RedHat Red Hat Certification EX294 Questions & Answers

• Question 31:

  Configure the ftp to allow anonymously download the directory /var/ftp/pub, and reject the domain t3gg.com to access.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

• Question 32:

  Shutdown the /root/cdrom.iso under /opt/data and set as boot automatically mount.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

• Question 33:

  

  Configure the web server, which can be accessed by http://station.domain30.example.com.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

• Question 34:

  Configure the web server and implement the virtual host. http://www.domain30.example.com can access the pages under the directory: http://ip/dir/example.html. And make sure, http://station.domain30.example.com can also access the previous content.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

• Question 35:

  Please set the selinux status as enforcing.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

• Question 36:

  Please open the ip_forward and take effect permanently.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

  If no "sysctl.conf" option, use these commands:

  

• Question 37:

  Create a Shell script /root/program:

  The shell script will come back to "user" parameter when you are entering "kernel" parameter. The shell script will come back to "kernel" when you are entering "user" parameter. It will output the standard error when this script "usage:/root/

  program kernel|user" don't input any parameter or the parameter you inputted is entered as the requirements.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

• Question 38:

  Given the kernel of a permanent kernel parameters: sysctl=1. It can be shown on cmdline after restarting the system. Kernel of /boot/grub/grub.conf should be a34dded finally, as:

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

• Question 39:

  Prevent Mary from performing user configuration tasks in your system.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

  Conclusions:

  1. I find that it is common to add various service access limits in the exam RHCE. The exercises like:

  require one network segment can be accessed another network segments can not be accessed, the following are some conclusions for various service:

  tcp_wrappers:/etc/hosts.allow,/etc/hosts.deny

  tcp_wrappers can filter the TCP's accessing service. TCP whether has the filtering function which depends on this service whether use the function library of tcp_wrappers, or this service whether has the xinetd process of starting function of

  tcp_wrappers. tcp_wrappers's main configuration file is /etc/hosts.allow,/etc/ hosts.deny.

  And the priority of the documents in hosts. allow is higher than hosts. deny. Visit will be passed if no match was found.

  sshd,vsftpd can use the filtering service of tcp_wrappers.

  Configuration example:

  

  Notice:

  The two configuration files' syntax can refer to hosts_access (5) and hosts_options(5) sshd_config There are four parameters in this configuration file: DenyUsers, AllowUsers, DenyGroups, AllowGroups, they are used to limit some users or

  user groups to proceed Remote Login through the SSH. These parameters' priority level is DenyUsers->AllowUsers->DenyGroups->AllowGroups Configuration example:

  

  httpd Service Through the /etc/httpd/conf/httpd.conf in parameters, can add to control the url access. Just as:

  

  Notice:

  So pay attention, deny's and allow's priority level in order deny,allow is: the backer has the higher priority level. But here, allow's priority has a higher priority level.

  nfs Service

  nfs service directly control the visits through file /etc/exports, just as:

  

  samba Service

  Parameter hosts allow in /etc/samba/smb.conf which is used as Access Control, just as:

  

  2.

  Paying attention to use Mount parameters: _netdev,defaults when you are mounting ISCSI disk.

  3.

  Stop the NetworkManager /etc/init.d/NetworkManager stop chkconfig NetworkManager off

  4.

  When you are deploying ifcfg-ethX, add parameters: PEERDNS=no

  5.

  Empty the firewall in RHCSARHCE:

  6.

  Narrow lv steps:

  7.

  Mount the using command - swap which is newly added in /etc/fstab

  8.

  If Verification is not passed when you are installing software, can import public key: rpm import /etc/pki/ rpm.../...release and so on. In yum.repo, you also can deploy gpgkey, for example, gpgkey=/etc/pki/rpm.../ ...release

  9.

  When you are using "Find" command to search and keep these files, paying attention to use cp -a to copy files if you use user name and authority as your searching methods.

  

  

• Question 40:

  Create a jinja template in /home/sandy/ansible/ and name it hosts.j2. Edit this file so it looks like the one below. The order of the nodes doesn't matter. Then create a playbook in /home/sandy/ansible called hosts.yml and install the template on dev node at /root/myhosts

  

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  Solution as:

  

  Topic 2, LAB SETUP ?2 control.realmX.example.com _ workstation.lab.example.com node1.realmX.example.com _ servera.lab.example.com node2.realmX.example.com _ serverb.lab.example.com node3.realmX.example.com _ serverc.lab.example.com node4.realmX.example.com _ serverd.lab.example.com node5.realmX.example.com

  -username:root, password:redhat

  -username:admin, password:redhat

  note1. don't change `root' or `admin' password.

  note2. no need to create ssh-keygen for access, its pre-defined note3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.