Appendix: Issues Encountered

Issues Encountered

Problems hit during study with resolutions. These become exam prep review material — the things that tripped you up once are the things the exam tests.

Lab Environment Issues

Phase	Symptom	Root Cause	Resolution
0	None yet	—	—

Phase

Symptom

Root Cause

Resolution

None yet

—

Concept Confusion

Chapter

What Was Confusing

How It Clicked

Exam Gotchas

Things the exam tests that are easy to get wrong:

Domain Gotcha Why It Matters

Domain	Gotcha	Why It Matters
SELinux	`restorecon` vs `chcon` — `chcon` changes survive relabel, `restorecon` applies policy	Using wrong tool = fix doesn’t survive reboot
LVM	`lvextend` alone isn’t enough — must also `xfs_growfs` or `resize2fs` the filesystem	Exam checks filesystem size, not LV size
Networking	`nmcli connection up` vs `nmcli device connect` — different scopes	Wrong command = network doesn’t persist
Firewall	`firewall-cmd --permanent` requires `--reload` to take effect	Without reload, rule exists only in permanent config
systemd	`systemctl enable` does NOT start the service — need `enable --now`	Service won’t be running after enable alone
Permissions	`setfacl -m u:user:rwx file` — ACL mask can override. Check with `getfacl`	ACL appears set but effective permissions differ
Containers	`podman generate systemd` requires `loginctl enable-linger` for rootless containers to survive logout	Container stops when you log out of exam VM

SELinux

restorecon vs chcon — chcon changes survive relabel, restorecon applies policy

Using wrong tool = fix doesn’t survive reboot

LVM

lvextend alone isn’t enough — must also xfs_growfs or resize2fs the filesystem

Exam checks filesystem size, not LV size

Networking

nmcli connection up vs nmcli device connect — different scopes

Wrong command = network doesn’t persist

Firewall

firewall-cmd --permanent requires --reload to take effect

Without reload, rule exists only in permanent config

systemd

systemctl enable does NOT start the service — need enable --now

Service won’t be running after enable alone

Permissions

setfacl -m u:user:rwx file — ACL mask can override. Check with getfacl

ACL appears set but effective permissions differ

Containers

podman generate systemd requires loginctl enable-linger for rootless containers to survive logout

Container stops when you log out of exam VM

Add issues as they occur. The pattern is: what happened → why → how to fix. After the exam, these become your reference for real-world RHEL administration.