EX300 Red Hat Certified Engineer - RHCE (v6+v7) Questions and Answers

RHCE Test Configuration Instructions

Information for the two systems you will use in test is the following:

system1.group3.example.com: is one of the main sever. system2.group3.example.com: mainly used as a client.

Password for both of the two systems is atenorth

System’s IP is provided by DHCP, you can regard it as normal, or you can reset to Static IP in accordance with the following requirements:

system1.group3.example.com: 172.24.3.5

system2.group3.example.com: 172.24.3.10

The subnet mask is 255.255.255.0

Your system is a member of DNS domain group3.example.com. All systems in DNS domain group3.example.com are all in subnet 172.24.3.0/255.255.255.0, the same all systems in this subnet are also in group3.example.com, unless specialized, all network services required to be configured can be accessed by systems of domain group3.

host.group3.example.com provides a centralized authentication service domain

GROUP3.EXAMPLE.COM, both system1 and system2 have already been pre-configured to be the client for this domain, this domain provides the following user account:

Firewall is enabled by default, you can turn it off when deemed appropriate, other settings about firewall may be in separate requirements.

Your system will be restarted before scoring, so please ensure that all modifications and service configurations you made still can be operated after the restart without manual intervention, virtual machine instances of all examinations must be able to enter the correct multi-user level after restart without manual assistance, it will be scored zero if the test using virtual machine system cannot be restarted or be properly restarted.

Corresponding distribution packages for the testing using operating system Red Hat Enterprise Linux version can be found in the following link:

http://server1.group3.example.com/rhel

Part of the requirements include host security, ensure your host security limit does not prevent the request to allow the host and network, although you correctly configured the network service but would have to allow the host or network is blocked, this also does not score.

You will notice that some requirements which clearly do not allow services be accessed by service domain my133t.org, systems of this domain are in subnet 172.25.1.0/252.255.255.0, and systems of these subnets also belong to my 133t.org domain.

PS: Notice that some test questions may depend on other exam questions, for example, you might be asked to perform a series of restrictions on a user, but this user creation may be required in other questions. For convenient identification, each exam question has some radio buttons to help you identify which questions you have already completed or not completed. Certainly, you do not need to care these buttons if you don’t need them.

Configure IPV6 Address

Configure interface eth0 on your test system, using the following IPV6 addresses:

1) The address of system1 should be 2003:ac18::305/64

(2) The address of system2 should be 2003:ac18::30a/64

(3) Both two systems must be able to communicate with systems in network 2003:ac18/64

(4) The address must still take effect after restart

(5) Both two systems must maintain the current Ipv4 address and can communicate

Deploying your exam system: link to the iscsi target in the instructor.example.com and distinguish it well, then format as ext3 file system. You must be able to mount the file system of the iscsi target to the /mnt/iscsi directory in your own system and make this file system can automatically mount (permanently mount) after system restart.

Via nfs service share the /common directory in your system, just doing ONE share in example.com domain.

Given the kernel of a permanent kernel parameters: sysctl=1.

It can be shown on cmdline after restarting the system.

Kernel of /boot/grub/grub.conf should be a34dded finally, as:

Deploy your SMTP mail service and complete it by the following requirements:

-- Your mail service must be able to receive the local and remote mails

-- harry must be able to receive the remote mail

-- The mail which is delivered to mary should be put into the mail /var/spool/mail/mary

There were two systems:

• system1, main system on which most of the configuration take place
• system2, some configuration here

Configure selinux.

Configure your systems that should be running in Enforcing.

There were two systems:

• system1, main system on which most of the configuration take place
• system2, some configuration here

Dynamic Webpage Configuration.

• Configure website wsgiX.example.com:8961">http://wsgiX.example.com:8961 on system1 with the documentroot /var/www/scripts
• Site should execute webapp.wsgi
• Page is already provided on classroom.example.com/pub/webapp.wsgi">http://classroom.example.com/pub/webapp.wsgi
• Content of the script should not be modified

There were two systems:

• system1, main system on which most of the configuration take place
• system2, some configuration here

NFS server.

• Configure serverX with the following requirements
• Share the /nfsshare directory within the example.com domain clients only, share must be writable
• Share the /nfssecure, enable krb5p security to secure access to the NFS share from URL http://station.network0.example.com/pub/keytabs/serverX.keytab
• Create a directory named as protected under /nfssecure
• The exported directory should have read/write access from all subdomains of the example.com domain
• Ensure the directory /nfssecure/protected should be owned by the user harry with read/write permission

There were two systems:

• system1, main system on which most of the configuration take place
• system2, some configuration here

Configure NFS mount.

• Mount /nfsshare directory on desktopX under /public directory persistently at system boot time.
• Mount /nfssecure/protected with krb5p secured share on desktopX beneath /secure/protected provided with keytab station.network0.example.com/pub/keytabs/desktopX.keytab">http://station.network0.example.com/pub/keytabs/desktopX.keytab
• The user harry is able to write files on /secure directory

One Logical Volume is created named as myvol under vo volume group and is mounted. The Initial Size of that Logical Volume is 400MB. Make successfully that the size of Logical Volume 200MB without losing any data. The size of logical volume 200MB to 210MB will be acceptable.