Red Hat Red Hat Certifications EX294 Questions & Answers

• Question 71:

  Create a playbook called balance.yml as follows:

  * The playbook contains a play that runs on hosts in balancers host group and uses

  the balancer role.

  --> This role configures a service to loadbalance webserver requests between hosts

  in the webservers host group.curl

  --> When implemented, browsing to hosts in the balancers host group (for example

  http://node5.example.com) should produce the following output:

  Welcome to node3.example.com on 192.168.10.z

  --> Reloading the browser should return output from the alternate web server: Welcome to node4.example.com on 192.168.10.a

  * The playbook contains a play that runs on hosts in webservers host group and uses

  the phphello role.

  --> When implemented, browsing to hosts in the webservers host group with the URL /

  hello.php should produce the following output:

  Hello PHP World from FQDN

  --> where FQDN is the fully qualified domain name of the host. For example,

  browsing to http://node3.example.com/hello.php, should produce the following output:

  Hello PHP World from node3.example.com

  * Similarly, browsing to http://node4.example.com/hello.php, should produce the

  following output:

  Hello PHP World from node4.example.com

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  Solution as:

  # pwd

  /home/admin/ansible/

  # vim balancer.yml

  -name: Including phphello role hosts: webservers roles:

  -./roles/phphello

  -name: Including balancer role hosts: balancer

  roles:

  -./roles/balancer wq! # ansible-playbook balancer.yml --syntax-check # ansible-playbook balancer.yml

• Question 72:

  Rekey an existing Ansible vault as follows:

  *

  Download Ansible vault from http:// classroom.example.com /secret.yml to /home/

  admin/ansible/

  *

  The current vault password is curabete

  *

  The new vault password is newvare

  *

  The vault remains in an encrypted state with the new password

  A.

  Answer: See the for complete Solution below.

  Correct Answer: A

  Solution as: # pwd /home/admin/ansible/ # wget http://classroom.example.com/secret.yml # chmod 0600 newpassword.txt # ansible-vault rekey vault.yml --new-vault-password-file=newpassword.txt

• Question 73:

  Create Logical volumes with lvm.yml in all nodes according to following

  requirements.

  *

  Create a new Logical volume named as 'data'

  *

  LV should be the member of 'research' Volume Group

  *

  LV size should be 1500M

  *

  It should be formatted with ext4 file-system.

  --> If Volume Group does not exist then it should print the message "VG Not found"

  --> If the VG can not accommodate 1500M size then it should print "LV Can not be

  created with

  following size", then the LV should be created with 800M of size.

  --> Do not perform any mounting for this LV.

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  Solution as:

  # pwd /home/admin/ansible # vim lvm.yml

  -name:

  hosts: all

  ignore_errors: yes

  tasks:

  -name:

  lvol:

  lv: data

  vg: research

  size: "1500"

  -debug:

  msg: "VG Not found" when: ansible_lvm.vgs.research is not defined

  -debug:

  msg: "LV Can not be created with following size"

  when: ansible_lvm.vgs.research.size_g < "1.5"

  -name:

  lvol:

  lv: data

  vg: research

  size: "800"

  when: ansible_lvm.vgs.research.size_g < "1.5"

  -name:

  filesystem:

  fstype: ext4

  dev: /dev/research/data

  wq!

  # ansible-playbook lvm.yml ?syntax-check

  # ansible-playbook lvm.yml

• Question 74:

  Create a playbook called web.yml as follows:

  *

  The playbook runs on managed nodes in the "dev" host group

  *

  Create the directory /webdev with the following requirements: --> membership in the apache group --> regular permissions: owner=r+w+execute, group=r+w+execute, other=r+execute s.p=set group-id

  *

  Symbolically link /var/www/html/webdev to /webdev

  *

  Create the file /webdev/index.html with a single line of text that reads: “Development” --> it should be available on http://servera.lab.example.com/webdev/index.html

  A.

  Answer: See the for complete Solution below.

  Correct Answer: A

  Solution as:

  # pwd /home/admin/ansible/ # vim web.yml

  -name: hosts: dev tasks:

  -

  name: create group yum: name: httpd state: latest

  -

  name: create group group: name: apache state: present

  -

  name: creating directiory file: path: /webdev

  state: directory mode: '2775' group: apache

  -sefcontext: target: '/webdev/index.html' setype: httpd_sys_content_t state: present

  -

  name: Apply new SELinux file context to filesystem command: restorecon -irv

  -

  name: creating symbolic link file: src: /webdev

  dest: /var/www/html/webdev state: link force: yes

  -

  name: creating file

  file:

  path: /webdev/index.html

  sate: touch

  -

  name: Adding content to index.html file

  copy:

  dest: /webdev/index.html

  content: "Development"

  -

  name: add service to the firewall

  firewalld:

  service: http

  permanent: yes

  state: enabled

  immediate: yes

  -

  name: active http service

  service:

  name: httpd

  state: restarted

  enabled: yes

  wq

  # ansible-playbook web.yml -–syntax-check

  # ansible-playbook web.yml

• Question 75:

  Create user accounts

  --> A list of users to be created can be found in the file called user_list.yml

  which you should download from http://classroom.example.com/user_list.yml and save to /home/admin/ansible/

  --> Using the password vault created elsewhere in this exam, create a playbook called

  create_user.yml

  that creates user accounts as follows:

  --> Users with a job description of developer should be:

  --> created on managed nodes in the "dev" and "test" host groups assigned the

  password from the "dev_pass"

  variable and these user should be member of supplementary group "devops".

  --> Users with a job description of manager should be:

  --> created on managed nodes in the "prod" host group assigned the password from

  the "mgr_pass" variable

  and these user should be member of supplementary group "opsmgr"

  --> Passwords should use the "SHA512" hash format. Your playbook should work using

  the vault password file

  created elsewhere in this exam.

  while practising you to create these file hear. But in exam have to download as per

  questation.

  user_list.yml file consist:

  user:

  -

  name: user1

  job: developer

  -

  name: user2

  job: manager

  A. Answer: See the for complete Solution below.

  Correct Answer: A

  Solution as:

  # pwd /home/admin/ansible # wget http://classroom.example.com/user_list.yml # cat user_list.yml # vim create_user.yml

  -name:

  hosts: all

  vars_files:

  -./user_list.yml

  -./vault.yml

  tasks:

  -name: creating groups

  group:

  name: "{{ item }}"

  state: present loop:

  -devops

  - opsmgr

  -

  name: creating user

  user:

  name: "{{ item.name }}"

  state: present

  groups: devops

  password: "{{ dev_pass|password_hash ('sha512') }}" loop: "{{ user }}"

  when: (inventory_hostname in groups['dev'] or inventory_hostname in groups['test']) and item.job == "developer"

  -

  name: creating user

  user:

  name: "{{ item.name }}"

  state: present

  groups: opsmgr

  password: "{{ mgr_pass|password_hash ('sha512') }}" loop: "{{ user }}"

  when: inventory_hostname in groups['prod'] and item.job == "manager" wq!

  # ansible-playbook create_user.yml -–vault-password-file=password.txt -–syntax-check

  # ansible-playbook create_user.yml -–vault-password-file=password.txt

• Question 76:

  SIMULATION

  Make on /storage directory that only the user owner and group owner member can fully access.

  A.

  Correct Answer: Please see explanation

• Question 77:

  SIMULATION

  Whoever creates the files/directories on /storage group owner should be automatically should be the same group owner of /storage.

  A.

  Correct Answer: Please see explanation

• Question 78:

  SIMULATION

  Install the Cron Schedule for jeff user to display "Hello" on daily 5:30.

  A.

  Correct Answer: Please see explanation

• Question 79:

  SIMULATION

  Give Full Permission to owner user and owner group member but no permission to others on /data.

  A.

  Correct Answer: Please see explanation

• Question 80:

  SIMULATION

  Whoever creates the file on /data make automatically owner group should be the group owner of /data directory.

  A.

  Correct Answer: Please see explanation