15 Questions You Must Practice Before Your RHCSA Exam

Practice, Verify, Succeed — Your Complete RHCSA Preparation Guide

Preparing for the Red Hat Certified System Administrator (RHCSA) exam can be daunting. The key to success isn’t just reading documentation — it’s hands-on practice with real-world scenarios. Here are 15 essential questions that mirror actual exam tasks, complete with solutions and commands you need to master.

1. Configure Static Network Settings

Challenge: Configure a static IPv4 address, DNS, and gateway for eth0 so changes persist after reboot.

Solution:

nmcli con add type ethernet con-name mycon ifname eth0 \
  ipv4.addresses 192.168.0.100/24 \
  ipv4.gateway 192.168.0.1 \
  ipv4.dns 1.1.1.1 \
  ipv4.method manual
nmcli con up mycon
nmcli con show mycon

Network configuration is fundamental. Master nmcli as it's the modern way to manage networking in RHEL systems.

2. User and Group Management

Challenge: Add a local user demo, set password expiry to 7 days, create a new group devops, and add the user to the group.

Solution:

sudo useradd demo
sudo passwd demo
sudo chage -M 7 demo
sudo groupadd devops
sudo usermod -aG devops demo

User management is a core admin task. Remember that -aG appends to groups without removing existing memberships.

3. Logical Volume Management

Challenge: Create a new logical volume backup_lv (2G) in vg01, format as XFS, and mount at /mnt/backup with persistent mounting.

Solution:

sudo lvcreate -n backup_lv -L 2G vg01
sudo mkfs.xfs /dev/vg01/backup_lv
sudo mkdir /mnt/backup
echo '/dev/vg01/backup_lv /mnt/backup xfs defaults 0 0' | sudo tee -a /etc/fstab
sudo mount -a

LVM is crucial for dynamic storage management. Always verify your /etc/fstab entries with mount -a before rebooting.

4. File Permissions with Umask

Challenge: Set umask so all newly created files are only readable and writable by the owner.

Solution:

umask 077         # Add to ~/.bashrc or /etc/profile
source ~/.bashrc
touch newfile; ls -l newfile    # Verify: -rw-------

Understanding umask is essential for security. The value 077 ensures maximum privacy for new files.

5. SSH Access Control

Challenge: Restrict SSH so only users in the sshusers group can log in remotely.

Solution:

# Create group and add users
sudo groupadd sshusers
sudo usermod -aG sshusers youruser

# Edit /etc/ssh/sshd_config and add:
AllowGroups sshusers

# Reload SSH service
sudo systemctl reload sshd

SSH hardening is a critical security practice. Always test your configuration before logging out!

6. Task Scheduling

Challenge: Schedule a script to run daily at midnight with cron, and run a one-time task at 14:00 tomorrow with at.

Solution:

# For recurring tasks (crontab -e):
0 0 * * * /home/user/backup.sh

# For one-time tasks:
echo "/home/user/oneshot.sh" | at 14:00 tomorrow

Automation is power. Know both cron for recurring tasks and at for one-off scheduled jobs.

7. Process Management

Challenge: Kill all processes named myapp and change the priority of process ID 1234 to 10.

Solution:

sudo pkill myapp
sudo renice 10 -p 1234

Process management is daily admin work. pkill is safer than killall as it matches by exact process name.

8. Archive and Compression

Challenge: Create a tar archive of /etc called etc.tar.gz and verify its contents.

Solution:

sudo tar -czvf /root/etc.tar.gz /etc
tar -tvf /root/etc.tar.gz

Backup skills are non-negotiable. The -z flag adds gzip compression, -v shows progress, and -t lists contents.

9. SGID and ACLs

Challenge: Set SGID on /data/shared so new files inherit the group, and give user guest read-only access via ACL.

Solution:

sudo chgrp sharedgroup /data/shared
sudo chmod 2775 /data/shared
sudo setfacl -m u:guest:r /data/shared
getfacl /data/shared

SGID (the ‘2’ in 2775) ensures collaborative directories work smoothly. ACLs provide granular permission control beyond standard Unix permissions.

10. Firewall Configuration

Challenge: Allow only HTTP and SSH through the firewall, block everything else, and persist the configuration.

Solution:

sudo firewall-cmd --add-service=http --add-service=ssh --permanent
sudo firewall-cmd --reload
sudo firewall-cmd --list-all

Firewalld is RHEL’s default firewall manager. The --permanent flag is crucial—without it, changes vanish on reboot.

11. Flatpak Application Management

Challenge: Configure Flathub as a Flatpak remote, then install and remove GIMP.

Solution:

sudo flatpak remote-add --if-not-exists flathub \
  https://flathub.org/repo/flathub.flatpakrepo
sudo flatpak install -y flathub org.gimp.GIMP
sudo flatpak uninstall -y org.gimp.GIMP

Flatpak is increasingly important for application distribution. Know the difference between system-wide and user installations.

12. Disk Partitioning

Challenge: Create a partition, format it as ext4, and mount it persistently at /mnt/data.

Solution:

sudo parted /dev/sdb mklabel gpt
sudo parted /dev/sdb mkpart primary ext4 1MiB 2GiB
sudo mkfs.ext4 /dev/sdb1
sudo mkdir /mnt/data
echo '/dev/sdb1 /mnt/data ext4 defaults 0 0' | sudo tee -a /etc/fstab
sudo mount -a

Partitioning is foundational. GPT is the modern standard, replacing the legacy MBR partition tables.

13. Container Management

Challenge: Create, start, stop, and remove an nginx Podman container.

Solution:

sudo podman pull nginx
sudo podman run -d --name websrv -p 8080:80 nginx
sudo podman stop websrv
sudo podman rm websrv

Containers are the future. Podman is Red Hat’s daemonless alternative to Docker, and it’s included in the RHCSA objectives.

14. Root Password Recovery

Challenge: Reset the root password via GRUB rescue mode.

Solution:

# 1. Reboot and interrupt GRUB (press 'e')
# 2. Append 'rd.break' to the Linux line, boot (Ctrl-X)
# 3. Remount root: mount -o remount,rw /sysroot
# 4. chroot /sysroot
# 5. passwd root
# 6. touch /.autorelabel
# 7. exit; exit

This is a critical recovery skill. The /.autorelabel file triggers SELinux relabeling on next boot—don't skip it!

15. Systemd Service Troubleshooting

Challenge: Troubleshoot why myapp.service won't start, fix a typo in the unit file, then reload and enable it.

Solution:

sudo systemctl status myapp.service
sudo nano /etc/systemd/system/myapp.service   # Fix the typo
sudo systemctl daemon-reload
sudo systemctl start myapp.service
sudo systemctl enable myapp.service

Systemd powers modern Linux systems. Always run daemon-reload after editing unit files—systemd caches configurations.

Key Takeaways

Success in the RHCSA exam comes from muscle memory and understanding. Each of these 15 scenarios represents real tasks you’ll perform as a system administrator. Here’s how to prepare effectively:

1. Practice each command multiple times until it becomes second nature
2. Verify your work using the validation commands provided
3. Understand the why, not just the how — examiners test comprehension
4. Set up a lab environment using VirtualBox, VMware, or cloud instances
5. Time yourself — the exam is time-constrained

Remember: the RHCSA is a hands-on, performance-based exam. Reading isn’t enough — you must do. Set up virtual machines, break things, fix them, and repeat. That’s how system administrators are forged.

Next Steps

Ready to dive deeper? Each topic above deserves extensive hands-on practice. Consider setting up a home lab with multiple virtual machines to practice these scenarios in realistic environments.

The journey to RHCSA certification is challenging but rewarding. These 15 questions form the foundation — master them, and you’ll be well on your way to earning your Red Hat certification.

For more comprehensive lab exercises and step-by-step tutorials, visit LinuxCert.Guru and join the LinkedIn community for ongoing support.

Good luck with your RHCSA exam preparation! 🚀