RHCSA Firewalld and Network Configuration Flashcards

Which command makes firewalld configuration changes survive a system reboot?

Answer: firewall-cmd --permanent followed by --reload

Using --permanent saves the rule to disk; --reload applies the saved config so it is active immediately and persists after reboot.

You need to allow TCP port 8443 only on the 'internal' zone. Which command is correct?

Answer: firewall-cmd --zone=internal --add-port=8443/tcp --permanent

The --zone flag targets a specific zone; --add-port=8443/tcp specifies port and protocol.

What is the default behavior of the 'drop' zone in firewalld?

Answer: Silently drops all incoming traffic with no response

The drop zone discards all incoming packets without sending any rejection message back to the sender.

Which nmcli command assigns the IP address 192.168.1.50/24 to connection 'eth0'?

Answer: nmcli con mod eth0 ipv4.addresses 192.168.1.50/24

nmcli con mod modifies an existing connection; ipv4.addresses sets the static IP with prefix.

After modifying a NetworkManager connection with nmcli, which command activates the new settings?

Answer: nmcli con up

nmcli con up brings the connection down and back up, applying any modified parameters.

Which file would you edit to set a static hostname permanently on RHEL 9?

Answer: /etc/hostname

/etc/hostname contains the system's static hostname and is read at boot by systemd.

What does the command 'firewall-cmd --list-all' display?

Answer: The active zone with its current services, ports, and rules

--list-all shows the full configuration of the currently active (default) zone including services, ports, interfaces, and sources.