1. What does ssh-keygen do?
Junior- A.show the SELinux context of files
- B.copy a file to a remote host over SSH
- C.persistently enable an SELinux boolean
- D.generate an SSH public/private key pair
Answer + AI explanation with Pro
Linux · SSH & Security interview questions
66 Linux · SSH & Security questions from the System Administration bank, written for Indian campus drives and tech interviews. Every question has a verified answer and an AI-tutor explanation on placd.
Free to start: the 2-minute IT readiness check — six questions and a result.
Take the free IT readiness check1. What does
Junior2. Which command will generate an SSH public/private key pair?
Junior- A.ssh -L 8080:localhost:80 host
- B.setsebool -P httpd_can_network_connect on
- C.getenforce
- D.ssh-keygen
Answer + AI explanation with Pro
3. Which statement is correct?
Junior- A.ssh-keygen — generate an SELinux policy from denial logs
- B.ssh-keygen — generate an SSH public/private key pair
- C.ssh-keygen — install your public key on a host for passwordless login
- D.ssh-keygen — copy a file to a remote host over SSH
Answer + AI explanation with Pro
4. What does ssh-copy-id user@host do?
Junior- A.let SELinux allow a service on a custom port
- B.generate an SELinux policy from denial logs
- C.switch SELinux to enforcing mode temporarily
- D.install your public key on a host for passwordless login
Answer + AI explanation with Pro
5. Which command will install your public key on a host for passwordless login?
Junior- A.ssh-copy-id user@host
- B.scp file user@host:/tmp
- C.ls -Z
- D.getenforce
Answer + AI explanation with Pro
6. Which statement is correct?
Junior- A.ssh-copy-id user@host — install your public key on a host for passwordless login
- B.ssh-copy-id user@host — connect over SSH on a non-default port
- C.ssh-copy-id user@host — let SELinux allow a service on a custom port
- D.ssh-copy-id user@host — show the SELinux context of files
Answer + AI explanation with Pro
7. What does restorecon -Rv /var/www/html do?
Mid- A.switch SELinux to enforcing mode temporarily
- B.reset SELinux contexts to the policy default recursively
- C.connect over SSH on a non-default port
- D.copy a file to a remote host over SSH
Answer + AI explanation with Pro
8. Which command will reset SELinux contexts to the policy default recursively?
Mid- A.setenforce 1
- B.semanage port -a -t http_port_t -p tcp 8080
- C.restorecon -Rv /var/www/html
- D.ls -Z
Answer + AI explanation with Pro
9. Which statement is correct?
Mid- A.restorecon -Rv /var/www/html — install your public key on a host for passwordless login
- B.restorecon -Rv /var/www/html — reset SELinux contexts to the policy default recursively
- C.restorecon -Rv /var/www/html — switch SELinux to enforcing mode temporarily
- D.restorecon -Rv /var/www/html — copy a file to a remote host over SSH
Answer + AI explanation with Pro
10. What does getenforce do?
Junior- A.let SELinux allow a service on a custom port
- B.print the current SELinux mode
- C.create a local SSH port-forward tunnel
- D.generate an SELinux policy from denial logs
Answer + AI explanation with Pro
11. Which command will print the current SELinux mode?
Junior- A.ssh -p 2222 user@host
- B.setsebool -P httpd_can_network_connect on
- C.semanage port -a -t http_port_t -p tcp 8080
- D.getenforce
Answer + AI explanation with Pro
12. Which statement is correct?
Junior- A.getenforce — persistently enable an SELinux boolean
- B.getenforce — generate an SSH public/private key pair
- C.getenforce — print the current SELinux mode
- D.getenforce — copy a file to a remote host over SSH
Answer + AI explanation with Pro
13. What does setsebool -P httpd_can_network_connect on do?
Mid- A.install your public key on a host for passwordless login
- B.show the SELinux context of files
- C.generate an SSH public/private key pair
- D.persistently enable an SELinux boolean
Answer + AI explanation with Pro
14. Which command will persistently enable an SELinux boolean?
Mid- A.ssh-copy-id user@host
- B.semanage port -a -t http_port_t -p tcp 8080
- C.setsebool -P httpd_can_network_connect on
- D.ssh -p 2222 user@host
Answer + AI explanation with Pro
15. Which statement is correct?
Mid- A.setsebool -P httpd_can_network_connect on — generate an SELinux policy from denial logs
- B.setsebool -P httpd_can_network_connect on — connect over SSH on a non-default port
- C.setsebool -P httpd_can_network_connect on — show the SELinux context of files
- D.setsebool -P httpd_can_network_connect on — persistently enable an SELinux boolean
Answer + AI explanation with Pro
16. What does ls -Z do?
Junior- A.switch SELinux to enforcing mode temporarily
- B.reset SELinux contexts to the policy default recursively
- C.show the SELinux context of files
- D.generate an SELinux policy from denial logs
Answer + AI explanation with Pro
17. Which command will show the SELinux context of files?
Junior- A.audit2allow
- B.ssh -L 8080:localhost:80 host
- C.ls -Z
- D.getenforce
Answer + AI explanation with Pro
18. Which statement is correct?
Junior- A.ls -Z — create a local SSH port-forward tunnel
- B.ls -Z — show the SELinux context of files
- C.ls -Z — copy a file to a remote host over SSH
- D.ls -Z — let SELinux allow a service on a custom port
Answer + AI explanation with Pro
19. What is SELinux Enforcing mode?
Junior- A.the sshd setting that forces key-only authentication
- B.a tool that bans IPs after repeated failed login attempts
- C.layering multiple independent security controls
- D.the mode that blocks and logs policy violations
Answer + AI explanation with Pro
20. Which term means: "the mode that blocks and logs policy violations"?
Junior- A.SELinux type enforcement
- B.SELinux Enforcing mode
- C.PermitRootLogin no
- D.CIS benchmark
Answer + AI explanation with Pro
21. Which statement is correct?
Junior- A.SELinux Enforcing mode — a hardening standard of recommended secure configurations
- B.SELinux Enforcing mode — the SELinux model labeling processes and files with types
- C.SELinux Enforcing mode — a hardened jump host that gates SSH access to internal servers
- D.SELinux Enforcing mode — the mode that blocks and logs policy violations
Answer + AI explanation with Pro
22. What is SELinux Permissive mode?
Junior- A.layering multiple independent security controls
- B.the SELinux model labeling processes and files with types
- C.a tool that bans IPs after repeated failed login attempts
- D.the mode that logs policy violations but does not block them
Answer + AI explanation with Pro
23. Which term means: "the mode that logs policy violations but does not block them"?
Junior- A.SSH bastion host
- B.sshd_config
- C.SELinux Enforcing mode
- D.SELinux Permissive mode
Answer + AI explanation with Pro
24. Which statement is correct?
Junior- A.SELinux Permissive mode — a hardening standard of recommended secure configurations
- B.SELinux Permissive mode — the SELinux model labeling processes and files with types
- C.SELinux Permissive mode — a hardened jump host that gates SSH access to internal servers
- D.SELinux Permissive mode — the mode that logs policy violations but does not block them
Answer + AI explanation with Pro
25. What is PermitRootLogin no?
Senior- A.the SELinux model labeling processes and files with types
- B.the mode that logs policy violations but does not block them
- C.the sshd setting that forces key-only authentication
- D.the sshd setting that disables direct root SSH login for hardening
Answer + AI explanation with Pro
26. Which term means: "the sshd setting that disables direct root SSH login for hardening"?
Senior- A.SELinux type enforcement
- B.PasswordAuthentication no
- C.SELinux Enforcing mode
- D.PermitRootLogin no
Answer + AI explanation with Pro
27. Which statement is correct?
Senior- A.PermitRootLogin no — a hardened jump host that gates SSH access to internal servers
- B.PermitRootLogin no — the OpenSSH server configuration file
- C.PermitRootLogin no — a hardening standard of recommended secure configurations
- D.PermitRootLogin no — the sshd setting that disables direct root SSH login for hardening
Answer + AI explanation with Pro
28. What does ssh -p 2222 user@host do?
Junior- A.print the current SELinux mode
- B.connect over SSH on a non-default port
- C.copy a file to a remote host over SSH
- D.let SELinux allow a service on a custom port
Answer + AI explanation with Pro
29. Which command will connect over SSH on a non-default port?
Junior- A.scp file user@host:/tmp
- B.setsebool -P httpd_can_network_connect on
- C.ssh-copy-id user@host
- D.ssh -p 2222 user@host
Answer + AI explanation with Pro
30. Which statement is correct?
Junior- A.ssh -p 2222 user@host — switch SELinux to enforcing mode temporarily
- B.ssh -p 2222 user@host — copy a file to a remote host over SSH
- C.ssh -p 2222 user@host — generate an SSH public/private key pair
- D.ssh -p 2222 user@host — connect over SSH on a non-default port
Answer + AI explanation with Pro
Showing 30 of 66 Linux · SSH & Security questions — the full set, with answers, explanations and an AI tutor on every question, is inside.
Free to start
Start with a free readiness check
Sign up free for the 2-minute IT readiness check and a scored result. Answers, explanations and the AI tutor on every Linux · SSH & Security question come with Pro.
Take the free IT readiness check