EX200 Exam Dumps - RedHat RHCSA Questions and Answers

Solution:

Open the firewall port and HTTP service:

firewall-cmd --permanent --add-port=82/tcp

firewall-cmd --permanent --add-service=http

firewall-cmd --reload

Add SELinux port labeling:

semanage port -a -t http_port_t -p tcp 82

Detailed Explanation:

firewall-cmd --permanent makes the change persistent.

--add-port=82/tcp opens the custom TCP port.

--add-service=http keeps standard HTTP allowed too.

SELinux blocks services on unexpected ports unless the port is labeled correctly.

http_port_t tells SELinux that port 82 is valid for web services.

Solution:

dnf install -y tuned

systemctl enable --now tuned

tuned-adm recommend

tuned-adm profile virtual-guest

tuned-adm active

Detailed Explanation:

The lab text uses yum, but on RHEL 10 dnf is the preferred package manager command. RHEL 10 documentation focuses on DNF behavior and changes.

tuned-adm recommend shows the best-fit tuning profile.

tuned-adm profile virtual-guest activates the profile.

tuned-adm active confirms it.

Solution:

dnf install -y autofs

mkdir -p /shares

echo "/shares /etc/auto.shares" > > /etc/auto.master

echo "projects -fstype=nfs,rw server1:/srv/nfs/projects" > /etc/auto.shares

systemctl enable --now autofs

ls /shares/projects

Detailed Explanation:

/etc/auto.master defines the main map.

/etc/auto.shares defines the indirect mount entry.

The mount happens on demand when /shares/projects is accessed.

RHEL 10 file-system documentation includes AutoFS for on-demand mounts. ( Red Hat Documentation )

Solution:

sed -i '/^pool /d;/^server /d' /etc/chrony.conf

echo "server time.example.com iburst" > > /etc/chrony.conf

systemctl enable --now chronyd

systemctl restart chronyd

chronyc sources -v

chronyc tracking

Detailed Explanation:

chronyd is the RHEL 10 NTP implementation.

iburst speeds up initial synchronization.

chronyc sources -v and chronyc tracking confirm the sync state.

Red Hat’s RHEL 10 time synchronization documentation uses chrony as the supported NTP implementation. ( Red Hat Documentation )

Solution:

Create the script:

mkdir -p /usr/local/bin

cat > /usr/local/bin/backup-now.sh < < 'EOF'

#!/bin/bash

tar -czf /root/etc-$(date +%F).tar.gz /etc

EOF

chmod +x /usr/local/bin/backup-now.sh

Create the unit file:

cat > /etc/systemd/system/backup-now.service < < 'EOF'

[Unit]

Description=Run manual etc backup

[Service]

Type=oneshot

ExecStart=/usr/local/bin/backup-now.sh

[Install]

WantedBy=multi-user.target

EOF

Reload and test:

systemctl daemon-reload

systemctl start backup-now.service

systemctl status backup-now.service

Detailed Explanation:

Type=oneshot is correct for a task that runs and exits.

ExecStart points to the script.

systemctl daemon-reload is required after adding a new unit file.

RHEL 10 systemd documentation covers manual unit creation and management. ( Red Hat Documentation )

Solution:

mkdir -p /webdata

semanage fcontext -a -t httpd_sys_content_t "/webdata(/.*)?"

restorecon -Rv /webdata

ls -Zd /webdata

Detailed Explanation:

semanage fcontext defines a persistent SELinux file-context rule.

restorecon applies the correct labels to the directory and contents.

httpd_sys_content_t is the standard read-only content type for Apache.

RHEL 10 SELinux documentation covers persistent labeling with semanage and applying labels with restorecon. ( Red Hat Documentation )

Solution:

podman build -t myimage -f Containerfile .

loginctl enable-linger alex

cd ~/.config/systemd/user/

podman generate systemd --name mycontainer --files --new

systemctl --user daemon-reload

systemctl --user enable --now container-mycontainer.service

Detailed Explanation:

podman build creates the container image.

loginctl enable-linger alex allows user services to keep running without an active login session.

podman generate systemd creates a systemd unit file for the container.

systemctl --user manages the unit in the user session scope.

On newer Podman releases, behavior and defaults have changed in RHEL 10, but the lab’s workflow is still conceptually valid.

Solution:

stratis filesystem snapshot pool1 fs1 fs1-snap

stratis filesystem list

Detailed Explanation:

This creates a snapshot of the existing Stratis file system.

Snapshots are useful for rollback, backup, and testing operations.

Stratis features, including pool and file-system management, are part of RHEL 10 file-system administration. ( Red Hat Documentation )

Solution:

echo "john" > > /etc/cron.deny

Detailed Explanation:

cron.deny blocks listed users from using cron.

This is the simplest way to deny scheduled-job access for one user.

Solution:

Set the hostname:

hostnamectl set-hostname server1.example.com

Configure the existing connection with a static IP:

nmcli connection modify ens160 ipv4.address 192.168.1.2/24 ipv4.gateway 192.168.1.1 ipv4.dns 1.1.1.1 ipv4.method manual connection.autoconnect yes

Bring the connection up:

nmcli connection up ens160

Detailed Explanation:

hostnamectl is the correct modern command for changing the system hostname.

nmcli is the correct tool for RHEL 10 network configuration because the old ifcfg style is removed in RHEL 10, and NetworkManager keyfiles are the supported model.

ipv4.method manual tells NetworkManager to use static addressing.

connection.autoconnect yes ensures the profile activates automatically after reboot.

nmcli connection up ens160 applies the changes immediately.