RedHat EX200 Red Hat Certified System Administrator - RHCSARHEL 10 Exam Practice Test

Solution:

dnf install -y autofs

mkdir -p /shares

echo "/shares /etc/auto.shares" > > /etc/auto.master

echo "projects -fstype=nfs,rw server1:/srv/nfs/projects" > /etc/auto.shares

systemctl enable --now autofs

ls /shares/projects

Detailed Explanation:

/etc/auto.master defines the main map.

/etc/auto.shares defines the indirect mount entry.

The mount happens on demand when /shares/projects is accessed.

RHEL 10 file-system documentation includes AutoFS for on-demand mounts. ( Red Hat Documentation )

Solution:

tar -zvcf /root/etc_backup.tar.gz /etc

file /root/etc_backup.tar.gz

Detailed Explanation:

tar creates the archive.

-z uses gzip compression.

-v is verbose.

-c creates the archive.

-f names the output file.

file confirms the resulting archive type.

Solution:

sed -i '/^pool /d;/^server /d' /etc/chrony.conf

echo "server time.example.com iburst" > > /etc/chrony.conf

systemctl enable --now chronyd

systemctl restart chronyd

chronyc sources -v

chronyc tracking

Detailed Explanation:

chronyd is the RHEL 10 NTP implementation.

iburst speeds up initial synchronization.

chronyc sources -v and chronyc tracking confirm the sync state.

Red Hat’s RHEL 10 time synchronization documentation uses chrony as the supported NTP implementation. ( Red Hat Documentation )

Solution:

mkdir -p /backup

tar -cvf /root/logs.tar /var/log

tar -xvf /root/logs.tar -C /backup

Detailed Explanation:

tar -cvf creates an uncompressed archive.

tar -xvf extracts the archive.

-C /backup tells tar where to extract the files.

This is a common RHCSA-style archive and restore task.

Solution:

dnf install -y tuned

systemctl enable --now tuned

tuned-adm recommend

tuned-adm profile virtual-guest

tuned-adm active

Detailed Explanation:

The lab text uses yum, but on RHEL 10 dnf is the preferred package manager command. RHEL 10 documentation focuses on DNF behavior and changes.

tuned-adm recommend shows the best-fit tuning profile.

tuned-adm profile virtual-guest activates the profile.

tuned-adm active confirms it.

Solution:

mkdir -p /root/d1

find /usr/local -type f -size +3k -size -5k -exec cp -rvf {} /root/d1/ \;

chmod g+s /root/d1

ls -ld /root/d1

Detailed Explanation:

-size +3k means greater than 3 KB.

-size -5k means less than 5 KB.

chmod g+s sets the SGID bit on the directory.

SGID on a directory causes new files created there to inherit the directory’s group.

Solution:

Read-only access:

setfacl -m u:john:r-- /share/dev

Read-write access:

setfacl -m u:john:rw- /share/dev

Remove ACL permissions:

setfacl -m u:john:--- /share/dev

Detailed Explanation:

setfacl -m modifies the ACL.

u:john:r-- grants read only.

u:john:rw- grants read and write.

u:john:--- effectively removes access for that ACL entry.

ACLs are used when standard owner/group/other permissions are not enough.

Solution:

dnf install -y dnf-automatic

systemctl enable --now dnf-automatic.timer

systemctl list-timers --all | grep dnf

Detailed Explanation:

dnf-automatic provides automated update checking and installation features.

The timer unit schedules the checks.

RHEL 10 DNF documentation specifically documents the dnf-automatic timer units. ( Red Hat Documentation )

Solution:

Create the swap partition:

fdisk /dev/sdb

partprobe /dev/sdb

Format it for swap:

mkswap /dev/sdb2

Enable it:

swapon /dev/sdb2

Persist it in /etc/fstab:

echo "/dev/sdb2 swap swap defaults 0 0" > > /etc/fstab

Verify:

swapon --show

Detailed Explanation:

mkswap prepares the partition as swap space.

swapon activates it immediately.

Adding an /etc/fstab entry ensures it survives reboot.

The lab uses a partition-based swap workflow.

Solution:

echo "john" > > /etc/cron.deny

Detailed Explanation:

cron.deny blocks listed users from using cron.

This is the simplest way to deny scheduled-job access for one user.

Solution:

dnf install -y httpd policycoreutils-python-utils

mkdir -p /webdata

echo "RHEL10 Web Server" > /webdata/index.html

sed -i 's/^Listen 80/Listen 8080/' /etc/httpd/conf/httpd.conf

semanage port -a -t http_port_t -p tcp 8080

firewall-cmd --permanent --add-port=8080/tcp

firewall-cmd --reload

systemctl enable --now httpd

systemctl restart httpd

ss -tulpn | grep 8080

Detailed Explanation:

Apache defaults to port 80, so Listen 8080 changes the service port.

SELinux must allow Apache to bind to 8080, which is done with semanage port.

firewall-cmd opens the port externally.

RHEL 10 documents firewalld as the standard firewall management interface and SELinux port labeling for confined services. ( Red Hat Documentation )

Solution:

Set the hostname:

hostnamectl set-hostname server1.example.com

Configure the existing connection with a static IP:

nmcli connection modify ens160 ipv4.address 192.168.1.2/24 ipv4.gateway 192.168.1.1 ipv4.dns 1.1.1.1 ipv4.method manual connection.autoconnect yes

Bring the connection up:

nmcli connection up ens160

Detailed Explanation:

hostnamectl is the correct modern command for changing the system hostname.

nmcli is the correct tool for RHEL 10 network configuration because the old ifcfg style is removed in RHEL 10, and NetworkManager keyfiles are the supported model.

ipv4.method manual tells NetworkManager to use static addressing.

connection.autoconnect yes ensures the profile activates automatically after reboot.

nmcli connection up ens160 applies the changes immediately.