Apr 08, 2024 Step by Step Guide to Prepare for EX200 Exam BrainDumps
RHCSA EX200 Real Exam Questions and Answers FREE Updated on 2024
RedHat EX200 exam is a globally recognized certification that can open up many career opportunities for individuals in the field of Linux system administration. It is an ideal certification for IT professionals who want to demonstrate their skills and knowledge in managing and administering Red Hat Enterprise Linux systems. Preparing for the exam requires hands-on experience with Red Hat Enterprise Linux and a thorough understanding of the exam objectives.
NEW QUESTION # 69
Add a new logical partition having size 100MB and create the data which will be the mount point for the new partition.
Answer:
Explanation:
1. Use fdisk /dev/hda-> To create new partition.
2. Type n ->For New partitions
3. It will ask for Logical or Primary Partitions. Press l for logical.
4. It will ask for the Starting Cylinder: Use the Default by pressing Enter Keys
5. Type the size: +100M you can specify either Last cylinder of size here.
6. Press P to verify the partitions lists and remember the partitions name.
7. Press w to write on partitions table.
8. Either Reboot or use partprobe command.
9. Use mkfs -t ext3 /dev/hda?
OR
1. mke2fs -j /dev/hda? ->To create ext3 filesystem.
2. vi /etc/fstab
3. Write:
/dev/hda? /data ext3 defaults 0 0
4. Verify by mounting on current sessions also:
mount /dev/hda? /data
NEW QUESTION # 70
SIMULATION
SELinux must run in force mode.
Answer:
Explanation:
See explanation below.
Explanation/Reference:
Explanation: /etc/sysconfig/selinux
SELINUX=enforcing
NEW QUESTION # 71
You have a domain named www.rhce.com associated IP address is 192.100.0.2. Configure the Apache web server by implementing the SSL for encryption communication.
Answer:
Explanation:
see explanation below.
Explanation
* vi /etc/httpd/conf.d/ssl.conf <VirtualHost 192.100.0.2> ServerName www.rhce.com DocumentRoot
/var/www/rhce DirectoryIndex index.html index.htm ServerAdmin [email protected] SSLEngine on SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt SSLCertificateKeyFile
/etc/httpd/conf/ssl.key/server.key </VirtualHost>
* cd /etc/httpd/conf
3 make testcert
* Create the directory and index page on specified path. (Index page can download from ftp://server1.example.com at exam time)
* service httpd start|restart
* chkconfig httpd on
Apache can provide encrypted communications using SSL (Secure Socket Layer). To make use of encrypted communication, a client must request to https protocol, which is uses port 443. For HTTPS protocol required the certificate file and key file.
NEW QUESTION # 72
One Logical Volume is created named as myvol under vo volume group and is mounted. The Initial Size of that Logical Volume is 400MB. Make successfully that the size of Logical Volume 200MB without losing any data. The size of logical volume 200MB to 210MB will be acceptable.
Answer:
Explanation:
see explanation below.
Explanation
* First check the size of Logical Volume: lvdisplay /dev/vo/myvol
* Make sure that the filesystem is in a consistent state before reducing:
# fsck -f /dev/vo/myvol
* Now reduce the filesystem by 200MB.
# resize2fs /dev/vo/myvol 200M
* It is now possible to reduce the logical volume. #lvreduce /dev/vo/myvol -L 200M
* Verify the Size of Logical Volume: lvdisplay /dev/vo/myvol
* Verify that the size comes in online or not: df -h
NEW QUESTION # 73
Notes:
NFS NFS instructor.example.com:/var/ftp/pub/rhel6/dvd
YUM
http://instructor.example.com/pub/rhel6/dvd
Answer:
Explanation:
ldap http//instructor.example.com/pub/EXAMPLE-CA-CERT
Install dialog package.
yum install dialog
NEW QUESTION # 74
Set cronjob for user natasha to do /bin/echo hiya at 14:23.
Answer:
Explanation:
# crontab -e -u natasha
23 14 * * * /bin/echo hiya
wq!
NEW QUESTION # 75
A YUM source has been provided in the
http://instructor.example.com/pub/rhel6/dvd
Configure your system and can be used normally.
Answer:
Explanation:
see explanation below.
Explanation
* /etc/yum.repos.d/base.repo
[base]
name=base
baseurl=http://instructor.example.com/pub/rhel6/dvd
gpgcheck=0
yum list
NEW QUESTION # 76
SIMULATION
Who ever creates the files/directories on archive group owner should be automatically should be the same group owner of archive.
Answer:
Explanation:
See explanation below.
Explanation/Reference:
Explanation:
chmod g+s /archive
Verify using: ls -ld /archive Permission should be like:
drwxrws--- 2 root sysuser 4096 Mar 16 18:08 /archive
If SGID bit is set on directory then who every users creates the files on directory group owner automatically the owner of parent directory.
To set the SGID bit: chmod g+s directory
To Remove the SGID bit: chmod g-s directory
NEW QUESTION # 77
Configure iptables, there are two domains in the network, the address of local domain is 172.24.0.0/16 other domain is 172.25.0.0/16, now refuse domain 172.25.0.0/16 to access the server.
Answer:
Explanation:
below
iptables -F
service iptables save
iptables -A INPUT -s 172.25.0.0/16 -j REJECT
service iptables save
service iptables restart
NEW QUESTION # 78
SIMULATION
Add a swap partition.
Adding an extra 500M swap partition to your system, this swap partition should mount automatically when the system starts up. Don't remove and modify the existing swap partitions on your system.
Answer:
Explanation:
See explanation below.
Explanation/Reference:
Explanation:
fdisk -cu /dev/vda// in the way of expanding the partition, don't make main partition partx -a /dev/vda mkswap /dev/vdax swapon /dev/vdax swapon -s vi /etc/fstab
/dev/vdaxswapswapdefaults0 0
mount -a
NEW QUESTION # 79
CORRECT TEXT
Configure your Host Name, IP Address, Gateway and DNS.
Host name: station.domain40.example.com
/etc/sysconfig/network
hostname=abc.com
hostname abc.com
IP Address:172.24.40.40/24
Gateway172.24.40.1
DNS:172.24.40.1
Answer:
Explanation:
# cd /etc/syscofig/network-scripts/
# ls
# vim ifcfg-eth0 (Configure IP Address, Gateway and DNS) IPADDR=172.24.40.40
GATEWAY=172.24.40.1
DNS1=172.24.40.1
# vim /etc/sysconfig/network
(Configure Host Name)
HOSTNAME= station.domain40.example.com
OR
Graphical Interfaces:
System->Preference->Network Connections (Configure IP Address, Gateway and DNS) Vim
/etc/sysconfig/network
(Configure Host Name)
NEW QUESTION # 80
Configure the verification mode of your host account and the password as LDAP. And it can login successfully through ldapuser40. The password is set as "password". And the certificate can be downloaded from http://ip/dir/ldap.crt. After the user logs on the user has no host directory unless you configure the autofs in the following questions.
Answer:
Explanation:
system-config-authentication
LDAP Server: ldap//instructor.example.com (In domain form, not write IP) OR
# yum groupinstall directory-client (1.krb5-workstation 2.pam-krb5 3.sssd)
# system-config-authentication
1.User Account Database: LDAP
2.LDAP Search Base DN: dc=example,dc=com
3.LDAP Server: ldap://instructor.example.com (In domain form, not write IP) 4.Download CA Certificate
5.Authentication Method: LDAP password
6.Apply
getent passwd ldapuser40
NEW QUESTION # 81
Part 1 (on Node1 Server)
Task 1 [Managing Networking]
Please create new network connection with existing interface (enp1s0) using provided values:
IPv4: 172.25.X.10/255.255.255.0 (where X is your domain number: Domain15) Gateway: 172.25.X.2 DNS server: 172.25.X.2 Add the following secondary IP addresses statically to your current running connection. Do this in a way that does not compromise your existing settings:
IPv4: 10.0.0.5/24 and set the hostname node1.domain15.example.com
Answer:
Explanation:
* [root@node1 ~]# nmcli connection show
[root@node1 ~]# nmcli connection add con-name static ifname enp1s0 type ethernet ipv4.addresses 172.25.15.10/24 ipv4.gateway 172.25.15.2 ipv4.dns 172.25.15.2
[root@node1 ~]# nmcli connection modify static ipv4.method manual connection.autoconnect yes
[root@node1 ~]# nmcli connection modify static +ipv4.addresses 10.0.0.5/24
[root@node1 ~]# nmcli connection up static
[root@node1 ~]# nmcli connection show
[root@node1 ~]# hostnamectl set-hostname node1.domain15.example.com
[root@node1 ~]# hostnamectl status
[root@node1 ~]# nmcli connection down static
* [root@node1 ~]# nmcli connection up static
[root@node1 ~]# ip addr show
[root@node1 ~]# reboot
### For checking ###
[root@node1 ~]# ip addr show
[root@node1 ~]# netstat -nr
[root@node1 ~]# cat /etc/resolv.conf
NEW QUESTION # 82
Part 1 (on Node1 Server)
Task 16 [Running Containers]
Configure your host journal to store all journal across reboot
Copy all journal files from /var/log/journal/ and put them in the /home/shangrila/container-logserver Create and mount /home/shangrila/container-logserver as a persistent storage to the container as /var/log/ when container start
Answer:
Explanation:
* [shangrila@node1 ~]$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d5ffe018a53c registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 5 seconds ago Up 4 seconds ago logserver
[shangrila@node1 ~]$ podman stats logserver
Error: stats is not supported in rootless mode without cgroups v2
[shangrila@node1 ~]$ podman stop logserver
d5ffe018a53ca7eb075bf560d1f30822ab6fe51eba58fd1a8f370eda79806496
[shangrila@node1 ~]$ podman rm logserver
Error: no container with name or ID logserver found: no such container
[shangrila@node1 ~]$ mkdir -p container-journal/
* [shangrila@node1 ~]$ sudo systemctl restart systemd-journald
[sudo] password for shangrila:
[shangrila@node1 ~]$ sudo cp -av /var/log/journal/* container-journal/
[shangrila@node1 ~]$ sudo cp -av /var/log/journal/* container-journal/
[shangrila@node1 ~]$ sudo chown -R shangrila container-journal/
[shangrila@node1 ~]$ podman run -d --name logserver -v /home/shangrila/container-journal/:/var/log/journal:Z registry.domain15.example.com:5000/rhel8/rsyslog
[shangrila@node1 ~]$ podman ps
[shangrila@node1 ~]$ loginctl enable-linger
[shangrila@node1 ~]$ loginctl show-user shangrila|grep -i linger
Linger=yes
* [shangrila@node1 ~]$ podman stop logserver
[shangrila@node1 ~]$ podman rm logserver
[shangrila@node1 ~]$ systemctl --user daemon-reload
[shangrila@node1 ~]$ systemctl --user enable --now container-logserver
[shangrila@node1 ~]$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3903e1d09170 registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 4 seconds ago Up 4 seconds ago logserver
[shangrila@node1 ~]$ systemctl --user stop container-logserver.service
* [shangrila@node1 ~]$ sudo reboot
[shangrila@node1 ~]$ podman ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7e6cd59c506a registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 10 seconds ago Up 9 seconds ago logserver
NEW QUESTION # 83
SELinux must be running in the Enforcing mode.
Answer:
Explanation:
getenforce // Check the current mode of SELinux // SELinux runs in enforcing mode // Check getenforce 1 getenforce vim /etc/selinux/config selinux=enforcing // To temporarily enable SELinux wg sestatus
NEW QUESTION # 84
SIMULATION
There is a local logical volumes in your system, named with common and belong to VGSRV volume group, mount to the /common directory. The definition of size is 128 MB.
Requirement:
Extend the logical volume to 190 MB without any loss of data. The size is allowed between 160-160 MB after extending.
Answer:
Explanation:
See explanation below.
Explanation/Reference:
Explanation: lvextend -L 190M /dev/mapper/vgsrv-common resize2fs /dev/mapper/vgsrv-common
NEW QUESTION # 85
Add admin group and set gid=600
Answer:
Explanation:
# groupadd -g 600 admin
NEW QUESTION # 86
Configure /var/tmp/fstab Permission.
Copy the file /etc/fstab to /var/tmp/fstab. Configure var/tmp/fstab permissions as the following:
Owner of the file /var/tmp/fstab is Root, belongs to group root
File /var/tmp/fstab cannot be executed by any user
User natasha can read and write /var/tmp/fstab
User harry cannot read and write /var/tmp/fstab
All other users (present and future) can read var/tmp/fstab.
Answer:
Explanation:
cp /etc/fstab /var/tmp/
/var/tmp/fstab view the owner setfacl -m u:natasha:rw- /var/tmp/fstab setfacl -m u:haryy:--- /var/tmp/fstab Use getfacl /var/tmp/fstab to view permissions
NEW QUESTION # 87
Configure iptables, there are two domains in the network, the address of local domain is 172.24.0.0/16 other domain is 172.25.0.0/16, now refuse domain 172.25.0.0/16 to access the server.
Answer:
Explanation:
see explanation below.
Explanation
below
* iptables -F
* service iptables save
* iptables -A INPUT -s 172.25.0.0/16 -j REJECT
* service iptables save
* service iptables restart
NEW QUESTION # 88
......
The Red Hat certification program is recognized globally and is highly respected in the IT industry. The RHCSA certification is considered a benchmark for system administrators and is a requirement for many job roles. Red Hat Certified System Administrator - RHCSA certification demonstrates a high level of expertise and competence in managing Red Hat Enterprise Linux systems.
Ultimate Guide to Prepare EX200 Certification Exam for RHCSA: https://www.exams4collection.com/EX200-latest-braindumps.html
EX200 Ultimate Study Guide: https://drive.google.com/open?id=1VSU_5JdGGp5WIyQURiuo8oQlh79KPinr
