rhce

Red Hat Certified Engineer Exam Questions

Before starting exam

#iptables -L
#iptables -F
#service iptables save
#service iptables restart
#chkconfig iptables on

1. Enable selinux as enforcing

# setup
firewall configuration - disabled
# getenforce
# lokkit --selinux=enforcing
init6
# cat /etc/sysconfig/system-config-firewall
# cat /etc/stsconfig/selinux

2. Enable IP forwarding on your virtual machine

Step-01:

Enable IP Forwarding permanently in your machine.
vi /etc/sysctl.conf            (sysctl configure parameters at run level)
change line number 7
net.ipv4.ip_forward=1
:wq

Step-02:

sysctl -p  

3. Configure FTP access on your system.

clients with in domain70.example.com should have anonymous FTP access to your machine.
clients outside domain70.example.com should Not have access to your FTP service.

Step-01:

#yum install vsftpd*
#service vsftpd restart
#yum install ftp

Step-02:

#ftp 
user:annonymous
password: enter

Step-03:

#vi /etc/hosts.deny
vsftpd: ALL EXCEPT IP/mask
:wq!

Step-04:

#service vsftpd restart
#chkconfig vsftpd on

If login problem

remove anonymous user from below files

#vi /etc/vsftpd/vsftpd.conf
#vi /etc/vsftpd/ftpusers
#vi /etc/vsftpd/user_list

4. Set cron service such that it can’t be accessable by mike

Step-01:

#vi /etc/cron.deny
mike
:wq

Step-02:

#service crond restart
#chkconfig crond on
(to check - # grep mike /etc/passwd)

5. Configure ssh as follows

natasha has remote access to your machine from with in domain70.example.com.
client within my133t.org should not have access to ssh on your system

Step-01:

#vi /etc/hosts.allow
sshd: 172.24.70.0/255.255.255.0
:wq
Step-02:

#vi /etc/hosts.deny
sshd:172.24.70.0/255.255.0.0
:wq!

Step-03:

#service sshd restart
#chkconfig sshd on
#service iptables restart
#chkconfig iptables on

6. Export your /archive directory via NFS to the example.com domain only.

or

Export Your /common directory via NFS to the domain70.example.com domain only. (linux to linux directory sharing)

Step-01:

#vi /etc/exports
/common 172.24.70.0/255.255.255.0(rw,sync)
:wq

Step-02:

#service nfs restart
#exportfs
#chkconfig nfs on

7.Share the /common directory via SMB
Your SMB server must be a member of STAFF workgroup
the share’s name must common
The common share must be available to domain70.example.com clients only.
The common share must be browseable
natasha must have read access to the share authenticity with the password porstroll if necessary.

Step-01:

#yum install samba*

Step-02:

#vim /etc/samba/smb.conf
Go to 74th line
Workgroup=STAFF
Shift+G
copy last 7 lines using 7yy and p command
Remove ; from all lines and edit like

[common]  ( sharename
comment=public_staff
path=common         (path=
valid users=natasha ( add this line)
public=yes
browseable=yes 
Writable=no ( yes change to no)
Printable=no
:wq

Step-03:

#service smb restart

Step-04:

#smbpasswd -a natasha
New smbpassword:postroll

Step-05:

#vim /etc/hosts.deny
smb: ALL EXCEPT IP/netmask 
:wq!

Step-06:

#chcon -t samba_share_t /common        (/common or share directory)
#ls -dZ /common

Step-07:

#service smb restart
#chkconfig smb on

Step-08:

#smbclient //ip/common -U natasha  (#smbclient //ip/ -U natasha

* [[samba]]

8 Implement a web server for the site http://serverx.example.com/ then perform the following steps:
Download ftp://nstructor.example.com/pub/rhce/station.html
Rename the download file to index.html
Copy this index.html to Document root of your web server
Do Not Make any modifications to the content of index.html

Step-01:

#yum install httpd
#service httpd restart

Step-02
:
#cd /var/www/html
#wget ftp://instructor.example.com/pub/rhce/station.html
mv station.html index.html

Step-03:

#vi /etc/httpd/conf/httpd.conf
:set nu
990
remove * and add IP
Virtual host: ip:80
(ifconfig and take ip)
1003 rd line
copy 7 line 7 yy
remove # from all line

document root  /var/www/html
server name serverx.example.com

:wq

Step-04:
#service httpd restart
#chkconfig httpd on

9. Extend the web server include
site http://wwwwX.example.com
Document root /var/www/virtual
Download ftp://instructor.example.com/pub/rhce/www.html and rename to index.html
ensure natasha is able to create content in /var/www/virtual provided by server1.domain70.example.com

Step-01:

#service httpd start

Step-02:

#cd /var/www/
#mkdir virtual
#cd virtual
#wget ftp......
#mv www.html index.html

Step-03:

#vi /etc/httpd/conf/httpd.conf
:set nu 1003
copy 7yy and P

remove # from all line

:80>
Document root /var/www/virtual
Servername wwwwX.example.com
:wq!

Step-04:

#service httpd restart
#chkconfig httpd on

Step-05:

#setfacl -m u:natasha:rwx /var/www/virtual

10. Create a directory limited on your document root
download ftp://instructor.example.com/pub/rhce/station.html
rename the downloaded file to index.html
copy this index.html file the limited directry
Make it such that the content of limit can be accessable to the local users only.

Step-01:

#cd /var/www/html
#mkdir /limited
#cd limited

Step-02:

#wget ftp://instructor.example.com/pub/rhce/station.html
#mv station.html index.html

Step-03:

#vi /etc/httpd/conf/httpd.conf
1003rd line before closing  type the following

Step-04:


allow,deny
Allow from IP

:wq!

Step-05:

#service httpd restart
#chkconfig httpd on

11. Export your /archive directory via NFS to the example.com domain only.

Export Your /common directory via NFS to the domain70.example.com domain only.
(linux to linux directory sharing)

Step-01:

#vi /etc/exports
#/common 172.24.70.0/255.255.255.0(rw,sync)
:wq

Step-02:

#service nfs restart
#exportfs
#chkconfig nfs on

12. configure SMTP mail service according to the following requirements

Your mail server should accept mail from remote hosts mail delivered paula should spool into default mail spool for paula, /var/spool/paula

Step-01:
#Yum install postfix*
#chkconfig postfix on
#service postfix restart

Step-02:

#vi /etc/postfix/main.cf
#remove # from 113 th line
#place # on the 116th line

Step-03:

#service postfix restart

13. Configure an email alias for your MTA such that mail set to admin is received by the local user harry

Step-01:

#vi /etc/aliases
admin:harry
:wq

Step-02:

#newaliases

14.Using iscsi, discover and mount a device shared by host.domain70.example.com
create an iscsi storage device of 1100 MB size
Download ftp://server1.domain70.example.com/pub/iscsi.txt
and copy it to the iscsi device
Mount the device permanently under /mnt/data as ext4 file system

Step-01:

#iscsiadm -m discovery -t st -p hostname
copy the iqn number line
#iscsiadm -m node  -p hostname
#iscsiadm -m node  -p hostname -l
(if -p error - try with -P)

Step-02:

#fdisk -l
n
p
default
default +1100M
p
w

Step-03:

#partprobe -s /dev/sda                (higher size than  provided, then only we can create partition)

Step-04:

#mkfs.ext4 /dev/sda1
#mkdir /mnt/data

Step-05:

For Permanently Mount:

#vi /etc/fstab
/dev/sda1 /mnt/data ext4 default 0 0
:wq!
#mount -a

Step-06:

#cd /mnt/data
#wget ftp://server1.domain70.example.com/pub/iscsi.txt

15. Configure kernel such that kernstack value is 1 . kernel line should display the edited string in /proc/cmdline

Step-01:

#vi /etc/grub.conf
go to the end of kernel line ,after word quiet, put a space and type kernstack=1
:wq!

Step-02:

reboot
#cat /proc/cmdline

16. Write a script /root/bar.sh such that when we execute /root/bar.sh python it displays perl and when we execute /root/bar.sh perl displays python.
And when we type some other charactoer, /root/bar.sh Perl/Python is directed to stdeer

#vi /root/bar.sh

if [ "$a == "Python" ]
then
echo "Perl"
elif [ "$a == "Perl" ]
then
echo "Python'
else
echo "/root/bar.sh /Python/Perl" >> stdeer
if
:wq!
/root/bar.sh
Perl

chmod 755 /root/bar.sh
# /root/bar.sh
dgfdg
#vi /stdeer
Python/Perl