Correct Answer:

See the solution below in Explanation.
Explanation:
Solution:
mkdir -p /root/d1
find /usr/local -type f -size +3k -size -5k -exec cp -rvf {} /root/d1/ \;
chmod g+s /root/d1
ls -ld /root/d1
Detailed Explanation:
* -size +3k means greater than 3 KB.
* -size -5k means less than 5 KB.
* chmod g+s sets the SGID bit on the directory.
* SGID on a directory causes new files created there to inherit the directory's group.

Correct Answer:

See the solution below in Explanation.
Explanation:
Solution:
dnf install -y tuned
systemctl enable --now tuned
tuned-adm recommend
tuned-adm profile virtual-guest
tuned-adm active
Detailed Explanation:
* The lab text uses yum, but on RHEL 10 dnf is the preferred package manager command. RHEL 10
documentation focuses on DNF behavior and changes.
* tuned-adm recommend shows the best-fit tuning profile.
* tuned-adm profile virtual-guest activates the profile.
* tuned-adm active confirms it.

Correct Answer:

See the solution below in Explanation.
Explanation:
Solution:
* Open the firewall port and HTTP service:
firewall-cmd --permanent --add-port=82/tcp
firewall-cmd --permanent --add-service=http
firewall-cmd --reload
* Add SELinux port labeling:
semanage port -a -t http_port_t -p tcp 82
Detailed Explanation:
* firewall-cmd --permanent makes the change persistent.
* --add-port=82/tcp opens the custom TCP port.
* --add-service=http keeps standard HTTP allowed too.
* SELinux blocks services on unexpected ports unless the port is labeled correctly.
* http_port_t tells SELinux that port 82 is valid for web services.

Correct Answer:

Solution:
# Preparations (not required for the exam)
# Go back to foundation0, remote into classroom, create the remoteuser1 user and directory.
# This step is necessary to avoid issues with autofs mounting during testing.
[kiosk@foundation0 ~]$ ssh root@classroom 'useradd -u 1010 remoteuser1 && mkdir -p /rhome/remoteuser1 && chown remoteuser1: /rhome/remoteuser1'
# Install nfs-utils and autofs
[root@node1 ~]# yum -y install nfs-utils autofs
[root@node1 ~]# vim /etc/auto.master
/rhome /etc/auto.rhome
[root@node1 ~]# vim /etc/auto.rhome
remoteuser1 -rw materials.example.com:/rhome/remoteuser1
[root@node1 ~]# systemctl enable --now autofs
# Verification
[root@node1 ~]# ll /rhome/
[root@node1 ~]# ssh remoteuser1@localhost
remoteuser1@localhost\'s password: `flectrag`
$ pwd
/rhome/remoteuser1
$ touch my.file
$ mount | grep rhome
...
materials.example.com:/rhome/remoteuser1 on /rhome/remoteuser1 type nfs4
(`rw`,relatime,vers=4.2,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,clientaddr=172.25.250.100,local_lock=none,addr=1
72.25.254.254)

Correct Answer:

See the solution below in Explanation.
Explanation:
Solution:
echo "john" > > /etc/cron.deny
Detailed Explanation:
* cron.deny blocks listed users from using cron.
* This is the simplest way to deny scheduled-job access for one user.