Free EX294: Red Hat Certified Engineer (RHCE) Exam Questions and Answers

On server2, an administrator runs two commands and sees this output: # systemctl get-default graphical.target # systemctl is-active graphical.target active Server2 has no need for a GUI. Configure the system so that it boots into multi-user.target on every future boot, and switch the running system to multi-user.target immediately without rebooting. Which commands complete the task?

• AA. systemctl set-default multi-user.target, then systemctl isolate multi-user.target
• BB. systemctl isolate multi-user.target, then systemctl enable multi-user.target
• CC. systemctl set-default multi-user.target, then systemctl start multi-user.target
• DD. systemctl isolate multi-user.target, then systemctl daemon-reload

The file /home/student/ansible/requirements.yml lists the roles that the playbooks need. From the /home/student/ansible directory, install every role in the file into /home/student/ansible/roles. Which command completes the task?

• AA. ansible-galaxy collection install -r requirements.yml -p /home/student/ansible/roles
• BB. ansible-galaxy role install requirements.yml -p /home/student/ansible/roles
• CC. ansible-galaxy role install -r requirements.yml --force
• DD. ansible-galaxy role install -r requirements.yml -p /home/student/ansible/roles

The ansible.posix collection is installed on the control node. In a play that runs against the webservers group with privilege escalation enabled, add a task that allows the https service through the firewall immediately and keeps the rule after a reboot. Which task completes the requirement?

• AA. - name: Allow HTTPS ansible.posix.firewalld: service: https permanent: true immediate: true state: enabled
• BB. - name: Allow HTTPS ansible.builtin.firewalld: service: https permanent: true immediate: true state: enabled
• CC. - name: Allow HTTPS ansible.posix.firewalld: service: https immediate: true state: enabled
• DD. - name: Allow HTTPS ansible.posix.firewalld: service: https permanent: true state: enabled

A play defines this variable: web_users: alice: wheel bob: developers Add a task that creates each user in web_users with ansible.builtin.user, using the key as the user name and the value as the supplementary group. Which task completes the requirement?

• AA. - name: Create users ansible.builtin.user: name: "{{ item.key }}" groups: "{{ item.value }}" loop: "{{ web_users | list }}"
• BB. - name: Create users ansible.builtin.user: name: "{{ item.name }}" groups: "{{ item.groups }}" loop: "{{ web_users | dict2items }}"
• CC. - name: Create users ansible.builtin.user: name: "{{ item.key }}" groups: "{{ item.value }}" loop: "{{ web_users }}"
• DD. - name: Create users ansible.builtin.user: name: "{{ item.key }}" groups: "{{ item.value }}" loop: "{{ web_users | dict2items }}"

On the control node, the user automation has generated the key pair /home/automation/.ssh/id_ed25519 and /home/automation/.ssh/id_ed25519.pub. Write a play that runs against all managed nodes and enables key-based login for the remote user automation with this key. Keys already present in that user's authorized_keys file on the nodes must be preserved. Which task completes the requirement?

• AA. - name: Distribute key ansible.posix.authorized_key: user: automation state: present key: "{{ lookup('file', '/home/automation/.ssh/id_ed25519.pub') }}"
• BB. - name: Distribute key ansible.posix.authorized_key: user: automation state: present key: "{{ lookup('file', '/home/automation/.ssh/id_ed25519') }}"
• CC. - name: Distribute key ansible.posix.authorized_key: user: automation state: present exclusive: true key: "{{ lookup('file', '/home/automation/.ssh/id_ed25519.pub') }}"
• DD. - name: Distribute key ansible.builtin.copy: src: /home/automation/.ssh/id_ed25519.pub dest: /home/automation/.ssh/authorized_keys mode: '0600'

A playbook named site.yml runs against the webservers group and contains a single debug task that displays {{ http_port }}. The variable is defined as follows: group_vars/webservers.yml: http_port: 80 host_vars/node1.example.com.yml: http_port: 8081 Play vars in site.yml: http_port: 8080 The playbook is started with this command: ansible-navigator run site.yml -m stdout -e http_port=9090 Which value does the debug task display for node1.example.com?

• AA. 80
• BB. 8080
• CC. 8081
• DD. 9090

Playbooks are run as the user devops, who connects to the managed nodes with an SSH key. The ansible.cfg file contains the following: [privilege_escalation] become=true become_method=sudo become_user=root become_ask_pass=false Every play fails with the error "Missing sudo password". On the managed nodes, devops is not a member of any administrative group and has no sudo rules. Playbooks must run without prompting for a password, and no password may be stored in any playbook. Which change completes the requirement?

• AA. Add devops to the wheel group on each managed node and keep become_method=sudo
• BB. Create /etc/sudoers.d/devops on each managed node containing devops ALL=(ALL) NOPASSWD: ALL
• CC. Set become_user=devops in the [privilege_escalation] section of ansible.cfg on the control node
• DD. Set become_method=su in the [privilege_escalation] section of ansible.cfg on the control node

Create /home/student/ansible/ansible.cfg so that the inventory file /home/student/ansible/inventory is used by default. Which ansible.cfg content completes the task?

• AA. [defaults] hostfile = /home/student/ansible/inventory
• BB. [defaults] inventory = /home/student/ansible/inventory
• CC. [ssh_connection] inventory = /home/student/ansible/inventory
• DD. [inventory] path = /home/student/ansible/inventory

Create a play that configures a repository on all managed nodes. The repository is named appstream-local, has the description "Local AppStream", uses the base URL http://repo.example.com/rhel9/AppStream, has GPG checking disabled, and is enabled. The configuration must persist after a reboot. Which task completes the requirement?

• AA. - name: Configure repository ansible.builtin.dnf: name: appstream-local enablerepo: http://repo.example.com/rhel9/AppStream state: present
• BB. - name: Configure repository ansible.builtin.yum_repository: name: appstream-local description: Local AppStream baseurl: http://repo.example.com/rhel9/AppStream gpgcheck: false enabled: true
• CC. - name: Configure repository ansible.builtin.yum_repository: name: appstream-local description: Local AppStream url: http://repo.example.com/rhel9/AppStream gpgcheck: false enabled: true
• DD. - name: Configure repository ansible.builtin.yum_repository: name: appstream-local baseurl: http://repo.example.com/rhel9/AppStream gpgcheck: false enabled: true

A play has already created an XFS file system on /dev/vdb1 on hosts in the dbservers group. Add a task that mounts it on /data right away and also at every boot. Which task completes the requirement?

• AA. - name: Mount data file system ansible.posix.mount: path: /data src: /dev/vdb1 fstype: xfs state: mounted
• BB. - name: Mount data file system ansible.posix.mount: path: /data src: /dev/vdb1 fstype: xfs state: remounted
• CC. - name: Mount data file system ansible.posix.mount: path: /data src: /dev/vdb1 fstype: xfs state: ephemeral
• DD. - name: Mount data file system ansible.posix.mount: path: /data src: /dev/vdb1 fstype: xfs state: present