EX200 Practice Questions

Solution:

Read-only access:

setfacl -m u:john:r-- /share/dev

Read-write access:

setfacl -m u:john:rw- /share/dev

Remove ACL permissions:

setfacl -m u:john:--- /share/dev

Detailed Explanation:

setfacl -m modifies the ACL.

u:john:r-- grants read only.

u:john:rw- grants read and write.

u:john:--- effectively removes access for that ACL entry.

ACLs are used when standard owner/group/other permissions are not enough.

Solution:

dnf install -y httpd policycoreutils-python-utils

mkdir -p /webdata

echo "RHEL10 Web Server" > /webdata/index.html

sed -i 's/^Listen 80/Listen 8080/' /etc/httpd/conf/httpd.conf

semanage port -a -t http_port_t -p tcp 8080

firewall-cmd --permanent --add-port=8080/tcp

firewall-cmd --reload

systemctl enable --now httpd

systemctl restart httpd

ss -tulpn | grep 8080

Detailed Explanation:

Apache defaults to port 80, so Listen 8080 changes the service port.

SELinux must allow Apache to bind to 8080, which is done with semanage port.

firewall-cmd opens the port externally.

RHEL 10 documents firewalld as the standard firewall management interface and SELinux port labeling for confined services. ( Red Hat Documentation )