EX200 practice questions

Q: Is this EX200 practice test free?

Yes. All 15 EX200 practice questions on this page are free, with instant scoring and a written explanation for each answer. You do not need an account and there is no time limit.

Q: How much does the real EX200 exam cost?

The official price is $500. Cyber VK sells the same official EX200 voucher for $338.99 — a saving of $161.01. The voucher is identical to one bought direct and is emailed within minutes of payment.

Q: Are these questions the same as the real EX200 exam?

No. These are original practice questions written to match the published exam objectives and difficulty. They are not real exam questions — sharing or reproducing live exam content breaches every certification body's candidate agreement and can void your certification.

Q: How should I use this practice test?

Use it as a readiness check rather than a study tool. Work through the questions without notes, read the explanation for every answer including the ones you got right, and treat any domain where you miss more than a third as the area to revise before booking your exam.

Question 1

Which command creates the user account "analyst" with UID 1600 and adds it to the existing supplementary group "devops"?

Accepted Answer

The -u option sets the UID and -G assigns supplementary groups, while -g would set the primary group and usermod only modifies an account that already exists.

Question 2

A policy requires that the user "jdoe" must change their password every 30 days and receive a warning 7 days before expiration. Which command applies both settings?

Accepted Answer

Uppercase -M sets the maximum password age in days and uppercase -W sets the warning period; lowercase -m sets the minimum age and -w is not a valid chage option.

Question 3

You must ensure that all user accounts created in the future have a maximum password age of 60 days, without altering the aging settings of existing accounts. What should you do?

Accepted Answer

PASS_MAX_DAYS in /etc/login.defs supplies the default maximum password age applied when new accounts are created and leaves existing accounts untouched; /etc/default/useradd controls account expiration and inactivity, not password aging.

Question 4

Which command displays all block devices in a tree layout together with their sizes and current mount points?

Accepted Answer

lsblk lists block devices hierarchically with size and mountpoint columns, whereas df reports only mounted filesystems and blkid reports UUIDs and filesystem types.

Question 5

The logical volume /dev/vgdata/lvapp holds an XFS filesystem mounted at /app. Which single command adds 500 MiB to the volume and grows the filesystem to match?

Accepted Answer

The -r option tells lvextend to resize the underlying filesystem after growing the volume, and +500M adds to the current size rather than setting an absolute size; resize2fs works only on ext filesystems.

Question 6

You created the logical volume /dev/vgsys/lvswap and formatted it with mkswap. Which /etc/fstab entry activates it at boot with a priority higher than the default swap device?

Accepted Answer

Swap devices use "none" (or "swap") as the mount point with filesystem type swap, and the pri=N mount option sets swap priority; the dump and fsck fields must both be 0 for swap.

Question 7

Which command places SELinux in permissive mode immediately, with the change reverting after the next reboot?

Accepted Answer

setenforce 0 switches the running mode to permissive at once but does not write to /etc/selinux/config, so the configured mode returns at boot.

Question 8

You moved web content into /srv/mysite and Apache returns 403 errors. Which approach applies the correct SELinux context so that it also survives a full filesystem relabel?

Accepted Answer

semanage fcontext writes the label rule into the local policy database so restorecon and any future relabel reapply it, while chcon changes only the on-disk label temporarily and restorecon alone would restore the incorrect default context.

Question 9

Apache must listen on TCP port 8888, but httpd fails to bind while SELinux is enforcing. Which command allows the web server to use that port?

Accepted Answer

Port 8888 is not yet defined in the SELinux policy, so it must be added (-a) to the http_port_t type; -m only modifies an already-defined port, and firewall rules do not affect SELinux port labeling.

Question 10

Which command starts the sshd service immediately and configures it to start automatically at every boot?

Accepted Answer

The --now flag combined with enable activates the unit in the running system and creates the boot-time symlink in a single command.

Question 11

You interrupted GRUB, appended rd.break to the kernel line, remounted /sysroot read-write, chrooted, and changed the root password. SELinux is in enforcing mode. What must you do before rebooting so that root can log in?

Accepted Answer

Files written during rd.break receive no SELinux label, so creating /.autorelabel triggers a full filesystem relabel on the next boot and restores the correct context on /etc/shadow.

Question 12

Journal data is currently lost on every reboot. Which action makes systemd journal logs persist across reboots?

Accepted Answer

Storage=persistent causes journald to create and use /var/log/journal on disk instead of the volatile /run/log/journal; forwarding to syslog and vacuuming do not change where the journal itself is stored.

Question 13

Which podman command downloads the ubi9 image to the local storage without creating or starting a container?

Accepted Answer

podman pull only fetches the image layers into local storage, while run and create both instantiate a container from the image and images merely lists what is already downloaded.

Question 14

A rootless container managed by a systemd user unit for the account "appsvc" must start at boot and keep running even when nobody is logged in as that user. Which step accomplishes this?

Accepted Answer

Without lingering enabled, the user manager is only started at login and torn down at logout, so enable-linger is what allows the user's units to launch at boot and survive logout.

Question 15

With SELinux enforcing, which podman option bind-mounts the host directory /opt/data into a container at /data and relabels the content so only that container can access it?

Accepted Answer

The uppercase :Z suffix applies a private, unshared SELinux category label to the mounted content, while lowercase :z applies a shared label usable by multiple containers.

EX200 — EX200 Red Hat Certified System Administrator RHCSA Exam Voucher | Buy Online Practice Test

Free Practice Test

EX200 practice test — common questions