No reviews due. Nice work! Keep studying to schedule more.
Domain 7
Security (SELinux & Firewall)
SELinux enforcement, booleans, file contexts, port labels, and firewalld zones/services/ports. Roughly 15% of the EX200 exam.
SELinux contexts, booleans & ports
NewEnforcing vs permissive, semanage fcontext for file contexts, setsebool for toggles, semanage port for ports, and restorecon/chcon for relabeling.
~45 min~55% of domain🔒 Sign inselinuxgetenforcesetenforcesemanage
Firewalld — zones, services & ports
NewConfigure firewalld with firewall-cmd — zones, adding services/ports, --permanent vs runtime, and rich rules for source-based access.
~35 min~45% of domain🔒 Sign infirewalldfirewall-cmdzoneservice
SSH key-based authentication
NewGenerate SSH key pairs, deploy public keys with ssh-copy-id, and configure sshd for key-only authentication.
~25 min~15% of domain🔒 Sign insshssh-keygenssh-copy-idauthorized_keys