nerdexam
Linux_Foundation

LFCA · Question #6

Which of the following commands is used to display SELinux status?

The correct answer is B. sestatus. The sestatus command is used on Linux systems to display the current status of Security-Enhanced Linux (SELinux), including its mode and policy information.

Submitted by chiamaka_o· May 4, 2026System Administration

Question

Which of the following commands is used to display SELinux status?

Options

  • Asvstemctl
  • Bsestatus
  • Cfirewall-cmd
  • Dsudo

How the community answered

(43 responses)
  • B
    93% (40)
  • C
    5% (2)
  • D
    2% (1)

Why each option

The `sestatus` command is used on Linux systems to display the current status of Security-Enhanced Linux (SELinux), including its mode and policy information.

Asvstemctl

`systemctl` is used to control and manage systemd services, not to display SELinux status.

BsestatusCorrect

The `sestatus` command provides a concise summary of the SELinux operational status, showing whether it is enabled, disabled, or in permissive mode, along with details about the loaded policy and current enforcement state. This is crucial for verifying and troubleshooting SELinux configurations.

Cfirewall-cmd

`firewall-cmd` is used to manage the firewalld daemon, which controls network firewall rules, not SELinux.

Dsudo

`sudo` is a command used to execute commands as another user (typically root) and does not display SELinux status itself.

Concept tested: SELinux status command

Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/selinux_users_and_administrators_guide/sect-security-enhanced_linux-enabling_and_disabling_selinux-changing_selinux_modes#sect-security-enhanced_linux-enabling_and_disabling_selinux-viewing_the_selinux_status

Topics

#SELinux#Security commands#System security

Community Discussion

No community discussion yet for this question.

Full LFCA Practice