particularly useful for intermittent network connections where polling should only occur when the connection is known to be active.

Question 14

Which two commands relabel an SELinux system after a reboot?

Accepted Answer

D, F

Explanation: The two standard methods to schedule a full SELinux filesystem relabel on the next system boot are creating a special flag file in the root directory or using a specific command designed for this purpose. The command touch /.autorelabel creates the required empty flag file. The init system (e.g., systemd) checks for the existence of this file during the boot process and, if found, initiates a complete relabeling of all files according to the loaded SELinux policy before mounting the filesystems for normal operation. The command fixfiles -F onboot is a utility that performs the same action by creating the /.autorelabel file.

Question 15

Which two statements are true about the Linux Auditing System?

Accepted Answer

A, B

Explanation: The Linux Auditing System (auditd) is a kernel-level framework for monitoring security-relevant events. Administrators can define rules to track specific activities. One common use is to create a "watch" rule on a sensitive file or directory, such as a user's home directory, which logs all access attempts, including those by the root user. Furthermore, the system operates by intercepting system calls. Defining rules that monitor frequently used system calls can generate a high volume of log data. The overhead of processing, filtering, and writing these events to disk can introduce a noticeable performance impact on the system, requiring careful rule configuration to balance security monitoring with system performance.

Free Oracle 1Z0-106 Actual Exam Questions