1. What does ssh-keygen do?
Junior- A.show the SELinux context of files
- B.copy a file to a remote host over SSH
- C.persistently enable an SELinux boolean
- D.generate an SSH public/private key pair
Linux · SSH & Security interview questions
66 real Linux · SSH & Security questions from the System Administration bank, as asked in Indian campus drives and tech interviews. Every question has a verified answer and an AI-tutor explanation on placd — free to start.
1. What does
Junior2. Which command will generate an SSH public/private key pair?
Junior- A.ssh -L 8080:localhost:80 host
- B.setsebool -P httpd_can_network_connect on
- C.getenforce
- D.ssh-keygen
3. Which statement is correct?
Junior- A.ssh-keygen — generate an SELinux policy from denial logs
- B.ssh-keygen — generate an SSH public/private key pair
- C.ssh-keygen — install your public key on a host for passwordless login
- D.ssh-keygen — copy a file to a remote host over SSH
4. What does ssh-copy-id user@host do?
Junior- A.let SELinux allow a service on a custom port
- B.generate an SELinux policy from denial logs
- C.switch SELinux to enforcing mode temporarily
- D.install your public key on a host for passwordless login
5. Which command will install your public key on a host for passwordless login?
Junior- A.ssh-copy-id user@host
- B.scp file user@host:/tmp
- C.ls -Z
- D.getenforce
6. Which statement is correct?
Junior- A.ssh-copy-id user@host — install your public key on a host for passwordless login
- B.ssh-copy-id user@host — connect over SSH on a non-default port
- C.ssh-copy-id user@host — let SELinux allow a service on a custom port
- D.ssh-copy-id user@host — show the SELinux context of files
7. What does restorecon -Rv /var/www/html do?
Mid- A.switch SELinux to enforcing mode temporarily
- B.reset SELinux contexts to the policy default recursively
- C.connect over SSH on a non-default port
- D.copy a file to a remote host over SSH
8. Which command will reset SELinux contexts to the policy default recursively?
Mid- A.setenforce 1
- B.semanage port -a -t http_port_t -p tcp 8080
- C.restorecon -Rv /var/www/html
- D.ls -Z
9. Which statement is correct?
Mid- A.restorecon -Rv /var/www/html — install your public key on a host for passwordless login
- B.restorecon -Rv /var/www/html — reset SELinux contexts to the policy default recursively
- C.restorecon -Rv /var/www/html — switch SELinux to enforcing mode temporarily
- D.restorecon -Rv /var/www/html — copy a file to a remote host over SSH
10. What does getenforce do?
Junior- A.let SELinux allow a service on a custom port
- B.print the current SELinux mode
- C.create a local SSH port-forward tunnel
- D.generate an SELinux policy from denial logs
11. Which command will print the current SELinux mode?
Junior- A.ssh -p 2222 user@host
- B.setsebool -P httpd_can_network_connect on
- C.semanage port -a -t http_port_t -p tcp 8080
- D.getenforce
12. Which statement is correct?
Junior- A.getenforce — persistently enable an SELinux boolean
- B.getenforce — generate an SSH public/private key pair
- C.getenforce — print the current SELinux mode
- D.getenforce — copy a file to a remote host over SSH
13. What does setsebool -P httpd_can_network_connect on do?
Mid- A.install your public key on a host for passwordless login
- B.show the SELinux context of files
- C.generate an SSH public/private key pair
- D.persistently enable an SELinux boolean
14. Which command will persistently enable an SELinux boolean?
Mid- A.ssh-copy-id user@host
- B.semanage port -a -t http_port_t -p tcp 8080
- C.setsebool -P httpd_can_network_connect on
- D.ssh -p 2222 user@host
15. Which statement is correct?
Mid- A.setsebool -P httpd_can_network_connect on — generate an SELinux policy from denial logs
- B.setsebool -P httpd_can_network_connect on — connect over SSH on a non-default port
- C.setsebool -P httpd_can_network_connect on — show the SELinux context of files
- D.setsebool -P httpd_can_network_connect on — persistently enable an SELinux boolean
16. What does ls -Z do?
Junior- A.switch SELinux to enforcing mode temporarily
- B.reset SELinux contexts to the policy default recursively
- C.show the SELinux context of files
- D.generate an SELinux policy from denial logs
17. Which command will show the SELinux context of files?
Junior- A.audit2allow
- B.ssh -L 8080:localhost:80 host
- C.ls -Z
- D.getenforce
18. Which statement is correct?
Junior- A.ls -Z — create a local SSH port-forward tunnel
- B.ls -Z — show the SELinux context of files
- C.ls -Z — copy a file to a remote host over SSH
- D.ls -Z — let SELinux allow a service on a custom port
19. What is SELinux Enforcing mode?
Junior- A.the sshd setting that forces key-only authentication
- B.a tool that bans IPs after repeated failed login attempts
- C.layering multiple independent security controls
- D.the mode that blocks and logs policy violations
20. Which term means: "the mode that blocks and logs policy violations"?
Junior- A.SELinux type enforcement
- B.SELinux Enforcing mode
- C.PermitRootLogin no
- D.CIS benchmark
21. Which statement is correct?
Junior- A.SELinux Enforcing mode — a hardening standard of recommended secure configurations
- B.SELinux Enforcing mode — the SELinux model labeling processes and files with types
- C.SELinux Enforcing mode — a hardened jump host that gates SSH access to internal servers
- D.SELinux Enforcing mode — the mode that blocks and logs policy violations
22. What is SELinux Permissive mode?
Junior- A.layering multiple independent security controls
- B.the SELinux model labeling processes and files with types
- C.a tool that bans IPs after repeated failed login attempts
- D.the mode that logs policy violations but does not block them
23. Which term means: "the mode that logs policy violations but does not block them"?
Junior- A.SSH bastion host
- B.sshd_config
- C.SELinux Enforcing mode
- D.SELinux Permissive mode
24. Which statement is correct?
Junior- A.SELinux Permissive mode — a hardening standard of recommended secure configurations
- B.SELinux Permissive mode — the SELinux model labeling processes and files with types
- C.SELinux Permissive mode — a hardened jump host that gates SSH access to internal servers
- D.SELinux Permissive mode — the mode that logs policy violations but does not block them
25. What is PermitRootLogin no?
Senior- A.the SELinux model labeling processes and files with types
- B.the mode that logs policy violations but does not block them
- C.the sshd setting that forces key-only authentication
- D.the sshd setting that disables direct root SSH login for hardening
26. Which term means: "the sshd setting that disables direct root SSH login for hardening"?
Senior- A.SELinux type enforcement
- B.PasswordAuthentication no
- C.SELinux Enforcing mode
- D.PermitRootLogin no
27. Which statement is correct?
Senior- A.PermitRootLogin no — a hardened jump host that gates SSH access to internal servers
- B.PermitRootLogin no — the OpenSSH server configuration file
- C.PermitRootLogin no — a hardening standard of recommended secure configurations
- D.PermitRootLogin no — the sshd setting that disables direct root SSH login for hardening
28. What does ssh -p 2222 user@host do?
Junior- A.print the current SELinux mode
- B.connect over SSH on a non-default port
- C.copy a file to a remote host over SSH
- D.let SELinux allow a service on a custom port
29. Which command will connect over SSH on a non-default port?
Junior- A.scp file user@host:/tmp
- B.setsebool -P httpd_can_network_connect on
- C.ssh-copy-id user@host
- D.ssh -p 2222 user@host
30. Which statement is correct?
Junior- A.ssh -p 2222 user@host — switch SELinux to enforcing mode temporarily
- B.ssh -p 2222 user@host — copy a file to a remote host over SSH
- C.ssh -p 2222 user@host — generate an SSH public/private key pair
- D.ssh -p 2222 user@host — connect over SSH on a non-default port
Showing 30 of 66 Linux · SSH & Security questions — the full set, with answers, explanations and an AI tutor on every question, is inside.
Free to start
Answers, AI explanations, and a scored voice mock interview
Sign up free to check your answers with explanations, ask the AI tutor anything on any question, and take one full AI mock interview — scored like a real panel.
Practice Linux · SSH & Security free