EX200 Red Hat Certified System Administrator - RHCSARHEL 10 Questions and Answers

Solution:

mkdir -p /share/projects

chown alex /share/projects/

chmod a+rwx,+t /share/projects/

ls -ld /share/projects/

Detailed Explanation:

chmod a+rwx gives read, write, and execute to everyone.

+t sets the sticky bit.

Sticky bit on a shared directory means users can create files, but only the file owner, directory owner, or root can delete them.

This is the same model used on /tmp.

Solution:

sed -i '/^pool /d;/^server /d' /etc/chrony.conf

echo "server time.example.com iburst" > > /etc/chrony.conf

systemctl enable --now chronyd

systemctl restart chronyd

chronyc sources -v

chronyc tracking

Detailed Explanation:

chronyd is the RHEL 10 NTP implementation.

iburst speeds up initial synchronization.

chronyc sources -v and chronyc tracking confirm the sync state.

Red Hat’s RHEL 10 time synchronization documentation uses chrony as the supported NTP implementation. ( Red Hat Documentation )

Solution:

Create the script:

mkdir -p /usr/local/bin

cat > /usr/local/bin/backup-now.sh < < 'EOF'

#!/bin/bash

tar -czf /root/etc-$(date +%F).tar.gz /etc

EOF

chmod +x /usr/local/bin/backup-now.sh

Create the unit file:

cat > /etc/systemd/system/backup-now.service < < 'EOF'

[Unit]

Description=Run manual etc backup

[Service]

Type=oneshot

ExecStart=/usr/local/bin/backup-now.sh

[Install]

WantedBy=multi-user.target

EOF

Reload and test:

systemctl daemon-reload

systemctl start backup-now.service

systemctl status backup-now.service

Detailed Explanation:

Type=oneshot is correct for a task that runs and exits.

ExecStart points to the script.

systemctl daemon-reload is required after adding a new unit file.

RHEL 10 systemd documentation covers manual unit creation and management. ( Red Hat Documentation )

Solution:

tar -zvcf /root/etc_backup.tar.gz /etc

file /root/etc_backup.tar.gz

Detailed Explanation:

tar creates the archive.

-z uses gzip compression.

-v is verbose.

-c creates the archive.

-f names the output file.

file confirms the resulting archive type.

Solution:

Create the Quadlet file:

mkdir -p /etc/containers/systemd

cat > /etc/containers/systemd/sleepy.container < < 'EOF'

[Container]

Image=registry.access.redhat.com/ubi10/ubi

ContainerName=sleepy

Exec=sleep 3600

[Install]

WantedBy=multi-user.target

EOF

Reload and enable:

systemctl daemon-reload

systemctl enable --now sleepy.service

systemctl status sleepy.service

Detailed Explanation:

Quadlet is the preferred modern way to manage Podman containers with systemd for new configurations.

The .container file is translated into a systemd-managed service.

RHEL 10 documentation notes that podman generate systemd still exists, but Quadlets are preferred for new setups. ( Red Hat Documentation )

Solution:

mkdir -p /webdata

semanage fcontext -a -t httpd_sys_content_t "/webdata(/.*)?"

restorecon -Rv /webdata

ls -Zd /webdata

Detailed Explanation:

semanage fcontext defines a persistent SELinux file-context rule.

restorecon applies the correct labels to the directory and contents.

httpd_sys_content_t is the standard read-only content type for Apache.

RHEL 10 SELinux documentation covers persistent labeling with semanage and applying labels with restorecon. ( Red Hat Documentation )

Solution:

stratis filesystem snapshot pool1 fs1 fs1-snap

stratis filesystem list

Detailed Explanation:

This creates a snapshot of the existing Stratis file system.

Snapshots are useful for rollback, backup, and testing operations.

Stratis features, including pool and file-system management, are part of RHEL 10 file-system administration. ( Red Hat Documentation )

Solution:

podman build -t myimage -f Containerfile .

loginctl enable-linger alex

cd ~/.config/systemd/user/

podman generate systemd --name mycontainer --files --new

systemctl --user daemon-reload

systemctl --user enable --now container-mycontainer.service

Detailed Explanation:

podman build creates the container image.

loginctl enable-linger alex allows user services to keep running without an active login session.

podman generate systemd creates a systemd unit file for the container.

systemctl --user manages the unit in the user session scope.

On newer Podman releases, behavior and defaults have changed in RHEL 10, but the lab’s workflow is still conceptually valid.

Solution:

Read-only access:

setfacl -m u:john:r-- /share/dev

Read-write access:

setfacl -m u:john:rw- /share/dev

Remove ACL permissions:

setfacl -m u:john:--- /share/dev

Detailed Explanation:

setfacl -m modifies the ACL.

u:john:r-- grants read only.

u:john:rw- grants read and write.

u:john:--- effectively removes access for that ACL entry.

ACLs are used when standard owner/group/other permissions are not enough.