RedHat Red Hat Certification EX294 Questions & Answers

• Question 41:

  Configure a mail alias to your MTA, for example, send emails to harry but mary actually is receiving emails.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  

  Notice:

  This problem is a trap. The question no 31 requires that harry must be able to receive remote emails but the problems in the question no 32 requires mary to receive harry's emails. So harry must be added when you are deploying aliases.

• Question 42:

  Create a role called sample-apache in /home/sandy/ansible/roles that enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template called index.html.j2 which creates and serves a message from /var/www/html/index.html Whenever the content of the file changes, restart the webserver service.

  Welcome to [FQDN] on [IP]

  Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in /home/sandy/ansible/ called apache.yml and use the role to serve the index file on webserver hosts.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  /home/sandy/ansible/apache.yml

  

  /home/sandy/ansible/roles/sample-apache/tasks/main.yml

  

  /home/sandy/ansible/roles/sample-apache/templates/index.html.j2

  

  In /home/sandy/ansible/roles/sample-apache/handlers/main.yml

  

• Question 43:

  Create a playbook called issue.yml in /home/sandy/ansible which changes the file /etc/issue on all managed nodes: If host is a member of (lev then write "Development" If host is a member of test then write "Test" If host is a member of prod then write "Production"

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  Solution as:

  

• Question 44:

  Create a playbook called regulartasks.yml which has the system that append the date to /root/datefile every day at noon. Name is job 'datejob'

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  Solution as:

  

• Question 45:

  Create a playbook /home/bob /ansible/motd.yml that runs on all inventory hosts and docs the following: The playbook should replaee any existing content of/etc/motd in the following text. Use ansible facts to display the FQDN of each host

  On hosts in the dev host group the line should be "Welcome to Dev Server FQDN".

  On hosts in the webserver host group the line should be "Welcome to Apache Server FQDN".

  On hosts in the database host group the line should be "Welcome to MySQL Server FQDN".

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  /home/sandy/ansible/apache.yml

  

  /home/sandy/ansible/roles/sample-apache/tasks/main.yml

• Question 46:

  Install and configure ansible

  User sandy has been created on your control node with the appropriate permissions already, do not change or modify ssh keys. Install the necessary packages to run ansible on the control node. Configure ansible.cfg to be in folder /home/ sandy/ansible/ansible.cfg and configure to access remote machines via the sandy user. All roles should be in the path /home/sandy/ansible/roles. The inventory path should be in /home/sandy/ansible/invenlory.

  You will have access to 5 nodes.

  node1.example.com node2.example.com node3.example.com node4.example.com node5.example.com

  Configure these nodes to be in an inventory file where node I is a member of group dev. nodc2 is a member of group test, node3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  In/home/sandy/ansible/ansible.cfg

  [defaults]

  inventory=/home/sandy/ansible/inventory

  roles_path=/home/sandy/ansible/roles

  remote_user= sandy

  host_key_checking=false

  [privilegeescalation]

  become=true

  become_user=root

  become_method=sudo

  become_ask_pass=false

  In /home/sandy/ansible/inventory

  [dev]

  node 1 .example.com

  [test]

  node2.example.com

  [proxy]

  node3 .example.com [prod] node4.example.com node5 .example.com [webservers:children] prod

• Question 47:

  Create a playbook that changes the default target on all nodes to multi-user tarqet. Do this in playbook file called target.yml in /home/sandy/ansible

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  -

  name: change default target

  hosts: all

  tasks:

  -

  name: change target

  file:

  src: /usr/lib/systemd/system/multi-user.target dest: /etc/systemd/system/default.target state:

  link

• Question 48:

  Create a file called requirements.yml in /home/sandy/ansible/roles to install two roles. The source for the first role is geerlingguy.haproxy and geerlingguy.php. Name the first haproxy-role and the second php-role. The roles should be installed in /home/sandy/ansible/roles.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  in /home/sandy/ansible/roles vim requirements.yml

  

  Run the requirements file from the roles directory:

  ansible-galaxy install -r requirements.yml -p /home/sandy/ansible/roles

• Question 49:

  Create an ansible vault password file called lock.yml with the password reallysafepw in the /home/sandy/ansible directory. In the lock.yml file define two variables. One is pw_dev and the password is 'dev' and the other is pw_mgr and the password is 'mgr' Create a regular file called secret.txt which contains the password for lock.yml.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  ansible-vault create lock.yml New Vault Password: reallysafepw Confirm: reallysafepw

  

• Question 50:

  Create an empty encrypted file called myvault.yml in /home/sandy/ansible and set the password to notsafepw. Rekey the password to iwejfj2221.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  ansible-vault create myvault.yml Create new password: notsafepw Confirm password: notsafepw ansible-vault rekey myvault.yml Current password: notsafepw New password: iwejfj2221 Confirm password: iwejfj2221