EX200 Red Hat Certified System Administrator (RHCSA) Free Practice Test — 30 Questions

Question 1

Anya, a system administrator for a small startup running Red Hat Enterprise Linux, is tasked with managing user access. The company\'s product roadmap has just undergone a significant pivot, requiring several temporary development team members to have elevated access to specific project directories for a critical, short-term phase. Simultaneously, the company has announced a temporary hiring freeze, meaning Anya has fewer resources to dedicate to complex scripting or custom policy development for this period. She needs to ensure that these temporary users have the necessary permissions while maintaining overall system security and minimizing the risk of unauthorized access once their task is complete.

Which of the following strategies best reflects Anya\'s need to adapt to changing priorities and resource limitations while ensuring effective and secure user access management in this dynamic environment?

Accepted Answer

Temporarily modify group memberships for the affected users to include access to the required project directories, and then revert these changes once the project phase is completed, utilizing `sudo` for specific, limited administrative tasks where direct group membership is not feasible or overly broad.

Question 2

During a critical system update rollout for a distributed client base, a junior system administrator, Kai, working remotely, reports being \"stuck\" on configuring a specific firewall rule set for a newly deployed cluster of Red Hat Enterprise Linux servers. The deadline for this phase of the rollout is rapidly approaching, and the client has expressed concerns about potential service interruptions. As the lead administrator, how would you best address Kai\'s situation to ensure both the successful completion of the task and Kai\'s continued professional development?

Accepted Answer

Request Kai to provide a detailed outline of the steps taken so far, identify the specific point of confusion, and offer to walk through the relevant sections of the official Red Hat documentation together, highlighting key parameters and expected outcomes.

Question 3

Anya, a system administrator for a growing web services company, is tasked with deploying and managing an increasing number of virtual machines on a Red Hat Enterprise Linux host. She needs to ensure that each virtual machine receives a guaranteed allocation of CPU cores and RAM, preventing any single VM from monopolizing system resources and impacting the performance of others. Anya is reviewing the fundamental configuration mechanisms available within the KVM/libvirt ecosystem to achieve this precise resource control. Which method is the most direct and standard approach for defining and enforcing these resource boundaries for a virtual machine on RHEL?

Accepted Answer

Modifying the virtual machine's domain XML configuration to specify CPU and memory limits and then applying these changes via `virsh`.

Question 4

Anya, a system administrator on a Red Hat Enterprise Linux environment, is tasked with managing critical production servers while simultaneously being expected to adopt a new container orchestration platform and contribute to a cross-functional team\'s adoption of Infrastructure as Code (IaC) principles. Her manager has indicated that priorities may shift weekly based on project velocity and client feedback. Anya finds herself needing to rapidly acquire new technical skills for the container platform and navigate potential disagreements within the IaC team regarding implementation strategies. Which primary behavioral competency should Anya focus on to successfully navigate this dynamic and demanding professional landscape?

Accepted Answer

Adaptability and Flexibility

Question 5

A system administrator is tasked with troubleshooting why a critical web application is intermittently failing to load its configuration files, despite correct file ownership and standard read permissions for the web server user. Upon investigation, it\'s discovered that a recent batch of configuration files was inadvertently moved from a user\'s home directory into the web server\'s configuration directory using a command that did not preserve SELinux contexts. The application logs indicate \"Permission denied\" errors specifically related to SELinux enforcement. Which of the following actions is the most appropriate and efficient method to rectify the SELinux context issue and restore proper application functionality, assuming the system\'s SELinux policy correctly defines the intended context for these files within the web server\'s configuration path?

Accepted Answer

Execute `restorecon -Rv /etc/httpd/conf.d/` to recursively reset SELinux contexts for all files within the web server's configuration directory.

Question 6

Anya, a seasoned system administrator managing a critical production environment, is tasked with resolving an ongoing issue where the primary web server exhibits sporadic periods of extreme sluggishness, rendering it unresponsive to user requests for several minutes at a time before self-correcting. Initial review of the web server\'s error logs and system journal entries reveals no definitive patterns or critical failures logged during these unresponsiveness events. Considering the intermittent nature of the problem and the absence of clear error messages, what is the most logical and effective next diagnostic step to pinpoint the underlying cause?

Accepted Answer

Implement continuous monitoring of key system resource utilization metrics, such as CPU load, memory consumption, disk I/O activity, and network traffic, using tools like `sar` or `top` to capture data during potential unresponsiveness periods.

Question 7

A team of software developers requires a centralized, secure directory on a Red Hat Enterprise Linux system for collaborative project work. This directory, located at `/srv/projects/alpha`, must allow all members of a designated \'developers\' group to read, write, and traverse into the directory. Furthermore, any new files or subdirectories created within `/srv/projects/alpha` should automatically inherit the \'developers\' group ownership to maintain consistent access control. Users not belonging to the \'developers\' group must be completely denied access to this directory. Which of the following command sequences correctly establishes these permissions and ownership, ensuring efficient and secure collaboration?

Accepted Answer

`groupadd developers && useradd -G developers devuser1 && mkdir /srv/projects/alpha && chown :developers /srv/projects/alpha && chmod 2770 /srv/projects/alpha`

Question 8

Given the intermittent network connectivity issues encountered by `my-custom-app.service` due to its `Wants=network-online.target` and `After=network-online.target` configuration, which modification to the service unit file would most effectively guarantee that the application starts only when the network stack is fully initialized and operational?

Accepted Answer

Replace `Wants=network-online.target` with `Requires=NetworkManager.service` and retain `After=network-online.target`.

Question 9

Anya, a system administrator for a critical financial services platform, receives an urgent alert indicating a complete service outage for the primary transaction processing daemon. Simultaneously, her manager informs her that a scheduled network maintenance window has been unexpectedly brought forward by two hours due to a security vulnerability discovered in the upstream router. Anya has limited details about the root cause of the service outage and is unsure if it is related to the impending network changes. She must restore service as quickly as possible while also preparing for the network maintenance. Which behavioral competency is Anya primarily demonstrating through her actions in this situation?

Accepted Answer

Adaptability and Flexibility

Question 10

An urgent alert indicates that a critical network service, vital for inter-departmental communication and resource access across the organization, has ceased functioning. Several users are reporting an inability to connect to essential internal applications. As the system administrator responsible for maintaining system availability and performance, what is the most prudent and effective initial step to diagnose and resolve this widespread service disruption?

Accepted Answer

Examine system logs for error messages and service status indicators to identify the root cause of the failure.

Question 11

A web server administrator is configuring a new application that requires the web server process, running as the `www-data` user, to be able to serve static content from `/var/www/html/uploads`, while a separate application user, `appuser`, must be able to write files into this directory for data processing. To ensure proper security and functionality, what is the most appropriate `chown` command to adjust the ownership of the `/var/www/html/uploads` directory to meet these requirements, assuming `appuser` will be added to the `www-data` group?

Accepted Answer

chown www-data:www-data /var/www/html/uploads

Question 12

Anya, a system administrator, is tasked with deploying a new web service on a Red Hat Enterprise Linux system. The service requires a dedicated, unprivileged user account for execution and must store its sensitive data in a directory that is completely inaccessible to all other users, including the root user. The service will listen on port 8080. Which combination of actions best ensures the secure and isolated operation of this web service according to standard Linux security practices?

Accepted Answer

Create a dedicated user and group for the service, set the application data directory ownership to this user and group with 700 permissions, and ensure the service process runs as this dedicated user.

Question 13

Anya, a seasoned system administrator on a Red Hat Enterprise Linux environment, is onboarding Kai, a new developer. Kai requires collaborative access to the `/srv/projects/new_app` directory, meaning he and his colleagues in the `developers` group must be able to create, modify, and execute files within this directory. Simultaneously, Anya must ensure Kai cannot access the sensitive `/etc/ssh/sshd_config` file. Considering the principle of least privilege and common collaborative directory structures, what is the most appropriate octal permission setting for the `/srv/projects/new_app` directory to facilitate this collaborative workflow while maintaining a baseline security posture for the rest of the system?

Accepted Answer

775

Question 14

Anya, a system administrator on a Red Hat Enterprise Linux system, is tasked with configuring access for a development team named `devteam`. This team requires the ability to read and write files within the `/srv/app/data` directory and all its subdirectories and nested contents. Additionally, they must be able to navigate into these directories. However, access for any other users to this specific data path must be strictly prohibited. Which command sequence most effectively and securely accomplishes this objective, assuming the `devteam` group already exists and the developers are members?

Accepted Answer

chmod -R g+rwX /srv/app/data

Question 15

Anya, a seasoned system administrator for a high-traffic e-commerce platform, is alerted to a sudden and significant degradation in web server responsiveness. Users are reporting slow load times and intermittent connection failures. Anya\'s initial diagnostics indicate no overt hardware failures or kernel panics. Resource utilization metrics (CPU, RAM, disk I/O) appear within acceptable ranges during periods of normal operation, but she observes sharp, transient increases in network latency that coincide with the reported performance issues. The problem seems to stem from an application update deployed earlier that day, which is suspected of inefficiently managing client connections. Considering the critical nature of the service and the need to minimize downtime, what is the most prudent course of action to stabilize the environment while a permanent solution is developed?

Accepted Answer

Temporarily adjust kernel network parameters such as `net.core.somaxconn` and `net.ipv4.tcp_fin_timeout` to accommodate the increased connection activity, followed by a phased rollback of the recent application update and collaboration with developers for a corrected version.

Question 16

Anya, a system administrator for a growing technology firm, is responsible for managing user access on their Red Hat Enterprise Linux servers. She needs to configure access for a new development team, designated as the \'devteam\' group. The team requires the ability to execute a proprietary application located at `/usr/local/bin/app_manager`. Concurrently, Anya must ensure that no member of the \'devteam\' can modify any files or subdirectories within the `/opt/critical_data` directory, which contains sensitive configuration settings. Furthermore, all users not explicitly part of the \'devteam\' group must be prevented from executing the `app_manager` binary. Which combination of standard file permissions and Access Control Lists (ACLs) would most effectively satisfy these requirements?

Accepted Answer

Set execute permission for the `devteam` group on `/usr/local/bin/app_manager` using `chmod g+x`, remove execute permission for others using `chmod o-x`, and apply an ACL to `/opt/critical_data` denying write access to the `devteam` group using `setfacl -m g:devteam:-w /opt/critical_data`.

Question 17

Administrator Kaito is tasked with optimizing the performance of a long-running data aggregation service on a Red Hat Enterprise Linux system. This service, crucial for daily reporting, is frequently being preempted by interactive user sessions, leading to extended processing times and missed deadlines. Kaito needs to ensure the service receives a more favorable CPU allocation without completely preventing other users from interacting with the system. Which command, when applied to the service\'s process ID, would most effectively address this situation by increasing its scheduling priority?

Accepted Answer

renice -n -10 -p

Question 18

Imagine a collaborative development environment where a shared directory, `/opt/codebase`, needs to allow multiple developers, all members of the `devteam` group, to create and modify files seamlessly. The directory is initially owned by `project_manager:devteam`. To facilitate this, the `setgid` bit is applied to `/opt/codebase`. If `developer_x`, whose primary group is `users` but is also a member of the `devteam` group, creates a new file named `main.py` within `/opt/codebase`, what will be the group ownership of `main.py` and what is the primary implication for other members of the `devteam` group trying to access it?

Accepted Answer

The file `main.py` will be owned by the group `devteam`, allowing all members of the `devteam` group to read, write, and execute it, assuming appropriate file permissions are set.

Question 19

An administrator has deployed a new custom application on a Red Hat Enterprise Linux system, configured as a systemd service unit named `my-custom-app.service`. Upon initial boot, the service fails to start automatically, and a check reveals it is not currently active. What sequence of commands would most efficiently ensure the service is operational immediately and configured to launch automatically on all subsequent system startups?

Accepted Answer

Execute `systemctl start my-custom-app.service` followed by `systemctl enable my-custom-app.service`

Question 20

Anya, a system administrator for a high-traffic e-commerce platform, discovers that the primary TLS certificate for their main web server will expire in 90 days. The certificate is crucial for secure customer transactions and overall site integrity. Considering the potential for service disruption and the need for meticulous operational management, what proactive strategy would best ensure continuous availability and security?

Accepted Answer

Initiate the certificate renewal process immediately, obtain the new certificate, and schedule its installation for the day before the current certificate expires, while also documenting the entire procedure for future reference.

Question 21

Consider a system configured with systemd where three services, Alpha, Beta, and Gamma, have the following dependencies defined in their respective unit files:

*   **Service Alpha:** `Requires=network-online.target` and `After=network-online.target`
*   **Service Beta:** `Wants=network-online.target` and `After=network-online.target`
*   **Service Gamma:** `Requires=Service Alpha` and `After=Service Alpha`

If the `network-online.target` fails to become active during the boot process, what is the most probable state of Services Alpha, Beta, and Gamma after the system attempts to start all enabled services?

Accepted Answer

Service Alpha will fail to start, Service Beta may start but is unlikely to function correctly, and Service Gamma will fail to start.

Question 22

A Red Hat Enterprise Linux system administrator is managing a critical web service deployed across multiple nodes. A scheduled kernel update necessitates a reboot of each node. To minimize user impact and ensure continuous service availability, the administrator opts for a phased deployment. During the update of the second node, an unexpected kernel panic occurs, rendering the node unresponsive. The primary objective is to immediately restore the service to its pre-update state with minimal interruption. What immediate action should the administrator take to achieve this objective?

Accepted Answer

Initiate a rollback to the previous kernel version on the affected node, re-enable it in the load balancer, and then reassess the update strategy for subsequent nodes.

Question 23

Kaelen, a system administrator managing a critical financial transaction processing service on Red Hat Enterprise Linux, has been tasked with migrating this service to a new, more robust server cluster. The absolute priority is to minimize service interruption to the company\'s clients, who rely on the service 24/7. Kaelen must ensure that all transaction data is accurately transferred and that a rapid rollback capability is in place should any unforeseen issues arise during the transition. Which deployment and transition strategy would best meet these stringent requirements for minimal downtime and data integrity?

Accepted Answer

Establish the new server environment, replicate the existing service's data using a robust synchronization tool to the new cluster, and then perform a swift cutover by updating DNS records to point to the new IP addresses, ensuring a quick rollback by reverting DNS changes if necessary.

Question 24

Anya, a system administrator managing a vital customer-facing service on a Red Hat Enterprise Linux system, is tasked with relocating the application\'s data directory to a new, faster storage volume. The application\'s configuration files reference the old data path, and several systemd services are dependent on its availability. Anya must execute this migration with minimal service interruption and ensure the application remains fully functional post-relocation. What strategic approach best balances immediate operational needs with long-term system maintainability and resilience in this scenario?

Accepted Answer

Perform a live data migration using `rsync` with the `--inplace` option, followed by updating the application's configuration files and restarting the relevant systemd services, while monitoring for errors.

Question 25

Anya, a seasoned system administrator for a high-availability e-commerce platform, is alerted to a severe performance degradation affecting the primary customer-facing web server. Initial monitoring indicates an unprecedented spike in inbound network connections, overwhelming the server\'s capacity. The incident requires immediate attention to prevent significant revenue loss and customer dissatisfaction, yet all changes to production systems must be logged and approved through a formal change control process, even for emergency situations, which typically involves a review by a change advisory board (CAB). Anya has identified a specific, unusual pattern in the network traffic that strongly suggests a targeted, albeit unconventional, denial-of-service (DoS) attack that bypasses standard signature-based detection. What is the most appropriate immediate action Anya should take to mitigate the impact while adhering to best practices and organizational policy?

Accepted Answer

Temporarily implement a strict rate-limiting firewall rule targeting the identified anomalous traffic pattern and immediately submit an emergency change request detailing the observed attack vector and the implemented mitigation, pending formal CAB review.

Question 26

A system administrator, Kaelen, is tasked with optimizing network throughput for a critical new application scheduled for a high-profile launch next week. While deep in performance tuning, Kaelen receives an urgent, out-of-band communication detailing a severe, zero-day security vulnerability affecting the core operating system of all production servers. The directive is to immediately halt all non-essential tasks and deploy the necessary security patches across the entire server infrastructure. Kaelen\'s original optimization work is now secondary to addressing this critical vulnerability. Which behavioral competency is most directly demonstrated by Kaelen\'s response to this situation?

Accepted Answer

Adaptability and Flexibility

Question 27

Anya, a senior system administrator for a critical e-commerce platform, is alerted to a severe performance degradation affecting customer transactions. Initial reports indicate that users are experiencing extremely slow response times and frequent timeouts. The system load has spiked dramatically in the last hour. Anya needs to quickly restore service stability while simultaneously investigating the cause to prevent recurrence. What is the most prudent immediate course of action to balance service restoration and root cause analysis in this high-pressure situation?

Accepted Answer

Restart the affected service to regain immediate responsiveness and begin a detailed analysis of system logs and resource utilization to pinpoint the root cause.

Question 28

Anya, a system administrator for a rapidly growing e-commerce platform, is alerted to a critical outage affecting the main customer-facing website. The primary web server, `webserver01`, is not responding to requests. Her team is under immense pressure to restore service before the peak holiday shopping season begins. Anya needs to efficiently determine the underlying reason for the web server\'s unresponsiveness.

Which of the following actions would be the most effective initial step for Anya to diagnose the root cause of the web server\'s failure?

Accepted Answer

Verify the status of the web server service using `systemctl status httpd` and review its recent error logs for specific failure messages.

Question 29

Following the deployment of a critical database service on a newly provisioned and mounted network storage volume, system administrator Kaelen observes that the application consistently fails to start due to \"Permission denied\" errors, even though standard file permissions (e.g., `rwx`) appear to be correctly set. Investigation reveals that SELinux is enforcing a policy that is not recognizing the security contexts of the files and directories on this new volume. To rectify this situation efficiently and ensure the application can operate within the defined SELinux security framework, which command-line utility should Kaelen use to apply the system\'s default SELinux file contexts to the entire mounted filesystem?

Accepted Answer

restorecon -Rv /mnt/database_storage

Question 30

Anya, a system administrator responsible for maintaining a critical financial transaction processing application on a Red Hat Enterprise Linux environment, has just encountered an unexpected and complete service outage for this application. Her immediate priority is to ensure the application remains accessible and operational with zero interruption to ongoing financial activities. She needs to implement a strategy that not only resolves the current incident but also proactively prevents any future downtime for this vital service, adhering to strict service level agreements (SLAs) that mandate continuous availability.

Which of Anya\'s potential strategic responses would best fulfill the requirement of *guaranteeing* the continued operation of the essential services during such an event?

Accepted Answer

Deploy a high-availability cluster for the financial transaction application, configuring automatic failover between redundant servers.

EX200 Red Hat Certified System Administrator (RHCSA) Free Practice Test — 30 Questions

A lot more is already mapped out

About the EX200 Red Hat Certified System Administrator (RHCSA) Certification