RHCSA II- Questions and Answers 100%
Pass
Set the appropriate SELinux Boolean setting on serverb, so that production5 can log in to
serverb using the SSH public key-based authentication and use the home directory Correct
Ans-on server b as root:
1. setsebool -P use_nfs_home-dirs true
2. ssh -o pubkeyauthentication=yes -o passwordauthentication=no production5@serverb
On serverb, adjust the firewall settings so that SSH connections originating from servera are
rejected. The servera system uses the IPv4 address 172.25.250.10 Correct Ans-1. firewall-
cmd --add-source=172.25.250.10/32 --zone=block --permanent
2. firewall-cmd --reload
On serverb, investigate and fix the issue with the Apache HTTPD daemon, which is configured to
listen on port 30080/TCP, bit which fails to start. Adjust the firewall settings appropriately so
that port 30080/TCP is open for incoming connections. Correct Ans-1. systemctl status
httpd.service
2. sealert -a /var/log/audit/audit.log
3. semanage port -a -t http_port_t -p tcp 30080
4. systemctl restart httpd
5. firewall-cmd --add-port=30080/tcp --permanent
6. firewall-cmd --reload
, On serverb create the /srv/web directory, and then extract the /home/containers/rhcsa-
compreview4/web-content.tgz archive in that directory. Configure the directory so that a
rootless container can use it for persistent storage. Correct Ans-As root on serverb:
1. mkdir /srv/web/
2. cd /srv/web/
4. tar xvf /home/containers/rhcsa-compreview4/web-content.tgz
5. chown -R containers: /srv/web
On serverb install the container tools Correct Ans-1. yum module install container-tools
On serverb, as the containers user, create a detached container named web. Use the
rhel8/httpd-24 image with the tag 1-105 from the registry.lab.example registry. Map port 8080
in the container to port 8888 on the host. Mount the /srv/web directory on the host as
/var/www in the container. Declare the environment variable HTTPD_MPM with a value of
event Correct Ans-1. podman login registry.lab.example.com
2. podman run-d --name web -p 8888:8080 -v /srv/web:/var/www:Z -e HTTPD_MPM=event
registry.lab.example.com/rhel8/httpd-24:1-105
3. curl http://localhost:8888/
On serverb, as the containers user, configure systemsd so that the web container starts
automatically with the server Correct Ans-1. mkdir -p ~/.config/systemd/user/
2. cd ~/.config/systemd/user/
Pass
Set the appropriate SELinux Boolean setting on serverb, so that production5 can log in to
serverb using the SSH public key-based authentication and use the home directory Correct
Ans-on server b as root:
1. setsebool -P use_nfs_home-dirs true
2. ssh -o pubkeyauthentication=yes -o passwordauthentication=no production5@serverb
On serverb, adjust the firewall settings so that SSH connections originating from servera are
rejected. The servera system uses the IPv4 address 172.25.250.10 Correct Ans-1. firewall-
cmd --add-source=172.25.250.10/32 --zone=block --permanent
2. firewall-cmd --reload
On serverb, investigate and fix the issue with the Apache HTTPD daemon, which is configured to
listen on port 30080/TCP, bit which fails to start. Adjust the firewall settings appropriately so
that port 30080/TCP is open for incoming connections. Correct Ans-1. systemctl status
httpd.service
2. sealert -a /var/log/audit/audit.log
3. semanage port -a -t http_port_t -p tcp 30080
4. systemctl restart httpd
5. firewall-cmd --add-port=30080/tcp --permanent
6. firewall-cmd --reload
, On serverb create the /srv/web directory, and then extract the /home/containers/rhcsa-
compreview4/web-content.tgz archive in that directory. Configure the directory so that a
rootless container can use it for persistent storage. Correct Ans-As root on serverb:
1. mkdir /srv/web/
2. cd /srv/web/
4. tar xvf /home/containers/rhcsa-compreview4/web-content.tgz
5. chown -R containers: /srv/web
On serverb install the container tools Correct Ans-1. yum module install container-tools
On serverb, as the containers user, create a detached container named web. Use the
rhel8/httpd-24 image with the tag 1-105 from the registry.lab.example registry. Map port 8080
in the container to port 8888 on the host. Mount the /srv/web directory on the host as
/var/www in the container. Declare the environment variable HTTPD_MPM with a value of
event Correct Ans-1. podman login registry.lab.example.com
2. podman run-d --name web -p 8888:8080 -v /srv/web:/var/www:Z -e HTTPD_MPM=event
registry.lab.example.com/rhel8/httpd-24:1-105
3. curl http://localhost:8888/
On serverb, as the containers user, configure systemsd so that the web container starts
automatically with the server Correct Ans-1. mkdir -p ~/.config/systemd/user/
2. cd ~/.config/systemd/user/
