EX342 sample questions

Question 1

A critical production server running Red Hat Enterprise Linux 8 has experienced a sudden performance degradation. You need to collect comprehensive system configuration and diagnostic information to open a support case with Red Hat. You want to ensure that the collection includes all enabled plugins but excludes specific sensitive data located in `/var/tmp/`. Which command should you execute?

Accepted Answer

sos report --all-options --forbidden-path /var/tmp/

Answer

sos report --all-logs --skip-files /var/tmp/

Answer

sos report --enable-plugins all --clean

Answer

redhat-support-tool collect --exclude /var/tmp/

Question 2

You are configuring Performance Co-Pilot (PCP) on a fleet of web servers to collect historical performance metrics for retrospective analysis. You need to ensure that the `pmlogger` service collects metrics for the correct host and persists them across reboots. After installing the `pcp` package, what is the correct sequence of actions to enable the primary logger?

Accepted Answer

Edit /etc/pcp/pmlogger/control, run `systemctl enable --now pmlogger`

Answer

Run `pmlogger -c config.default`, then `chkconfig pcp on`

Answer

Edit /etc/pcp.conf, set logging=true, run `systemctl restart pmcd`

Answer

Run `pmcreate` to initialize archives, then `systemctl start pcp-archive`

Question 3

A security audit requires that you verify the integrity of system binaries daily. You have installed and initialized AIDE (Advanced Intrusion Detection Environment). After applying a legitimate system update using `dnf update`, you notice that AIDE reports thousands of discrepancies. What is the correct procedure to resolve this and prepare for the next audit?

Accepted Answer

Run `aide --update` and then replace the old database file with the newly generated one.

Answer

Run `aide --check` and ignore the output since the update was authorized.

Answer

Edit `/etc/aide.conf` to exclude the updated directories and restart the AIDE service.

Answer

Run `aide --init` to completely wipe the previous history and start over.

Question 4

You are configuring a centralized log server using `rsyslog`. The requirement is to accept logs from clients over TCP on port 514 and store them in dynamic directories based on the hostname. Which TWO configuration directives must be present in `/etc/rsyslog.conf` on the server? (Select TWO)

Accepted Answer

module(load="imtcp") input(type="imtcp" port="514")

Accepted Answer

$template RemoteLogs,"/var/log/remote/%HOSTNAME%/%PROGRAMNAME%.log"
*.* ?RemoteLogs

Answer

module(load="imudp") input(type="imudp" port="514")

Answer

action(type="omfwd" target="192.168.1.50" port="514" protocol="tcp")

Question 5

A system administrator needs to troubleshoot a recurring issue where the `systemd-journald` service rotates logs too frequently, losing critical historical data. The system has a dedicated `/var/log/journal` directory. Which configuration in `/etc/systemd/journald.conf` should be adjusted to increase the maximum disk space used by the journal?

Accepted Answer

SystemMaxUse

Answer

Storage=volatile

Answer

RuntimeMaxUse

Answer

ForwardToSyslog

Question 6

You are troubleshooting a system that hangs indefinitely during the boot process. You suspect a specific service is failing to start and blocking the boot sequence. To diagnose this, you want to enable a root shell on TTY9 early in the boot process. Which kernel command line parameter should you append to the boot loader entry?

Accepted Answer

systemd.debug-shell=1

Answer

systemd.unit=rescue.target

Answer

rd.break=pre-mount

Answer

init=/bin/sh

Top vendors

Top exams

Free EX342 sample questions

You are configuring a centralized log server using `rsyslog`. The requirement is to accept logs from clients over TCP on port 514 and store them in dynamic directories based on the hostname. Which TWO configuration directives must be present in `/etc/rsyslog.conf` on the server? (Select TWO)

6 more free samples are waiting