Red Hat EX200 Online Practice Questions and Exam Preparation

Red Hat EX200 Online Questions & Answers

• Question 21:

  Create User Account.

  Create the following user, group and group membership:

  Adminuser group

  User natasha, using adminuser as a sub group

  User Harry, also using adminuser as a sub group

  User sarah, can not access the SHELL which is interactive in the system, and is not a member of adminuser, natashaharrysarah password is redhat.

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  groupadd adminuser useradd natasha -G adminuser useradd haryy -G adminuser useradd sarah -s /sbin/nologin Passwd user name // to modify password or echo redhat | passwd --stdin user name id natasha // to view user group.

• Question 22:

  One Logical Volume named lv1 is created under vg0. The Initial Size of that Logical Volume is 100MB. Now you required the size 500MB. Make successfully the size of that Logical Volume 500M without losing any data. As well as size should be increased online.

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  The LVM system organizes hard disks into Logical Volume (LV) groups. Essentially, physical hard disk partitions (or possibly RAID arrays) are set up in a bunch of equal sized chunks known as Physical Extents (PE). As there are several

  other concepts associated with the LVM system, let's start with some basic definitions:

  Physical Volume (PV) is the standard partition that you add to the LVM mix. Normally, a physical volume is a standard primary or logical partition. It can also be a RAID array.

  Physical Extent (PE) is a chunk of disk space. Every PV is divided into a number of equal sized PEs. Every PE in a LV group is the same size. Different LV groups can have different sized PEs.

  Logical Extent (LE) is also a chunk of disk space. Every LE is mapped to a specific PE.

  Logical Volume (LV) is composed of a group of LEs. You can mount a file system such as /home and /var on an LV.

  Volume Group (VG) is composed of a group of LVs. It is the organizational group for LVM. Most of the commands that you'll use apply to a specific VG.

  1.

  Verify the size of Logical Volume: lvdisplay /dev/vg0/lv1

  2.

  Verify the Size on mounted directory: df -h or df -h mounted directory name

  3.

  Use: lvextend -L+400M /dev/vg0/lv1

  4.

  ext2online -d /dev/vg0/lv1 to bring extended size online.

  5.

  Again Verify using lvdisplay and df -h command.

• Question 23:

  Part 1 (on Node1 Server)

  Task 5 [Controlling Access to Files with ACLs]

  Copy the file /etc/fstab to /var/tmp. Configure the following permissions on /var/tmp/fstab.

  The file /var/tmp/fstab is owned by root user

  The file /var/tmp/fstab is belongs to the root group

  The file /var/tmp/fstab should be executable by anyone

  The user harry is able to read and write on /var/tmp/fstab

  The user natasha can neither read or write on /var/tmp/fstab

  All other users (Current or future) have the ability to read /var/tmp/fstab

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  * [root@node1 ~]# cp -p /etc/fstab /var/tmp/ [root@node1 ~]# ls -lrt /etc/fstab [root@node1 ~]# ls -lrt /var/tmp/fstab [root@node1 ~]# chmod a+x /var/tmp/fstab [root@node1 ~]# getfacl /var/tmp/fstab [root@node1 ~]# setfacl -m u:harry:rw- /var/tmp/fstab [root@node1 ~]# setfacl -m u:natasha:--- /var/tmp/fstab [root@node1 ~]# getfacl /var/tmp/fstab getfacl: Removing leading '/' from absolute path names # file: var/tmp/fstab # owner: root # group: root user::rwx user:harry:rwuser:natasha:--group::r-x mask::rwx other::r-x

  * [root@node1 ~]# su - natasha [natasha@node1 ~]$ cat /var/tmp/fstab cat: /var/tmp/fstab: Permission denied

• Question 24:

  Part 2 (on Node2 Server)

  Task 3 [Managing Logical Volumes]

  Create a new volume group in the name of datavg and physical volume extent is 16 MB

  Create a new logical volume in the name of datalv with the size of 250 extents and file system must xfs

  Then the logical volume should be mounted automatically mounted under /data at system boot time

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  * [root@node2 ~]# lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT vdb 252:16 0 5G 0 disk vdb1 252:17 0 4.2G 0 part vgrz-lvrz 253:2 0 4.1G 0 lvm /datarz vdc 252:32 0 5G 0 disk vdd 252:48 0 5G 0 disk vde 252:64 0 10G 0 disk [root@node2 ~]# parted /dev/vdc mklabel msdos [root@node2 ~]# parted /dev/vdc mkpart primary 1MiB 4200MiB [root@node2 ~]# parted /dev/vdc set 1 lvm on

  * [root@node2 ~]# udevadm settle [root@node2 ~]# pvcreate /dev/vdc1 Physical volume "/dev/vdc1" successfully created. [root@node2 ~]# vgcreate -s 16M datavg /dev/vdc1 Volume group "datavg" successfully created [root@node2 ~]# lvcreate -n datalv -L 4000M datavg Logical volume "datalv" created. [root@node2 ~]# mkfs.xfs /dev/datavg/datalv [root@node2 ~]# mkdir /data [root@node2 ~]# blkid /dev/mapper/datavg-datalv: UUID="7397a292-d67d-4632-941e-382e2bd922ce" BLOCK_SIZE="512" TYPE="xfs"

  * [root@node2 ~]# vim /etc/fstab UUID=7397a292-d67d-4632-941e-382e2bd922ce /data xfs defaults 0 0 [root@node2 ~]# mount UUID=7397a292-d67d-4632-941e-382e2bd922ce /data [root@node2 ~]# reboot [root@node2 ~]# df -hT Filesystem Type Size Used Avail Use% Mounted on /dev/mapper/datavg-datalv xfs 3.9G 61M 3.9G 2% /data

• Question 25:

  Install the Kernel Upgrade.

  Install suitable kernel update from:

  http://server.domain11.example.com/pub/updates.

  Following requirements must be met:

  Updated kernel used as the default kernel of system start-up.

  The original kernel is still valid and can be guided when system starts up.

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  Using the browser open the URL in the question, download kernel file to root or home directory. uname –r// check the current kernel version rpm –ivh kernel-*.rpm vi /boot/grub.conf// check Some questions are: Install and upgrade the kernel as required. To ensure that grub2 is the default item for startup. Yum repo : http://content.example.com/rhel7.0/x86-64/errata OR uname -r // check kernel Yum-config-manager --add-repo=“http://content.example.com/rhel7.0/x86-64/ errata” Yum clean all Yum list kernel// install directly Yum -y install kernel// stuck with it, do not pipe! Please do not pipe! Default enable new kernel grub2-editenv list// check Modify grub2-set-default “kernel full name” Grub2-mkconfig –o/boot/grub2/grub.cfg// Refresh

• Question 26:

  The user authentication has been provided by ldap domain in 192.168.0.254. According the following requirements to get ldapuser.

  -LdapuserX must be able to login your system, X is your hostname number. But the ldapuser's home directory cannot be mounted, until you realize automatically mount by autofs server.

  -All ldap user's password is "password".

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  system-config-authentication and

  

• Question 27:

  Part 1 (on Node1 Server)

  Task 14 [Managing SELinux Security]

  You will configure a web server running on your system serving content using a non- standard port (82)

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  *

  [root@node1 ~]# curl http://node1.domain15.example.com curl: (7) Failed to connect to node1.domain15.example.com port 80: Connection refused [root@node1 ~]# yum install httpd

  [root@node1 ~]# systemctl enable --now httpd

  Created symlink /etc/systemd/system/multi-user.target.wants/httpd.service /usr/lib/systemd/system/httpd.service.

  [root@node1 ~]# systemctl start httpd

  [root@node1 ~]# systemctl status httpd

  Status: "Running, listening on: port 80"

  *

  [root@node1 ~]# wget http://node1.domain15.example.com 2021-03-23 13:27:28 ERROR 403: Forbidden.

  [root@node1 ~]# semanage port -l | grep http http_port_t tcp 80, 81, 443, 488, 8008, 8009, 8443, 9000 [root@node1 ~]# semanage port -a -t http_port_t -p tcp 82 [root@node1 ~]# semanage port -l | grep http http_port_t tcp 82, 80, 81, 443, 488, 8008, 8009, 8443, 9000 [root@node1 ~]# firewall-cmd --zone=public --list-all [root@node1 ~]# firewall-cmd --permanent --zone=public --add-port=82/tcp [root@node1 ~]# firewall-cmd --reload [root@node1 ~]# curl http://node1.domain15.example.com OK

  * root@node1 ~]# wget http://node1.domain15.example.com:82 Connection refused. [root@node1 ~]# vim /etc/httpd/conf/httpd.conf Listen 82 [root@node1 ~]# systemctl restart httpd [root@node1 ~]# wget http://node1.domain15.example.com:82 2021-03-23 13:31:41 ERROR 403: Forbidden. [root@node1 ~]# curl http://node1.domain15.example.com:82 OK

• Question 28:

  Create a volume group, and set 16M as a extends. And divided a volume group containing 50 extends on volume group lv, make it as ext4 file system, and mounted automatically under /mnt/data.

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  # pvcreate /dev/sda7 /dev/sda8 # vgcreate -s 16M vg1 /dev/sda7 /dev/sda8 # lvcreate -l 50 -n lvm02 # mkfs.ext4 /dev/vg1/lvm02 # blkid /dev/vg1/lv1 # vim /etc/fstab # mkdir -p /mnt/data UUID=xxxxxxxx /mnt/data ext4 defaults 0 0 # vim /etc/fstab # mount -a # mount (Verify)

• Question 29:

  Create a backup file named /root/backup.tar.bz2, which contains the contents of /usr/local, bar must use the bzip2 compression.

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  cd /usr/local

  tar -jcvf /root/backup.tar.bz2*

  mkdir /test

  tar -jxvf /root/backup.tar.bz2 -C /test/

• Question 30:

  The system ldap.example.com provides an LDAP authentication service.

  Your system should bind to this service as follows:

  The base DN for the authentication service is dc=domain11, dc=example, dc=com LDAP is used to provide both account information and authentication information. The connection should be encrypted using the certificate at http://

  host.domain11.example.com/pub/domain11.crt

  When properly configured, ldapuserX should be able to log into your system, but will not have a home directory until you have completed the autofs requirement. Username: ldapuser11

  Password: password

  Correct Answer. Check the anser in explanation.
  Check the anser in explanation.

  ---

  system-config-authentication LDAP user DN=dc=domain11,dc=example,dc=com Server=host.domain11.example.com Certificate= http://host.domain11.example.com/pub/domain11.crt (enter url carefully, there maybe // or ..) LDAP password OK starting sssd su -ldapuser11 Display Bash prompt #exit