Red Hat Red Hat Certifications EX407 Questions & Answers

• Question 121:

  Create anansible vault password file called lock.yml with the password reallysafepw in the /home/sandy/ansible directory. In the lock.yml file define two variables. One is pw_dev and the password is 'dev' and the other is pw_mgr and the password is 'mgr' Create a regular file called secret.txt which contains the password for lock.yml.

  Correct Answer:

  See the for complete Solution below. ansible-vault create lock.yml New Vault Password: reallysafepw Confirm: reallysafepw

  In file:

  pw_dev: dev pw_mgr: mgr

• Question 122:

  Create a jinja template in /home/sandy/ansible/ and name it hosts.j2. Edit this file so it looks like the one below. The order of the nodes doesn't matter. Then create a playbook in /home/sandy/ansible called hosts.yml and install the template on dev node at/root/myhosts

  

  Correct Answer:

  See the for complete Solution below. Solution as:

  

• Question 123:

  Install and configure ansible

  User bob has been created on your control node. Give him the appropriate permissions on thecontrol node. Install the necessary packages to run ansible on the control node.

  Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:

  1.

  The roles path should include /home/bob/ansible/roles, as well as any otherpath that may be required for the course of the sample exam.

  2.

  The inventory file path is /home/bob/ansible/inventory.

  3.

  Ansible should be able to manage 10 hosts at a single time.

  4.

  Ansible should connect to all managed nodes using the bobuser. Create an inventory file for the following five nodes:

  1.

  node1.example.com

  2.

  node2.example.com

  3.

  node3.example.com

  4.

  node4.example.com

  5.

  node5.example.com

  Configure these nodes to be in an inventory file where node1 is a member of group dev. nodc2 is a member of group test, nodc3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

  Correct Answer:

  See the for complete Solution below.

  In/home/sandy/ansible/ansible.cfg [defaults]

  inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false

  [privilegeescalation]

  become=true become_user=root become_method=sudo become_ask_pass=false

  In /home/sandy/ansible/inventory

  [dev] node 1 .example.com [test] node2.example.com [proxy] node3 .example.com [prod] node4.example.com

  node5 .example.com [webservers:children] prod

• Question 124:

  Create a playbook called issue.yml in /home/sandy/ansible which changes the file /etc/issue on all managed nodes: If host is a member of (lev then write "Development" If host is a member of test then write "Test" If host is a member of prod then write "Production"

  Correct Answer:

  See the for complete Solution below. Solution as: