Latest Red Hat EX447 Questions and Answers

1. CORRECT TEXT

Create a file called specs.empty in home/bob/ansible on the local machine as follows:

HOST=

MEMORY=

BIOS=

VDA_DISK_SIZE=

VDB_DISK_SIZE=

Create the playbook /home/bob/ansible/specs.yml which copies specs.empty to all remote nodes' path /root/specs.txt. Using the specs.yml playbook then edit specs.txt on the remote machines to reflect theappropriate ansible facts.

2. CORRECT TEXT

Create a file calledadhoc.shin/home/sandy/ansiblewhich will use adhoc commands to set up anew repository. The name of the repo will be 'EPEL' the description 'RHEL8' the baseurl is'https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp'there is no gpgcheck, but you should enable the repo.

* You should be able to use an bash script using adhoc commands to enable repos. Depending on your lab setup, you may need to make this repo "state=absent" after you pass this task.

3. CORRECT TEXT

Create a file calledrequirements.ymlin/home/sandy/ansible/rolesto install two roles. The source for the first role is geerlingguy.haproxy and geerlingguy.php. Name the first haproxy-role and the second php-role. The roles should be installed in /home/sandy/ansible/roles.

4. CORRECT TEXT

Create an empty encrypted file calledmyvault.yml in /home/sandy/ansibleand set the passwordtonotsafepw. Rekey the passwordtoiwejfj2221.

5. CORRECT TEXT

Create a playbook calledwebdev.ymlin'home/sandy/ansible. The playbook will create a directory Avcbdev on dev host. The permission of the directory are 2755 and owner is webdev. Create a symbolic link from/Webdevto /var/www/html/webdev. Serve a file from Avebdev7index.html which displays the text "Development" Curlhttp://node1.example.com/webdev/index.htmlto test

6. CORRECT TEXT

Create a playbook /home/bob /ansible/motd.yml that runs on all inventory hosts and docs the following: The playbook should replaee any existing content of/etc/motd in the following text. Use ansible facts to display the FQDN of each host

On hosts in the dev host group the line should be "Welcome to Dev Server FQDN".

On hosts in the webserver host group the line should be "Welcome to Apache Server FQDN".

On hosts in the database host group the line should be "Welcome to MySQL Server FQDN".

7. CORRECT TEXT

Create an ansible vault password file calledlock.ymlwith the passwordreallysafepwin the /home/sandy/ansibledirectory. In the lock.yml file define two variables. One ispw_devand the password is 'dev' and the otherpwis_mgrand the password is 'mgr' Create a regular file calledsecret.txtwhich contains the password for lock.yml.

8. CORRECT TEXT

Create a file calledpackages.yml in/home/sandy/ansibleto install some packages for the following hosts. On dev, prod and webservers install packages httpd, mod_ssl, and mariadb. On dev only install the development tools package. Also, on dev host update all the packages tothe latest.

9. CORRECT TEXT

Create the users in the fileusersjist.ymlfile provided. Do this in a playbook called users.yml located at/home/sandy/ansible.The passwords for these users should be set using thelock.ymlfile from TASK7. When running the playbook, the lock.yml file should be unlocked withsecret.txtfile from TASK 7.

All users with the job of 'developer' should be created on thedvhosts, add them to the group devops, their password should be set using thepw_devvariable. Likewise create users with the job of 'manager' on theproxyhost and add the users to the group 'managers', their password should be set using thepw_mgrvariable.

10. CORRECT TEXT

Create a jinja template in /home/sandy/ansible/ and name it hosts.j2. Edit this file so it looks

like the one below. The order of the nodes doesn't matter. Then create a playbook in /home/sandy/ansiblecalledhosts.ymland install the template on dev node at /root/myhosts

11. CORRECT TEXT

Create a playbook /home/bob/ansible/timesync.yml that runs on hosts in the webservers host group and does the following:

• Uses thetimesync RHEL system role.

• Sets the ntp server to 0.uk.pool.ntp.org

• Sets the timezone to UTC

12. CORRECT TEXT

Create a file called mysecret.yml on the control host using ansible vault in home/bob/ansible. Set the password to 'notasafepass' and inside the file create avariable called dev_pass with the value of devops. Save the file. Then go back in the file and change dev_pass value to devops123. Then change the vault password of mysecret.yml to verysafepass

13. CORRECT TEXT

Create a file calledrequirements.ymlin/home/sandy/ansible/rolesa file calledrole.yml in /home/sandy/ansible/.Thehaproxy-roleshould be used on theproxyhost. And when you curlhttp://node3.example.comit should display "Welcome tonode4.example.com" and when you curl again "Welcome tonode5.example.com" Thephp-roleshould be used on theprod host.

14. CORRECT TEXT

Create a playbook called regulartasks.yml which has the system that append the date to /root/datefile every day at noon. Name is job 'datejob'

15. CORRECT TEXT

Create a role called sample-apache in/home/sandy/ansible/rolesthat enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template calledindex.html.j2which creates and serves a message from/var/www/html/index.html Whenever the content of the file changes, restart the webserver service.

Welcome to [FQDN] on [IP]

Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in/home/sandy/ansible/called apache.ymland use the role to serve the index file on webserver hosts.

16. CORRECT TEXT

Install and configure ansible

Userbobhas been created on your control node. Give him the appropriate permissions on the control node.Install the necessary packages to run ansible on the control node.

Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:

• The roles path should include /home/bob/ansible/roles, as well as any other path that maybe required for the course of the sample exam.

• The inventory file path is /home/bob/ansible/inventory.

• Ansible should be able to manage 10 hosts at a single time.

• Ansible should connect to all managed nodes using the bob user.

Create an inventory file for the following five nodes:

nodel.example.com

node2.example.com

node3.example.com

node4.example.com

node5.example.com

Configure these nodes to be in an inventory file where node1 is a member of groupdev. nodc2 is a member of group test, nodc3 is a member of groupproxy,nodc4 and node 5 are members of groupprod.Also,prodis a member of group webservers.

17. CORRECT TEXT

Create a role called sample-apache and store it in /home/bob/ansible/roles.

The role should satisfy the following requirements:

* In the role, install and enable httpd. Also enable the firewall to allow http. Also run the template

* index.html.j2 and make sure this runs Create a template index.html.j2that displays "Welcome to the server HOSTNAME"

In a play called apache.yml in /home/bob/ansible/ run the sample-apache role.