RedHat Red Hat Certified Engineer - RHCE (v6+v7) - EX300 FREE EXAM DUMPS QUESTIONS & ANSWERS
CORRECT TEXT
Please open the ip_forward and take effect permanently.
Please open the ip_forward and take effect permanently.
Correct Answer:
If no "sysctl.conf" option, use these commands:
CORRECT TEXT
You access the iscsi shared storage. The storage server ip is 172.24.30.100. Separate of 1500M space, format as ext3 file system, mount under /mnt/data, and make sure the root-start automatically mount.
You access the iscsi shared storage. The storage server ip is 172.24.30.100. Separate of 1500M space, format as ext3 file system, mount under /mnt/data, and make sure the root-start automatically mount.
Correct Answer:
CORRECT TEXT
RHCE Test Configuration Instructions
Information for the two systems you will use in test is the following:
system1.group3.example.com: is one of the main sever. system2.group3.example.com: mainly used as a client.
Password for both of the two systems is atenorth
System's IP is provided by DHCP, you can regard it as normal, or you can reset to Static IP in accordance with the following requirements:
system1.group3.example.com: 172.24.3.5
system2.group3.example.com: 172.24.3.10
The subnet mask is 255.255.255.0
Your system is a member of DNS domain group3.example.com. All systems in DNS domain group3.example.com are all in subnet 172.24.3.0/255.255.255.0, the same all systems in this subnet are also in group3.example.com, unless specialized, all network services required to be configured can be accessed by systems of domain group3.
host.group3.example.com provides a centralized authentication service domain GROUP3.EXAMPLE.COM, both system1 and system2 have already been pre-configured to be the client for this domain, this domain provides the following user account:
Firewall is enabled by default, you can turn it off when deemed appropriate, other settings about firewall may be in separate requirements.
Your system will be restarted before scoring, so please ensure that all modifications and service configurations you made still can be operated after the restart without manual intervention, virtual machine instances of all examinations must be able to enter the correct multi-user level after restart without manual assistance, it will be scored zero if the test using virtual machine system cannot be restarted or be properly restarted.
Corresponding distribution packages for the testing using operating system Red Hat Enterprise Linux version can be found in the following link:
http://server1.group3.example.com/rhel
Part of the requirements include host security, ensure your host security limit does not prevent the request to allow the host and network, although you correctly configured the network service but would have to allow the host or network is blocked, this also does not score.
You will notice that some requirements which clearly do not allow services be accessed by service domain my133t.org, systems of this domain are in subnet 172.25.1.0/252.255.255.0, and systems of these subnets also belong to my 133t.org domain.
PS: Notice that some test questions may depend on other exam questions, for example, you might be asked to perform a series of restrictions on a user, but this user creation may be required in other questions. For convenient identification, each exam question has some radio buttons to help you identify which questions you have already completed or not completed. Certainly, you do not need to care these buttons if you don't need them.
Configure the Local Mail Service
Configure the mail service on system1 and system2, as required:
1. These systems do not accept external sending mails
2. Any mails sent locally are automatically routed to rhgls.domain11.example.com
3. Mails sent from these systems will be displayed from rhgls.domain11.example.com
4. You can send mail to local user 'arthur' to test your configuration system rhgls.domain11.example.com
5. You have already configured this user's mail to the following URL rhgls.domain11.example.com/received_mail/11
RHCE Test Configuration Instructions
Information for the two systems you will use in test is the following:
system1.group3.example.com: is one of the main sever. system2.group3.example.com: mainly used as a client.
Password for both of the two systems is atenorth
System's IP is provided by DHCP, you can regard it as normal, or you can reset to Static IP in accordance with the following requirements:
system1.group3.example.com: 172.24.3.5
system2.group3.example.com: 172.24.3.10
The subnet mask is 255.255.255.0
Your system is a member of DNS domain group3.example.com. All systems in DNS domain group3.example.com are all in subnet 172.24.3.0/255.255.255.0, the same all systems in this subnet are also in group3.example.com, unless specialized, all network services required to be configured can be accessed by systems of domain group3.
host.group3.example.com provides a centralized authentication service domain GROUP3.EXAMPLE.COM, both system1 and system2 have already been pre-configured to be the client for this domain, this domain provides the following user account:
Firewall is enabled by default, you can turn it off when deemed appropriate, other settings about firewall may be in separate requirements.
Your system will be restarted before scoring, so please ensure that all modifications and service configurations you made still can be operated after the restart without manual intervention, virtual machine instances of all examinations must be able to enter the correct multi-user level after restart without manual assistance, it will be scored zero if the test using virtual machine system cannot be restarted or be properly restarted.
Corresponding distribution packages for the testing using operating system Red Hat Enterprise Linux version can be found in the following link:
http://server1.group3.example.com/rhel
Part of the requirements include host security, ensure your host security limit does not prevent the request to allow the host and network, although you correctly configured the network service but would have to allow the host or network is blocked, this also does not score.
You will notice that some requirements which clearly do not allow services be accessed by service domain my133t.org, systems of this domain are in subnet 172.25.1.0/252.255.255.0, and systems of these subnets also belong to my 133t.org domain.
PS: Notice that some test questions may depend on other exam questions, for example, you might be asked to perform a series of restrictions on a user, but this user creation may be required in other questions. For convenient identification, each exam question has some radio buttons to help you identify which questions you have already completed or not completed. Certainly, you do not need to care these buttons if you don't need them.
Configure the Local Mail Service
Configure the mail service on system1 and system2, as required:
1. These systems do not accept external sending mails
2. Any mails sent locally are automatically routed to rhgls.domain11.example.com
3. Mails sent from these systems will be displayed from rhgls.domain11.example.com
4. You can send mail to local user 'arthur' to test your configuration system rhgls.domain11.example.com
5. You have already configured this user's mail to the following URL rhgls.domain11.example.com/received_mail/11
Correct Answer:
solution
Open rhgls.domain11.example.com/received_mail/11 in a browser
Open rhgls.domain11.example.com/received_mail/11 in a browser
CORRECT TEXT
Make on /storage directory that only the user owner and group owner member can fully access.
Make on /storage directory that only the user owner and group owner member can fully access.
Correct Answer:
chmod 770 /storage
Verify using : ls -ld /storage
Note:
Preview should be like: drwxrwx--- 2 root sysusers 4096 Mar 16 18:08 /storage To change the permission on directory we use the chmod command. According to the question that only the owner user (root) and group member (sysusers) can fully access the directory so:
chmod 770 /archive
Verify using : ls -ld /storage
Note:
Preview should be like: drwxrwx--- 2 root sysusers 4096 Mar 16 18:08 /storage To change the permission on directory we use the chmod command. According to the question that only the owner user (root) and group member (sysusers) can fully access the directory so:
chmod 770 /archive
CORRECT TEXT
Create the users named jeff, marion, harold
Create the users named jeff, marion, harold
Correct Answer:
useraddjeff
useraddmarion
useraddharold
Note:
useradd command is used to create the user.
All user's information stores in /etc/passwd and user's shadow password stores in /etc/shadow.
useraddmarion
useraddharold
Note:
useradd command is used to create the user.
All user's information stores in /etc/passwd and user's shadow password stores in /etc/shadow.
CORRECT TEXT
Whoever creates the files/directories on /storage group owner should be automatically should be the same group owner of /storage.
Whoever creates the files/directories on /storage group owner should be automatically should be the same group owner of /storage.
Correct Answer:
chmodg+s /storage
Verify using: ls -ld /stora
Note:
Permission should be like:
drwxrws--- 2 root sysusers 4096 Mar 16 18:08 /storage If SGID bit is set on directory then who every users creates the files on directory group owner automatically the owner of parent directory.
To set the SGID bit: chmodg+s directory
To Remove the SGID bit: chmod g-s directory
Verify using: ls -ld /stora
Note:
Permission should be like:
drwxrws--- 2 root sysusers 4096 Mar 16 18:08 /storage If SGID bit is set on directory then who every users creates the files on directory group owner automatically the owner of parent directory.
To set the SGID bit: chmodg+s directory
To Remove the SGID bit: chmod g-s directory
CORRECT TEXT
You are working as an Administrator. There is a common data shared (/data) from 192.168.0.254 to all users in your local LAN. When user's system start, shared data should automatically mount on /common directory.
You are working as an Administrator. There is a common data shared (/data) from 192.168.0.254 to all users in your local LAN. When user's system start, shared data should automatically mount on /common directory.
Correct Answer:
To automatically mount at boot time, we use the /etc/fstab file. Because /etc/rc.d/rc.sysinit file reads and mounts all file system specified in /etc/fstab. To mount Network Sharing Files also use the
/etc/fstab but filesystem is nfs.
/etc/fstab but filesystem is nfs.
CORRECT TEXT
RHCE Test Configuration Instructions
Information for the two systems you will use in test is the following:
system1.group3.example.com: is one of the main sever. system2.group3.example.com: mainly used as a client.
Password for both of the two systems is atenorth
System's IP is provided by DHCP, you can regard it as normal, or you can reset to Static IP in accordance with the following requirements:
system1.group3.example.com: 172.24.3.5
system2.group3.example.com: 172.24.3.10
The subnet mask is 255.255.255.0
Your system is a member of DNS domain group3.example.com. All systems in DNS domain group3.example.com are all in subnet 172.24.3.0/255.255.255.0, the same all systems in this subnet are also in group3.example.com, unless specialized, all network services required to be configured can be accessed by systems of domain group3.
host.group3.example.com provides a centralized authentication service domain GROUP3.EXAMPLE.COM, both system1 and system2 have already been pre-configured to be the client for this domain, this domain provides the following user account:
Firewall is enabled by default, you can turn it off when deemed appropriate, other settings about firewall may be in separate requirements.
Your system will be restarted before scoring, so please ensure that all modifications and service configurations you made still can be operated after the restart without manual intervention, virtual machine instances of all examinations must be able to enter the correct multi-user level after restart without manual assistance, it will be scored zero if the test using virtual machine system cannot be restarted or be properly restarted.
Corresponding distribution packages for the testing using operating system Red Hat Enterprise Linux version can be found in the following link:
http://server1.group3.example.com/rhel
Part of the requirements include host security, ensure your host security limit does not prevent the request to allow the host and network, although you correctly configured the network service but would have to allow the host or network is blocked, this also does not score.
You will notice that some requirements which clearly do not allow services be accessed by service domain my133t.org, systems of this domain are in subnet 172.25.1.0/252.255.255.0, and systems of these subnets also belong to my 133t.org domain.
PS: Notice that some test questions may depend on other exam questions, for example, you might be asked to perform a series of restrictions on a user, but this user creation may be required in other questions. For convenient identification, each exam question has some radio buttons to help you identify which questions you have already completed or not completed. Certainly, you do not need to care these buttons if you don't need them.
Configure iSCSI Clients
Configure the system2 to make it can link to iqn.2014-09.com.example.domain11:system1 provided by the system, meet the following requirements at the same time:
Block device iSCSI contains a 2100MIB partition, and is formatted as ext4.
This partition mount to the /mnt/data and mount automatically during the system start-up.
1. iSCSI device automatically loads during the system start-up.
RHCE Test Configuration Instructions
Information for the two systems you will use in test is the following:
system1.group3.example.com: is one of the main sever. system2.group3.example.com: mainly used as a client.
Password for both of the two systems is atenorth
System's IP is provided by DHCP, you can regard it as normal, or you can reset to Static IP in accordance with the following requirements:
system1.group3.example.com: 172.24.3.5
system2.group3.example.com: 172.24.3.10
The subnet mask is 255.255.255.0
Your system is a member of DNS domain group3.example.com. All systems in DNS domain group3.example.com are all in subnet 172.24.3.0/255.255.255.0, the same all systems in this subnet are also in group3.example.com, unless specialized, all network services required to be configured can be accessed by systems of domain group3.
host.group3.example.com provides a centralized authentication service domain GROUP3.EXAMPLE.COM, both system1 and system2 have already been pre-configured to be the client for this domain, this domain provides the following user account:
Firewall is enabled by default, you can turn it off when deemed appropriate, other settings about firewall may be in separate requirements.
Your system will be restarted before scoring, so please ensure that all modifications and service configurations you made still can be operated after the restart without manual intervention, virtual machine instances of all examinations must be able to enter the correct multi-user level after restart without manual assistance, it will be scored zero if the test using virtual machine system cannot be restarted or be properly restarted.
Corresponding distribution packages for the testing using operating system Red Hat Enterprise Linux version can be found in the following link:
http://server1.group3.example.com/rhel
Part of the requirements include host security, ensure your host security limit does not prevent the request to allow the host and network, although you correctly configured the network service but would have to allow the host or network is blocked, this also does not score.
You will notice that some requirements which clearly do not allow services be accessed by service domain my133t.org, systems of this domain are in subnet 172.25.1.0/252.255.255.0, and systems of these subnets also belong to my 133t.org domain.
PS: Notice that some test questions may depend on other exam questions, for example, you might be asked to perform a series of restrictions on a user, but this user creation may be required in other questions. For convenient identification, each exam question has some radio buttons to help you identify which questions you have already completed or not completed. Certainly, you do not need to care these buttons if you don't need them.
Configure iSCSI Clients
Configure the system2 to make it can link to iqn.2014-09.com.example.domain11:system1 provided by the system, meet the following requirements at the same time:
Block device iSCSI contains a 2100MIB partition, and is formatted as ext4.
This partition mount to the /mnt/data and mount automatically during the system start-up.
1. iSCSI device automatically loads during the system start-up.
Correct Answer:
CORRECT TEXT
Prevent Mary from performing user configuration tasks in your system.
Prevent Mary from performing user configuration tasks in your system.
Correct Answer:
Conclusions:
1. I find that it is common to add various service access limits in the exam RHCE. The exercises like:
require one network segment can be accessed another network segments can not be accessed, the following are some conclusions for various service:
tcp_wrappers:/etc/hosts.allow,/etc/hosts.deny
tcp_wrappers can filter the TCP's accessing service. TCP whether has the filtering function which depends on this service whether use the function library of tcp_wrappers, or this service whether has the xinetd process of starting function of tcp_wrappers. tcp_wrappers's main configuration file is
/etc/hosts.allow,/etc/hosts.deny.
And the priority of the documents in hosts.allow is higher than hosts. deny. Visit will be passed if no match was found.
sshd,vsftpd can use the filtering service of tcp_wrappers.
Configuration example:
Notice:
The two configuration files' syntax can refer to hosts_access (5) and hosts_options(5) sshd_config There are four parameters in this configuration file: DenyUsers, AllowUsers, DenyGroups, AllowGroups, they are used to limit some users or user groups to proceed Remote Login through the SSH. These parameters' priority level is DenyUsers->AllowUsers->DenyGroups->AllowGroups Configuration example:
httpd Service
Through the /etc/httpd/conf/httpd.conf in parameters, can add <Directory> to control the url access.
Just as:
Notice:
So pay attention, deny's and allow's priority level in order deny,allow is: the backer has the higher priority level. But here, allow's priority has a higher priority level.
nfs Service
nfs service directly control the visits through file /etc/exports, just as:
samba Service
Parameter hosts allow in /etc/samba/smb.conf which is used as Access Control, just as:
2. Paying attention to use Mount parameters: _netdev,defaults when you are mounting ISCSI disk.
3. Stop the NetworkManager
/etc/init.d/NetworkManager stop
chkconfigNetworkManager off
4. When you are deploying ifcfg-ethX, add parameters:
PEERDNS=no
5. Empty the firewall in RHCSA,RHCE:
6. Narrow lv steps:
7. Mount the using command - swap which is newly added in /etc/fstab
8. If Verification is not passed when you are installing software, can import public key: rpm import
/etc/pki/rpm.../...release and so on. In yum.repo, you also can deploy gpgkey, for example, gpgkey=/etc/pki/rpm.../...release
9. When you are using "Find" command to search and keep these files, paying attention to use cp -a to copy files if you use user name and authority as your searching methods.