RHCSA User and Group Management Flashcards

A sudoers entry reads: '%wheel ALL=(ALL) NOPASSWD: ALL'. What does this grant?

Answer: Members of the wheel group can run any command as any user without a password

This sudoers rule allows all members of the wheel group to execute any command as any user without being prompted for a password.

What is the effect of setting a user's shell to /bin/false?

Answer: The user cannot log in interactively and any login attempt immediately exits with failure

/bin/false immediately exits with a non-zero return code, preventing any interactive login session.

Which field in /etc/shadow represents the number of days since January 1, 1970, that the password was last changed?

Answer: Field 3

The third field in /etc/shadow is the last password change date expressed as days since the Unix epoch (1970-01-01).

An admin runs 'useradd -r svcapp'. What is the key characteristic of an account created with -r?

Answer: It creates a system account with a UID below the normal user range and no home directory by default

The -r flag creates a system account with a UID in the system range (under UID_MIN) and skips home directory creation by default.

Which command allows an administrator to view and interactively edit the sudoers file safely?

Answer: visudo

visudo locks the sudoers file during editing and validates syntax before saving, preventing a broken sudoers configuration.

What does 'chage -W 7 julia' configure?

Answer: Sets the warning period to 7 days before the password expires

chage -W sets the number of days before password expiration that the user receives a warning.

Which command would an admin use to rename an existing group from 'oldteam' to 'newteam'?

Answer: groupmod -n newteam oldteam

groupmod -n changes the name of an existing group while preserving its GID and membership.