최신 EX200 무료덤프 - RedHat Red Hat Certified System Administrator - RHCSA
The system ldap.example.com provides an LDAP authentication service.
Your system should bind to this service as follows:
The base DN for the authentication service is dc=domain11, dc=example, dc=com LDAP is used to provide both account information and authentication information. The connection should be encrypted using the certificate at http://host.domain11.example.com/pub/domain11.crt When properly configured, ldapuserX should be able to log into your system, but will not have a home directory until you have completed the autofs requirement. Username: ldapuser11 Password: password
Your system should bind to this service as follows:
The base DN for the authentication service is dc=domain11, dc=example, dc=com LDAP is used to provide both account information and authentication information. The connection should be encrypted using the certificate at http://host.domain11.example.com/pub/domain11.crt When properly configured, ldapuserX should be able to log into your system, but will not have a home directory until you have completed the autofs requirement. Username: ldapuser11 Password: password
정답:
system-config-authentication LDAP user DN=dc=domain11,dc=example,dc=com Server= host.domain11.example.com Certificate= http://host.domain11.example.com/pub/domain11.crt (enter url carefully, there maybe // or ..) LDAP password OK starting sssd su -ldapuser11 Display Bash prompt #exit
Configure the verification mode of your host account and the password as LDAP. And it can login successfully through ldapuser40. The password is set as "password". And the certificate can be downloaded from http://ip/dir/ldap.crt. After the user logs on the user has no host directory unless you configure the autofs in the following questions.
정답:
system-config-authentication
LDAP Server: ldap//instructor.example.com (In domain form, not write IP) OR
# yum groupinstall directory-client (1.krb5-workstation 2.pam-krb5 3.sssd)
# system-config-authentication
1.User Account Database: LDAP
2.LDAP Search Base DN: dc=example,dc=com
3.LDAP Server: ldap://instructor.example.com (In domain form, not write IP) 4.Download CA Certificate
5.Authentication Method: LDAP password
6.Apply
getent passwd ldapuser40
LDAP Server: ldap//instructor.example.com (In domain form, not write IP) OR
# yum groupinstall directory-client (1.krb5-workstation 2.pam-krb5 3.sssd)
# system-config-authentication
1.User Account Database: LDAP
2.LDAP Search Base DN: dc=example,dc=com
3.LDAP Server: ldap://instructor.example.com (In domain form, not write IP) 4.Download CA Certificate
5.Authentication Method: LDAP password
6.Apply
getent passwd ldapuser40
Configure the system synchronous as 172.24.40.10.
정답:
Graphical Interfaces:
System-->Administration-->Date & Time
OR
# system-config-date
System-->Administration-->Date & Time
OR
# system-config-date
Configure a task: plan to run echo "file" command at 14:23 every day.
정답:
(a) Created as administrator
# crontab -u natasha -e
23 14 * * * /bin/echo "file"
(b)Created as natasha
# su - natasha
$ crontab -e
23 14 * * * /bin/echo "file"
# crontab -u natasha -e
23 14 * * * /bin/echo "file"
(b)Created as natasha
# su - natasha
$ crontab -e
23 14 * * * /bin/echo "file"
Find Files
Find all files belonging to the user "jacques" and move them to the directory /root/findfiles under the root directory.
Find all files belonging to the user "jacques" and move them to the directory /root/findfiles under the root directory.
정답:
[root@node1 ~]# mkdir /root/findfiles
[root@node1 ~]# find / -user jacques
[root@node1 ~]# find / -user jacques -exec cp -a {} /root/findfiles \;
# Verification
[root@node1 ~]# ll /root/findfiles/
[root@node1 ~]# find / -user jacques
[root@node1 ~]# find / -user jacques -exec cp -a {} /root/findfiles \;
# Verification
[root@node1 ~]# ll /root/findfiles/
Install the Kernel Upgrade.
Install suitable kernel update from:
http://server.domain11.example.com/pub/updates.
Following requirements must be met:
Updated kernel used as the default kernel of system start-up.
The original kernel is still valid and can be guided when system starts up.
Install suitable kernel update from:
http://server.domain11.example.com/pub/updates.
Following requirements must be met:
Updated kernel used as the default kernel of system start-up.
The original kernel is still valid and can be guided when system starts up.
정답:
Using the browser open the URL in the question, download kernel file to root or home directory.
uname -r// check the current kernel version
rpm -ivh kernel-*.rpm
vi /boot/grub.conf// check
Some questions are: Install and upgrade the kernel as required. To ensure that grub2 is the default item for startup.
Yum repo : http://content.example.com/rhel7.0/x86-64/errata
OR
uname -r // check kernel
Yum-config-manager --add-repo="http://content.example.com/rhel7.0/x86-64/ errata" Yum clean all Yum list kernel// install directly Yum -y install kernel// stuck with it, do not pipe! Please do not pipe!
Default enable new kernel grub2-editenv list// check
Modify grub2-set-default "kernel full name"
Grub2-mkconfig -o/boot/grub2/grub.cfg// Refresh
uname -r// check the current kernel version
rpm -ivh kernel-*.rpm
vi /boot/grub.conf// check
Some questions are: Install and upgrade the kernel as required. To ensure that grub2 is the default item for startup.
Yum repo : http://content.example.com/rhel7.0/x86-64/errata
OR
uname -r // check kernel
Yum-config-manager --add-repo="http://content.example.com/rhel7.0/x86-64/ errata" Yum clean all Yum list kernel// install directly Yum -y install kernel// stuck with it, do not pipe! Please do not pipe!
Default enable new kernel grub2-editenv list// check
Modify grub2-set-default "kernel full name"
Grub2-mkconfig -o/boot/grub2/grub.cfg// Refresh
Part 2 (on Node2 Server)
Task 3 [Managing Logical Volumes]
Create a new volume group in the name of datavg and physical volume extent is 16 MB Create a new logical volume in the name of datalv with the size of 250 extents and file system must xfs Then the logical volume should be mounted automatically mounted under /data at system boot time
Task 3 [Managing Logical Volumes]
Create a new volume group in the name of datavg and physical volume extent is 16 MB Create a new logical volume in the name of datalv with the size of 250 extents and file system must xfs Then the logical volume should be mounted automatically mounted under /data at system boot time
정답:
* [root@node2 ~]# lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
vdb 252:16 0 5G 0 disk
└─vdb1 252:17 0 4.2G 0 part
└─vgrz-lvrz 253:2 0 4.1G 0 lvm /datarz
vdc 252:32 0 5G 0 disk
vdd 252:48 0 5G 0 disk
vde 252:64 0 10G 0 disk
[root@node2 ~]# parted /dev/vdc mklabel msdos
[root@node2 ~]# parted /dev/vdc mkpart primary 1MiB 4200MiB
[root@node2 ~]# parted /dev/vdc set 1 lvm on
* [root@node2 ~]# udevadm settle
[root@node2 ~]# pvcreate /dev/vdc1
Physical volume "/dev/vdc1" successfully created.
[root@node2 ~]# vgcreate -s 16M datavg /dev/vdc1
Volume group "datavg" successfully created
[root@node2 ~]# lvcreate -n datalv -L 4000M datavg
Logical volume "datalv" created.
[root@node2 ~]# mkfs.xfs /dev/datavg/datalv
[root@node2 ~]# mkdir /data
[root@node2 ~]# blkid
/dev/mapper/datavg-datalv: UUID="7397a292-d67d-4632-941e-382e2bd922ce" BLOCK_SIZE="512" TYPE="xfs"
* [root@node2 ~]# vim /etc/fstab
UUID=7397a292-d67d-4632-941e-382e2bd922ce /data xfs defaults 0 0
[root@node2 ~]# mount UUID=7397a292-d67d-4632-941e-382e2bd922ce /data
[root@node2 ~]# reboot
[root@node2 ~]# df -hT
Filesystem Type Size Used Avail Use% Mounted on
/dev/mapper/datavg-datalv xfs 3.9G 61M 3.9G 2% /data
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
vdb 252:16 0 5G 0 disk
└─vdb1 252:17 0 4.2G 0 part
└─vgrz-lvrz 253:2 0 4.1G 0 lvm /datarz
vdc 252:32 0 5G 0 disk
vdd 252:48 0 5G 0 disk
vde 252:64 0 10G 0 disk
[root@node2 ~]# parted /dev/vdc mklabel msdos
[root@node2 ~]# parted /dev/vdc mkpart primary 1MiB 4200MiB
[root@node2 ~]# parted /dev/vdc set 1 lvm on
* [root@node2 ~]# udevadm settle
[root@node2 ~]# pvcreate /dev/vdc1
Physical volume "/dev/vdc1" successfully created.
[root@node2 ~]# vgcreate -s 16M datavg /dev/vdc1
Volume group "datavg" successfully created
[root@node2 ~]# lvcreate -n datalv -L 4000M datavg
Logical volume "datalv" created.
[root@node2 ~]# mkfs.xfs /dev/datavg/datalv
[root@node2 ~]# mkdir /data
[root@node2 ~]# blkid
/dev/mapper/datavg-datalv: UUID="7397a292-d67d-4632-941e-382e2bd922ce" BLOCK_SIZE="512" TYPE="xfs"
* [root@node2 ~]# vim /etc/fstab
UUID=7397a292-d67d-4632-941e-382e2bd922ce /data xfs defaults 0 0
[root@node2 ~]# mount UUID=7397a292-d67d-4632-941e-382e2bd922ce /data
[root@node2 ~]# reboot
[root@node2 ~]# df -hT
Filesystem Type Size Used Avail Use% Mounted on
/dev/mapper/datavg-datalv xfs 3.9G 61M 3.9G 2% /data
Please open the ip_forward, and take effect permanently.
정답:
vim /etc/sysctl.conf net.ipv4.ip_forward = 1
sysctl -w (takes effect immediately)
If no "sysctl.conf" option, use these commands:
sysctl -a |grep net.ipv4
sysctl -P net.ipv4.ip_forward = 1
sysctl -w
sysctl -w (takes effect immediately)
If no "sysctl.conf" option, use these commands:
sysctl -a |grep net.ipv4
sysctl -P net.ipv4.ip_forward = 1
sysctl -w
System Optimization Configuration
Choose the recommended tuned configuration set for your system and set it as default.
Choose the recommended tuned configuration set for your system and set it as default.
정답:
# Install and enable tuned
[root@node2 ~]# yum -y install tuned
[root@node2 ~]# systemctl enable tuned
[root@node2 ~]# systemctl restart tuned
# Check the recommended configuration scheme for the system
[root@node2 ~]# tuned-adm recommend
virtual-guest
# Switch to the specified configuration scheme
[root@node2 ~]# tuned-adm profile virtual-guest
# Check the current configuration scheme
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
[root@node2 ~]# yum -y install tuned
[root@node2 ~]# systemctl enable tuned
[root@node2 ~]# systemctl restart tuned
# Check the recommended configuration scheme for the system
[root@node2 ~]# tuned-adm recommend
virtual-guest
# Switch to the specified configuration scheme
[root@node2 ~]# tuned-adm profile virtual-guest
# Check the current configuration scheme
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
Copy /etc/fstab to /var/tmp name admin, the user1 could read, write and modify it, while user2 without any permission.
정답:
# cp /etc/fstab /var/tmp/
# chgrp admin /var/tmp/fstab
# setfacl -m u:user1:rwx /var/tmp/fstab
# setfacl -m u:user2:--- /var/tmp/fstab
# ls -l
-rw-rw-r--+ 1 root admin 685 Nov 10 15:29 /var/tmp/fstab
# chgrp admin /var/tmp/fstab
# setfacl -m u:user1:rwx /var/tmp/fstab
# setfacl -m u:user2:--- /var/tmp/fstab
# ls -l
-rw-rw-r--+ 1 root admin 685 Nov 10 15:29 /var/tmp/fstab