Red Hat Certified Engineer Exam Questions
Before starting exam
#iptables -L
#iptables -F
#service iptables save
#service iptables restart
#chkconfig iptables on
1. Enable selinux as enforcing
# setup
firewall configuration - disabled
# getenforce
# lokkit --selinux=enforcing
init6
# cat /etc/sysconfig/system-config-firewall
# cat /etc/stsconfig/selinux
2. Enable IP forwarding on your virtual machine
Step-01:
Enable IP Forwarding permanently in your machine.
vi /etc/sysctl.conf (sysctl configure parameters at run level)
change line number 7
net.ipv4.ip_forward=1
:wq
Step-02:
sysctl -p
3. Configure FTP access on your system.
clients with in domain70.example.com should have anonymous FTP access to your machine.
clients outside domain70.example.com should Not have access to your FTP service.
Step-01:
#yum install vsftpd*
#service vsftpd restart
#yum install ftp
Step-02:
#ftp
user:annonymous
password: enter
Step-03:
#vi /etc/hosts.deny
vsftpd: ALL EXCEPT IP/mask
:wq!
Step-04:
#service vsftpd restart
#chkconfig vsftpd on
If login problem
remove anonymous user from below files
#vi /etc/vsftpd/vsftpd.conf
#vi /etc/vsftpd/ftpusers
#vi /etc/vsftpd/user_list
4. Set cron service such that it can’t be accessable by mike
Step-01:
#vi /etc/cron.deny
mike
:wq
Step-02:
#service crond restart
#chkconfig crond on
(to check - # grep mike /etc/passwd)
5. Configure ssh as follows
natasha has remote access to your machine from with in domain70.example.com.
client within my133t.org should not have access to ssh on your system
Step-01:
#vi /etc/hosts.allow
sshd: 172.24.70.0/255.255.255.0
:wq
Step-02:
#vi /etc/hosts.deny
sshd:172.24.70.0/255.255.0.0
:wq!
Step-03:
#service sshd restart
#chkconfig sshd on
#service iptables restart
#chkconfig iptables on
6. Export your /archive directory via NFS to the example.com domain only.
or
Export Your /common directory via NFS to the domain70.example.com domain only. (linux to linux directory sharing)
Step-01:
#vi /etc/exports
/common 172.24.70.0/255.255.255.0(rw,sync)
:wq
Step-02:
#service nfs restart
#exportfs
#chkconfig nfs on
7.Share the /common directory via SMB
Your SMB server must be a member of STAFF workgroup
the share’s name must common
The common share must be available to domain70.example.com clients only.
The common share must be browseable
natasha must have read access to the share authenticity with the password porstroll if necessary.
Step-01:
#yum install samba*
Step-02:
#vim /etc/samba/smb.conf
Go to 74th line
Workgroup=STAFF
Shift+G
copy last 7 lines using 7yy and p command
Remove ; from all lines and edit like
[common] ( sharename
comment=public_staff
path=common (path=
valid users=natasha ( add this line)
public=yes
browseable=yes
Writable=no ( yes change to no)
Printable=no
:wq
Step-03:
#service smb restart
Step-04:
#smbpasswd -a natasha
New smbpassword:postroll
Step-05:
#vim /etc/hosts.deny
smb: ALL EXCEPT IP/netmask
:wq!
Step-06:
#chcon -t samba_share_t /common (/common or share directory)
#ls -dZ /common
Step-07:
#service smb restart
#chkconfig smb on
Step-08:
#smbclient //ip/common -U natasha (#smbclient //ip/ -U natasha
* [[samba]]
8 Implement a web server for the site http://serverx.example.com/ then perform the following steps:
Download ftp://nstructor.example.com/pub/rhce/station.html
Rename the download file to index.html
Copy this index.html to Document root of your web server
Do Not Make any modifications to the content of index.html
Step-01:
#yum install httpd
#service httpd restart
Step-02
:
#cd /var/www/html
#wget ftp://instructor.example.com/pub/rhce/station.html
mv station.html index.html
Step-03:
#vi /etc/httpd/conf/httpd.conf
:set nu
990
remove * and add IP
Virtual host: ip:80
(ifconfig and take ip)
1003 rd line
copy 7 line 7 yy
remove # from all line
document root /var/www/html
server name serverx.example.com
:wq
Step-04:
#service httpd restart
#chkconfig httpd on
9. Extend the web server include
site http://wwwwX.example.com
Document root /var/www/virtual
Download ftp://instructor.example.com/pub/rhce/www.html and rename to index.html
ensure natasha is able to create content in /var/www/virtual provided by server1.domain70.example.com
Step-01:
#service httpd start
Step-02:
#cd /var/www/
#mkdir virtual
#cd virtual
#wget ftp......
#mv www.html index.html
Step-03:
#vi /etc/httpd/conf/httpd.conf
:set nu 1003
copy 7yy and P
remove # from all line
:80>
Document root /var/www/virtual
Servername wwwwX.example.com
:wq!
Step-04:
#service httpd restart
#chkconfig httpd on
Step-05:
#setfacl -m u:natasha:rwx /var/www/virtual
10. Create a directory limited on your document root
download ftp://instructor.example.com/pub/rhce/station.html
rename the downloaded file to index.html
copy this index.html file the limited directry
Make it such that the content of limit can be accessable to the local users only.
Step-01:
#cd /var/www/html
#mkdir /limited
#cd limited
Step-02:
#wget ftp://instructor.example.com/pub/rhce/station.html
#mv station.html index.html
Step-03:
#vi /etc/httpd/conf/httpd.conf
1003rd line before closing type the following
Step-04:
allow,deny
Allow from IP
:wq!
Step-05:
#service httpd restart
#chkconfig httpd on
11. Export your /archive directory via NFS to the example.com domain only.
Export Your /common directory via NFS to the domain70.example.com domain only.
(linux to linux directory sharing)
Step-01:
#vi /etc/exports
#/common 172.24.70.0/255.255.255.0(rw,sync)
:wq
Step-02:
#service nfs restart
#exportfs
#chkconfig nfs on
12. configure SMTP mail service according to the following requirements
Your mail server should accept mail from remote hosts mail delivered paula should spool into default mail spool for paula, /var/spool/paula
Step-01:
#Yum install postfix*
#chkconfig postfix on
#service postfix restart
Step-02:
#vi /etc/postfix/main.cf
#remove # from 113 th line
#place # on the 116th line
Step-03:
#service postfix restart
13. Configure an email alias for your MTA such that mail set to admin is received by the local user harry
Step-01:
#vi /etc/aliases
admin:harry
:wq
Step-02:
#newaliases
14.Using iscsi, discover and mount a device shared by host.domain70.example.com
create an iscsi storage device of 1100 MB size
Download ftp://server1.domain70.example.com/pub/iscsi.txt
and copy it to the iscsi device
Mount the device permanently under /mnt/data as ext4 file system
Step-01:
#iscsiadm -m discovery -t st -p hostname
copy the iqn number line
#iscsiadm -m node -p hostname
#iscsiadm -m node -p hostname -l
(if -p error - try with -P)
Step-02:
#fdisk -l
n
p
default
default +1100M
p
w
Step-03:
#partprobe -s /dev/sda (higher size than provided, then only we can create partition)
Step-04:
#mkfs.ext4 /dev/sda1
#mkdir /mnt/data
Step-05:
For Permanently Mount:
#vi /etc/fstab
/dev/sda1 /mnt/data ext4 default 0 0
:wq!
#mount -a
Step-06:
#cd /mnt/data
#wget ftp://server1.domain70.example.com/pub/iscsi.txt
15. Configure kernel such that kernstack value is 1 . kernel line should display the edited string in /proc/cmdline
Step-01:
#vi /etc/grub.conf
go to the end of kernel line ,after word quiet, put a space and type kernstack=1
:wq!
Step-02:
reboot
#cat /proc/cmdline
16. Write a script /root/bar.sh such that when we execute /root/bar.sh python it displays perl and when we execute /root/bar.sh perl displays python.
And when we type some other charactoer, /root/bar.sh Perl/Python is directed to stdeer
#vi /root/bar.sh
if [ "$a == "Python" ]
then
echo "Perl"
elif [ "$a == "Perl" ]
then
echo "Python'
else
echo "/root/bar.sh /Python/Perl" >> stdeer
if
:wq!
/root/bar.sh
Perl
chmod 755 /root/bar.sh
# /root/bar.sh
dgfdg
#vi /stdeer
Python/Perl
