There are many great articles on the Internet with questions for Linux and networking-related job candidates, but most contain questions for new or workstation users.
The following questionnaire is focused on sysadmin tasks emulating real scenarios. Questions would be asked in a face-to-face conversational interview or written exam. The employer wants to learn candidate reactions before specific problems.
The guide below was initially written in 2019 and updated in 2022.”
Linux & Networking Interview Questions and Answers Index
- What Linux distributions do you like and why?
- How would you backup a server in real time?
- What would you do if a production server fails?
- How would you secure a server?
- What kind of monitoring would you apply?
- What is the task manager under Linux?
- What would you do before an ongoing hacking attack?
- Apache or Nginx?
- What rules would you apply to the firewall?
- What are the most common problems for servers?
- Main aspects of server and network structuration
Questions and Answers
What Linux Distributions Do You Like and Why?
If you are asked what is the best Linux distribution for you, do not answer “Ubuntu,” even if it is your chosen Linux distribution.
Try to learn a little about harder Linux distributions showing better knowledge. Gentoo, ArchLinux or even Slackware would be a better answer for a potential employer. I myself would have a preference for a Gentoo, ArchLinux or Slackware user candidate over an Ubuntu user. You also can mention Debian despite it not requiring too much knowledge either. Ubuntu is a great Linux distribution, but it can be chosen by both advanced and new users, and the idea is to portray yourself as an advanced user without allowing the employer to doubt it.
How Would You Backup a Server in Real Time?
Backups are mandatory in the corporate world. You probably will be asked about it.
There are several options for backup servers. The most popular Linux way to backup is rsync, which allows updating files and directories through incremental backups. Additionally, there are some CDP (Continuous Data Protection) great options like R1Soft. Database and file backups must be kept separately, allowing for immediately restoring of the old system up to date database.
What Would You do if a Production Server Fails?
Depending on available resources. It is possible to set up 2 online synchronized servers to redirect traffic in case one of them fails. Normally it requires too many resources since two different geographical locations are needed (This increases the measured sense). But normally, this scenario must be planned in advance, and a “Maintenance” screen must be able to redirect traffic through redirection to an up-to-date server clone if something happens.
If this resource is not available and a production server fails, I would try to solve the problem while a coworker prepares the CDP restoration. Available timing to try to solve the problem is limited by the CDP restoration process. Once the restoration process begins, I would choose to restore one or two previous backup versions while keeping the updated database of the last version.
The immediate priority is first to restore the service for customers/users; only after finishing it would I research the failure reason.
Additional hardware resources to prevent failures are UPS and synchronized local disks.
How Would You Secure a Server?
This answer also depends on available resources. FortiGate and CISCO have great options for servers and network protection. A free alternative you can install on a dedicated device may be Pfsense.
Securing a server especially depends on the server’s purpose. The main measure is to disable all unused services like SSH if not necessary. Needed services must not allow privileged login. Also, password authentication mechanisms must be replaced by different authentication types like key login.
Design robust Nftables or Iptables rules. Implement IDS (Intrusion Detection Systems). Keep your BIOS up to date to prevent fatal rootkit consequences, enable SELinux, and depending on the server’s physical location, you may want to encrypt some partitions.
Other security good practices include Honeypots implementation, secure configurations (e.g., Apache security mods), and pentesting your own server and network using tools like Nmap, Nexpose or Nessus.
Remember, every operating system must be up to date to prevent vulnerabilities, but every update must be done on a testing clone to check possible incompatibilities or update problems.
At Linux Hint, we have published a comprehensive Linux security hardening guide you can read here.
What Kind of Monitoring Would You Apply?
I would monitor the network with an IDS (Intrusion detection system) like Snort or OSSEC.
IDS allows analyzing network packets looking for anomalies, offensive traffic and malicious scans. They also are good at optimizing service and network structure. Additionally, I would monitor disk space.
What is the Task Manager Under Linux?
The Crontab to schedule tasks; a practical example of its application would be to launch any monitoring task or to run Rsync for backup purposes.
What Would You do Before an Ongoing Hacking Attack?
It depends on the attack type. A DDOS attack may require to implement from gateway devices
to local custom firewall rules. The software includes specific configuration options to deal with attacks; for example, Apache includes mods to afford this kind of attack, and immediately we may apply external protection such as Cloudflare.
A more complex attack like a rootkit means the whole server must be redesigned and reinstalled, restoring the database only; probably also, the hardware should be replaced. This is, of course, the worst scenario and preventive measures must be taken in advance.
Apache or Nginx?
It depends on the use; while NGINX shows superiority on the reverse proxy, Apache may be a better option for hosting services; both of them can be combined too.
What Rules Would You Apply to the Firewall?
Depending on the type of services, if possible, I would apply restrictive policies first, allowing only necessary traffic, redirecting access to non-default ports, and applying defensive rules to most common attacks.
What are the Most Common Server Problems?
Security breaches, networking issues, full disks or partitions, permission issues, DNS issues, conflictive updates or software additions, network structure changes, wrong security policies, hardware upgrades, and electrical problems.
Main Aspects of Server and Network Structuration
A proper structuration begins with proper partitioning, smart routing, user and group permissions, security measures and proper virtualization setup.
The questions and answers listed above should be studied before a job interview for an available Linux or networking position. It is recommended to remember the most advanced Linux commands in case more practical questions arise. You may want to read this article on advanced Linux commands https://linuxhint.com/advanced_linux_network_commands.
Conclusion
As you can see, a Linux networking job interview may include many questions. Your employer will try to know how you guarantee stability, performance and security. His final aim is both to provide a good and permanent experience for users and customers and a smart and fast reaction when problems arise. I personally would hire a candidate who answers what was explained in this article. This is also a great guide for novel users to learn.
Thank you very much for reading this Linux job interview questions and answers. Keep following us for more Linux professional articles.
