RedHat EX200 Exam

Certification Provider: RedHat

Exam Name: Red Hat Certified System Administrator

Duration: 180 Minutes

Number of questions in our database: 136

Exam Version: May. 28, 2023

EX200 Exam Official Topics:

Topic 1: Managing Users and Groups
Topic 2: Working with Kernel Modules
Topic 3: Registering the System and Attaching Subscriptions

Free RedHat EX200 Exam Actual Questions

The questions for EX200 were last updated On May. 28, 2023

Question #1

Locate all the files owned by ira and copy them to the / root/findresults directory.

AExplanation:
# find / -user ira > /root/findresults (if /root/findfiles is a file)
# mkdir -p /root/findresults
# find / -user ira -exec cp -a {} /root/findresults\; [ if /root/findfiles is a directory] ls /root/findresults

Reveal Solution

Correct Answer: A

Question #2

Part 1 (on Node1 Server)

Task 14 [Managing SELinux Security]

You will configure a web server running on your system serving content using a non-standard port (82)

AExplanation:
*
[root@node1 ~]# curl http://node1.domain15.example.com
curl: (7) Failed to connect to node1.domain15.example.com port 80: Connection refused
[root@node1 ~]# yum install httpd
[root@node1 ~]# systemctl enable --now httpd
Created symlink /etc/systemd/system/multi-user.target.wants/httpd.service /usr/lib/systemd/system/httpd.service.
[root@node1 ~]# systemctl start httpd
[root@node1 ~]# systemctl status httpd
Status: 'Running, listening on: port 80'
*
[root@node1 ~]# wget http://node1.domain15.example.com
2021-03-23 13:27:28 ERROR 403: Forbidden.
[root@node1 ~]# semanage port -l | grep http
http_port_t tcp 80, 81, 443, 488, 8008, 8009, 8443, 9000
[root@node1 ~]# semanage port -a -t http_port_t -p tcp 82
[root@node1 ~]# semanage port -l | grep http
http_port_t tcp 82, 80, 81, 443, 488, 8008, 8009, 8443, 9000
[root@node1 ~]# firewall-cmd --zone=public --list-all
[root@node1 ~]# firewall-cmd --permanent --zone=public --add-port=82/tcp
[root@node1 ~]# firewall-cmd --reload
[root@node1 ~]# curl http://node1.domain15.example.com
OK
*
root@node1 ~]# wget http://node1.domain15.example.com:82
Connection refused.
[root@node1 ~]# vim /etc/httpd/conf/httpd.conf
Listen 82
[root@node1 ~]# systemctl restart httpd
[root@node1 ~]# wget http://node1.domain15.example.com:82
2021-03-23 13:31:41 ERROR 403: Forbidden.
[root@node1 ~]# curl http://node1.domain15.example.com:82
OK

Reveal Solution

Correct Answer: A

Question #3

Part 1 (on Node1 Server)

Task 15 [Running Containers]

Create a container named logserver with the image rhel8/rsyslog found from the registry registry.domain15.example.com:5000

The container should run as the root less user shangril

a. use redhat as password [sudo user]

Configure the container with systemd services as the shangrila user using the service name, ''container-logserver'' so that it can be persistent across reboot.

Use admin as the username and admin123 as the credentials for the image registry.

AExplanation:
*
[root@workstation ~]# ssh shangrila@node1
[shangrila@node1 ~]$ podman login registry.domain15.example.com:5000
Username: admin
Password:
Login Succeeded!
[shangrila@node1 ~]$ podman pull registry.domain15.example.com:5000/rhel8/rsyslog
[shangrila@node1 ~]$ podman run -d --name logserver registry.domain15.example.com:5000/rhel8/rsyslog
021b26669f39cc42b8e94eab886ba8293d6247bf68e4b0d76db2874aef284d6d
[shangrila@node1 ~]$ mkdir -p ~/.config/systemd/user
[shangrila@node1 ~]$ cd ~/.config/systemd/user
*
[shangrila@node1 user]$ podman generate systemd --name logserver --files --new
/home/shangrila/.config/systemd/user/container-logserver.service
[shangrila@node1 ~]$ systemctl --user daemon-reload
[shangrila@node1 user]$ systemctl --user enable --now container-logserver.service
[shangrila@node1 ~]$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7d9f7a8a4d63 registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 2 seconds ago logserver
[shangrila@node1 ~]$ sudo reboot
[shangrila@node1 ~]$ cd .config/systemd/user
[shangrila@node1 user]$ systemctl --user status

Reveal Solution

Correct Answer: A

Question #4

Part 1 (on Node1 Server)

Task 13 [Archiving and Transferring Files & SELinux]

Create a backup file named /root/backup.tar.bz2. The backup file should contain the content of /usr/local and should be zipped with bzip2 compression format.

Furthermore, ensure SELinux is in enforcing mode. If it is not, change SELinux to enforcing mode.

AExplanation:
*
[root@node1 ~]# tar cvf /root/backup.tar /usr/local/
tar: Removing leading `/' from member names
/usr/local/
/usr/local/bin/
/usr/local/etc/
[root@node1 ~]# ls
backup.tar
[root@node1 ~]# file backup.tar
backup.tar: POSIX tar archive (GNU)
[root@node1 ~]# bzip2 backup.tar
[root@node1 ~]# ls
backup.tar.bz2
[root@node1 ~]# file backup.tar.bz2
backup.tar.bz2: bzip2 compressed data, block size = 900k
*
[root@node1 ~]# sestatus
SELinux status: enabled
[root@node1 ~]# cat /etc/selinux/config
SELINUX=enforcing
SELINUXTYPE=targeted
[root@node1 ~]# reboot
### For Checking ###
[root@node1 ~]# sestatus
SELinux status: enabled

Reveal Solution

Correct Answer: A

Question #5

Part 2 (on Node2 Server)

Task 8 [Tuning System Performance]

Set your server to use the recommended tuned profile

AExplanation:
[root@node2 ~]# tuned-adm list
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
[root@node2 ~]# tuned-adm recommend
virtual-guest
[root@node2 ~]# tuned-adm profile virtual-guest
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
[root@node2 ~]# reboot
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest

Reveal Solution

Correct Answer: A

Unlock all EX200 Exam Questions with Advanced Practice Test Features:

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now

Disscuss RedHat EX200 Topics, Questions or Ask Anything Related

Submit Cancel