RH302 Red Hat Certified Engineer on Redhat Free Practice Test — 30 Questions

Question 1

Anya, a seasoned system administrator, is tasked with migrating a mission-critical relational database service from an aging on-premises cluster to a new Red Hat Enterprise Linux (RHEL) 9 environment deployed on a cloud platform. The primary objective is to ensure continuous service availability, minimizing any potential downtime during the transition and for ongoing operations. Anya needs to select the most robust and automated method for managing the database\'s high availability within the RHEL ecosystem.

Which of the following approaches would best meet Anya\'s requirements for ensuring high availability and automated failover of the database service in the RHEL 9 cloud environment?

Accepted Answer

Configure the database service as a managed resource within a Red Hat High Availability Add-On cluster using Pacemaker and Corosync, defining appropriate resource agents and failover policies.

Question 2

A Red Hat Enterprise Linux system acting as a high-traffic web server exhibits unpredictable performance dips. During periods of low user activity, the system operates adequately, but when concurrent user requests surge, network latency increases, and response times degrade significantly. The system is currently running the `balanced` tuned profile. Which command should an administrator execute to most effectively mitigate these performance fluctuations and ensure optimal throughput during peak loads?

Accepted Answer

tuned-adm profile throughput-performance

Question 3

A critical customer-facing application hosted on a Red Hat Enterprise Linux environment experiences a sudden, widespread outage. Users report an inability to access core functionalities, and monitoring systems indicate a significant spike in error rates across multiple services. The system administrator, holding RHCE certification, must act swiftly to mitigate the impact while adhering to best practices for system stability and data integrity. The current operational environment is complex, with several recent configuration changes deployed across various components.

Which of the following actions represents the most prudent and effective immediate response to this crisis?

Accepted Answer

Initiate a rollback to the last known stable configuration after analyzing system logs for recent critical errors.

Question 4

Anya, a seasoned systems administrator responsible for a mission-critical financial application hosted on Red Hat Enterprise Linux, is tasked with migrating the application\'s primary data store from an aging SAN to a new, high-performance distributed object storage system. The application experiences severe performance degradation during peak trading hours, violating its Service Level Agreement (SLA) and causing significant user dissatisfaction. Anya must execute this migration with minimal disruption to ongoing trading activities and guarantee data integrity. What strategic approach should Anya prioritize to ensure a successful transition?

Accepted Answer

Implement a phased data synchronization strategy, meticulously testing the new storage system under simulated production loads, establishing a robust rollback plan, and coordinating a brief, scheduled cutover window with all relevant stakeholders.

Question 5

Anya, a senior system administrator for a critical e-commerce platform, is alerted to sporadic but significant performance dips affecting customer transactions. The issue is intermittent, making direct troubleshooting challenging. The platform remains accessible, but response times are highly variable. Anya\'s primary objective is to restore consistent, optimal performance with minimal service interruption. Which of the following initial diagnostic strategies would most effectively guide Anya toward identifying the root cause of the performance degradation?

Accepted Answer

Thoroughly review system logs and recent configuration changes, correlating timestamps with reported performance anomalies to identify potential causal factors.

Question 6

Anya, a senior system administrator for a critical e-commerce platform running on RHEL 9, is alerted to intermittent periods of extreme slowness followed by complete unresponsiveness of the main customer-facing application. Users report being unable to complete transactions during these times, with the issue appearing without a predictable pattern. Anya needs to quickly identify the most effective initial approach to diagnose the root cause of this widespread service degradation.

Accepted Answer

Conduct a comprehensive real-time analysis of system resource utilization (CPU, memory, I/O), review system and application logs for errors, and verify network connectivity and latency to critical services.

Question 7

Anya, a senior system administrator at a financial services firm, is troubleshooting a custom-built trading application running on Red Hat Enterprise Linux. The application, which utilizes extensive inter-process communication (IPC) and relies on low-latency data feeds, has been exhibiting intermittent periods of sluggishness, impacting transaction processing times. Initial monitoring suggests that while CPU and memory utilization are within acceptable ranges, the application\'s responsiveness degrades during peak trading hours. Anya suspects that the kernel\'s scheduling policy might be contributing to this latency. Which kernel parameter should Anya prioritize adjusting to potentially mitigate these slowdowns by influencing how the scheduler allocates CPU time to processes?

Accepted Answer

$kernel.sched_latency_ns$

Question 8

Anya, a seasoned system administrator for a high-traffic e-commerce platform, is troubleshooting performance degradation on a critical RHEL 9 web server. During peak hours, users report sluggish response times, and monitoring tools indicate sporadic spikes in CPU utilization that are not directly attributable to specific user processes. The workload consists of a mix of interactive user sessions, background batch jobs for inventory updates, and database connection pooling. Anya needs to select a CPU scheduling policy that ensures interactive users receive prompt responses while also preventing background tasks from starving essential services, all without requiring complex per-process deadline configuration or significant system tuning.

Accepted Answer

Completely Fair Scheduler (CFS)

Question 9

An organization has recently deployed a novel, internally developed microservice that interacts with the system\'s logging daemon and a custom data store. During initial testing in a Red Hat Enterprise Linux environment configured with SELinux in enforcing mode, the microservice consistently fails to start, producing frequent Access Vector Cache (AVC) denials related to file access and network socket operations. The system administrators need to ensure the microservice functions correctly while maintaining the integrity of the SELinux security policy. Which sequence of actions best addresses this situation, prioritizing security and adherence to best practices?

Accepted Answer

Define extended file contexts for the microservice's binaries and data directories using `semanage fcontext`, then use `audit2allow` to generate a custom SELinux policy module based on the observed AVC denials, and finally install this module using `semanage module -i`.

Question 10

Following a system update and the installation of new network interface hardware on a RHEL 9 server, the `network-manager.service` fails to start during the boot process. Initial investigation using `systemctl status network-manager.service` confirms the service is in a failed state, with logs indicating a potential issue with a required kernel module. Considering the nature of kernel module dependencies and how they are managed in RHEL, what is the most effective initial diagnostic step to ascertain the specific kernel module that is failing to load and its dependencies?

Accepted Answer

Examine the output of `modprobe -c` to review module dependency information and `lsmod` to check currently loaded modules.

Question 11

A critical production server running Red Hat Enterprise Linux experiences severe performance degradation and unresponsiveness during peak operational hours. Initial observations point to a recently installed third-party kernel module designed for enhanced network throughput. System monitoring reveals a significant and escalating memory usage pattern directly correlated with the module\'s activity. The immediate objective is to restore system stability without causing further disruption or data loss. What is the most appropriate immediate course of action and subsequent diagnostic strategy?

Accepted Answer

Immediately unload the problematic kernel module using `rmmod` and disable its automatic loading mechanism to prevent recurrence on reboot, followed by a detailed analysis of system logs and memory usage patterns to identify the root cause.

Question 12

Anya, a seasoned Red Hat Certified Engineer, is orchestrating the migration of a vital, legacy application to a newer RHEL version. The application\'s intricate architecture includes several undocumented dependencies, and its performance exhibits erratic behavior that defies easy replication. Anya\'s initial migration plan, a straightforward deployment, is proving untenable. She must now devise a new strategy to ensure the application\'s stability and continued functionality post-migration, while also managing the expectations of the business unit that relies heavily on this service. Which of the following behavioral competencies is most crucial for Anya to effectively navigate this complex and evolving situation?

Accepted Answer

Adaptability and Flexibility

Question 13

Following a significant network infrastructure overhaul on a Red Hat Enterprise Linux cluster, the `chronyd` service on several nodes is exhibiting erratic behavior, failing to maintain synchronized time across the distributed environment. This inconsistency is beginning to impact critical application functions that depend on accurate, shared timestamps. To effectively pinpoint the cause of this widespread time drift and determine if the service can reach its configured upstream time servers, which `chronyc` command would provide the most immediate and relevant diagnostic information regarding the status of each configured time source?

Accepted Answer

chronyc sources

Question 14

During a critical incident, a production cluster exhibits sporadic but severe performance degradation affecting customer-facing applications. A junior administrator has ruled out obvious hardware failures and individual service resource exhaustion through standard monitoring tools. A senior engineer is brought in to lead the investigation. Considering the intermittent nature and the failure of initial isolated checks, which investigative strategy is most likely to uncover the root cause of this complex system-wide performance issue?

Accepted Answer

Conduct a deep dive into correlated system logs, network traffic analysis, and inter-process communication patterns to identify subtle resource contention or race conditions across multiple system layers.

Question 15

Anya, a seasoned system administrator managing a critical RHEL 9 production environment, is tasked with deploying a high-priority security update that addresses a recently disclosed kernel vulnerability. This update is scheduled for deployment during a standard maintenance window. However, just hours before the window opens, a key client informs Anya that their new, mission-critical application deployment is scheduled for the very next morning, and any delay will result in significant financial penalties. The client\'s deployment is dependent on specific configurations that might be affected by the kernel update. Anya must ensure both the security of the infrastructure and the successful, on-time delivery of the client\'s service. Which of the following approaches best balances these competing demands while adhering to best practices for RHEL system administration and client relationship management?

Accepted Answer

Immediately deploy the security update during the scheduled maintenance window, communicate the action to the client with a revised timeline for their deployment, and have a detailed rollback plan ready in case of unforeseen issues impacting the client's service.

Question 16

Following a modification to a custom systemd service unit file located at `/etc/systemd/system/my-app.service` to alter its execution parameters, what is the precise, two-step sequence required to ensure these changes are recognized and applied by the systemd init system and the running service itself?

Accepted Answer

Execute `systemctl daemon-reload` followed by `systemctl restart my-app.service`

Question 17

A system administrator is configuring a Red Hat Enterprise Linux system where the Apache web server (`httpd`) needs to serve content from a custom directory that has been relabeled with the `my_app_data_t` SELinux type. After restarting the `httpd` service, the web server fails to access files within this directory, and error messages related to SELinux denials are observed in the system logs. The administrator uses `ausearch -m avc -ts recent` and identifies a denial pattern indicating that the `httpd_t` type is attempting to perform a `getattr` operation on an object of type `my_app_data_t`. Which of the following actions is the most direct and secure method to permit this specific interaction, ensuring minimal disruption to the overall SELinux policy?

Accepted Answer

Generate a custom SELinux policy module using `audit2allow` to explicitly allow `httpd_t` to `getattr` on `my_app_data_t` labeled directories.

Question 18

A critical web application hosted on a Red Hat Enterprise Linux system has become unresponsive, with users reporting intermittent timeouts. Initial investigation reveals that the `httpd` service is failing to restart cleanly, and several downstream services that depend on it are also exhibiting errors. As the system administrator responsible for maintaining service availability, what is the most appropriate initial course of action to diagnose and resolve this complex issue, ensuring minimal impact on ongoing operations?

Accepted Answer

Systematically analyze system and application logs, check the status and configuration of dependent services, and monitor system resource utilization to pinpoint the root cause of the `httpd` service failure before implementing any corrective actions.

Question 19

A critical production environment running multiple core business applications on Red Hat Enterprise Linux has suddenly exhibited severe performance degradation across all services, leading to unacceptably slow response times and intermittent service unavailability. The system administrator, Anya Sharma, needs to quickly ascertain the cause to initiate remediation. Which of the following actions would represent the most effective initial diagnostic step to identify the root cause of this widespread system-wide performance issue?

Accepted Answer

Execute `systemctl status` on all critical service units to verify their operational state and identify any failed or restarting services.

Question 20

A Red Hat Certified Engineer is tasked with deploying a novel, internally developed web server application on a RHEL 9 system. Upon attempting to start the service, it fails to load its configuration files and logs, generating repeated SELinux AVC denials in the audit log. The engineer has confirmed the application\'s executables are correctly placed and the necessary directories for configuration and logs exist. What is the most effective and secure approach to rectify this situation, ensuring the web server operates correctly while maintaining SELinux\'s protective capabilities?

Accepted Answer

Define persistent SELinux file context rules for the web server's executables and data directories using `semanage fcontext`, then apply these rules with `restorecon`.

Question 21

A Red Hat Certified Engineer is tasked with ensuring that the `tg3` kernel module, which supports a specific network interface controller, is loaded reliably during every system boot sequence on a RHEL 9 system. Initial troubleshooting reveals that the module can be loaded manually using `modprobe tg3`, but it fails to load automatically during the boot process. The system\'s kernel and module files are confirmed to be intact and correctly installed. What is the most appropriate and robust method to guarantee the `tg3` module is loaded at boot time?

Accepted Answer

Create a new configuration file in `/etc/modules-load.d/` and add the line `tg3` to ensure the module is loaded by the `systemd-modules-load.service`.

Question 22

During a critical outage impacting a high-traffic e-commerce platform, system administrators observe sporadic transaction failures. Initial investigations reveal no obvious errors in application logs, and resource utilization metrics appear within nominal ranges during periods of stability, but spike erratically preceding failures. The team has recently implemented a new caching mechanism designed to improve performance. Considering the need for rapid restoration and long-term stability, what is the most effective initial strategy to diagnose and resolve the intermittent transaction failures?

Accepted Answer

Conduct a deep dive into the configuration and behavior of the new caching mechanism, correlating its activation with the timing of transaction failures and analyzing its interaction with upstream and downstream services.

Question 23

A system administrator is tasked with enabling a custom data processing application, which relies on configuration files and dynamic data located in `/srv/custom_app`, to be served by the Apache web server (httpd). The application\'s data needs to be accessible by httpd for dynamic content generation, but the default SELinux policy for httpd does not grant read access to files within `/srv/custom_app`. The administrator has verified that standard file permissions (e.g., `chmod 755 /srv/custom_app`) are correctly set for readability by the httpd process. To resolve the access issue while adhering to the principle of least privilege and maintaining SELinux enforcement, what is the most appropriate and persistent method to grant httpd the necessary access?

Accepted Answer

Use `semanage fcontext -a -t httpd_sys_content_t "/srv/custom_app(/.*)?"` followed by `restorecon -Rv /srv/custom_app`.

Question 24

Anya, a seasoned system administrator managing a critical Red Hat Enterprise Linux infrastructure, is tasked with hardening a web server hosting sensitive financial data. A new organizational security directive mandates that the `httpd` service must be strictly confined, preventing it from accessing any files outside its designated web content directory (`/var/www/html`). During testing, SELinux logs indicate repeated denials when `httpd` attempts to read configuration files from `/etc/httpd/conf.d`. Anya needs to implement a robust solution that adheres to the principle of least privilege and ensures the web server\'s operational integrity without compromising security. Which of the following actions is the most appropriate and effective method to achieve this specific security objective within the SELinux framework?

Accepted Answer

Analyze SELinux audit logs for denials related to `httpd` accessing restricted directories and use `audit2allow` to generate and install a custom SELinux policy module that explicitly permits `httpd` access only to web content files and denies access to configuration directories.

Question 25

A critical web application on a Red Hat Enterprise Linux system, managed under strict security mandates, is intermittently failing to write configuration updates to a designated directory. System administrators have confirmed the application\'s functionality and permissions are otherwise correct, but SELinux audit logs show repeated AVC denials related to this specific operation. To address this without compromising the system\'s overall security posture or resorting to permissive modes, what is the most direct and recommended method for generating the necessary SELinux policy adjustments?

Accepted Answer

Utilize `ausearch -m AVC -ts recent | audit2allow -a` to identify recent denials and generate a custom policy module for loading.

Question 26

When tasked with enforcing a stringent new security mandate across a mixed environment of Red Hat Enterprise Linux servers, including those with legacy applications and limited remote connectivity, system administrator Elara must meticulously balance security objectives with operational realities. She identifies that the mandate\'s success hinges not just on technical execution but on her capacity to navigate the inherent complexities and potential disruptions. Which of the following behavioral competencies is most critical for Elara to effectively implement the new security policy while minimizing negative impacts?

Accepted Answer

Adaptability and Flexibility

Question 27

Anya, a senior system administrator responsible for a high-availability e-commerce platform, notices a significant and sustained drop in transaction processing speeds immediately following the application of a critical security update to the core operating system. The platform\'s performance metrics, which are meticulously monitored, indicate a sharp increase in CPU utilization and response times across all web servers. Given the urgency to restore optimal performance and maintain customer trust, Anya needs to quickly ascertain the most effective diagnostic strategy to pinpoint the source of this degradation.

Accepted Answer

Temporarily roll back the operating system to its state prior to the security update and observe if performance metrics return to baseline levels.

Question 28

Anya, a seasoned RHEL administrator, is troubleshooting an application exhibiting sporadic, high CPU utilization on a production server. She observes significant spikes in CPU load, impacting overall system responsiveness. Her initial investigation using `top` confirms elevated CPU usage, but the specific process responsible for the sustained high load is not immediately obvious due to the dynamic nature of the application\'s workload. To gain deeper insight into the kernel-level activities contributing to this performance bottleneck, which of the following diagnostic strategies would be most effective for Anya to employ?

Accepted Answer

Utilize `perf top` to profile kernel and user-space performance, focusing on identifying specific functions and symbols consuming the most CPU cycles, and then correlate these findings with the application's known operational patterns.

Question 29

During the operation of a critical web application on a Red Hat Enterprise Linux system, users report intermittent failures in uploading files. Initial investigation reveals no standard file system permission issues. Upon checking system logs, a pattern of SELinux Access Vector Cache (AVC) denials related to the web server process attempting to write to a specific directory is observed. What is the most effective and secure sequence of commands to diagnose and resolve this specific SELinux-related file access issue?

Accepted Answer

Use `ausearch -m AVC` to find the denial, pipe the output to `audit2allow -m webapp_upload` to create a policy module, and then load it with `semodule -i /path/to/webapp_upload.pp`.

Question 30

Consider a scenario where a Red Hat Certified Engineer is tasked with simultaneously managing a critical, time-sensitive application update for a financial trading platform that requires a scheduled maintenance window of 4 hours with zero tolerance for further delay, and a newly discovered, high-severity security vulnerability affecting a cluster of web servers that must be patched within 12 hours to comply with internal security policies. The engineer has limited personal availability due to other project commitments, necessitating an efficient and risk-averse strategy. Which of the following approaches best balances the immediate threat mitigation with the business-critical application deployment, considering the constraints?

Accepted Answer

Execute the security patch on the web server cluster first, during a low-traffic period, followed by the application update, ensuring thorough rollback procedures are in place for both.

RH302 Red Hat Certified Engineer on Redhat Free Practice Test — 30 Questions

A lot more is already mapped out

About the RH302 Red Hat Certified Engineer on Redhat Certification