Free Red Hat Certified Specialist in Ansible Automation Exam EX407 Exam Practice Test

===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.===================================================================================Install the RHEL system roles package and create a playbook called timesync.yml that:--> Runs over all managed hosts.--> Uses the timesync role.--> Configures the role to use the time server 192.168.10.254 ( Hear in redhat labuse 'classroom.example.com' )--> Configures the role to set the iburst parameter as enabled.

• Explanation: Solution as: # pwd home/admin/ansible/ # sudo yum install rhel-system-roles.noarch -y # cd roles/ # ansible-galaxy list # cp -r /usr/share/ansible/roles/rhelsystem-roles.timesync . # vim timesync.yml --- - name: timesynchronization hosts: all vars: timesync_ntp_provider: chrony timesync_ntp_servers: - hostname: classroom.example.com _ in exam its ip-address iburst: yes timezone: Asia/Kolkata roles: - rhel-system-roles.timesync tasks: - name: set timezone timezone: name: '{{ timezone }}' :wq! timedatectl list-timezones | grep india # ansible-playbook timesync.yml --syntax-check # ansible-playbook timesync.yml # ansible all -m shell -a 'chronyc sources -v' # ansible all -m shell -a 'timedatectl' # ansible all -m shell -a 'systemctl is-enabled chronyd'

Install and configure ansibleUser bob has been created on your control node. Give him the appropriate permissions on the control node. Install the necessary packages to run ansible on the control node.Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:* The roles path should include /home/bob/ansible/roles, as well as any other path that may be required for the course of the sample exam.* The inventory file path is /home/bob/ansible/inventory.* Ansible should be able to manage 10 hosts at a single time.* Ansible should connect to all managed nodes using the bob user.Create an inventory file for the following five nodes:Configure these nodes to be in an inventory file where node1 is a member of group dev. nodc2 is a member of group test, nodc3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

• Explanation: In/home/sandy/ansible/ansible.cfg [defaults] inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false [privilegeescalation] become=true become_user=root become_method=sudo become_ask_pass=false In /home/sandy/ansible/inventory [dev] node 1 .example.com [test] node2.example.com [proxy] node3 .example.com [prod] node4.example.com node5 .example.com [webservers:children] prod

===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.===================================================================================Use Ansible Galaxy with a requirements file called /home/admin/ansible/roles/install.yml to download and install roles to /home/admin/ansible/roles from thefollowing URLs:http:// classroom.example.com /role1.tar.gz The name of this role should be balancerhttp:// classroom.example.com /role2.tar.gz The name of this role should be phphello

• Explanation: Solution as: # pwd /home/admin/ansible/roles # vim install.yml --- - src: http://classroom.example.com/role1.tar.gz name: balancer - src: http://classroom.example.com/role2.tar.gz name: phphello :wq! # pwd /home/admin/ansible # ansible-galaxy install -r roles/install.yml -p roles

===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.===================================================================================Generate a hosts file:hosts.j2 to/home/admin/ansible/ Complete the template so that it can be used to generate a filewith aline for each inventory host in the same format as /etc/hosts:172.25.250.9 workstation.lab.example.com workstation* Create a playbook called gen_hosts.yml that uses this template to generate the file/etc/myhosts on hosts in the dev host group.* When completed, the file /etc/myhosts on hosts in the dev host group should have aline foreach managed host:127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4::1 localhost localhost.localdomain localhost6 localhost6.localdomain6172.25.250.10 serevra.lab.example.com servera172.25.250.11 serevrb.lab.example.com serverb172.25.250.12 serevrc.lab.example.com serverc172.25.250.13 serevrd.lab.example.com serverd-----------------------------------------------------------------while practising you to create these file hear. But in exam have to download as perquestation.hosts.j2 file consists.localhost localhost.localdomain localhost4 localhost4.localdomain4::1localhost localhost.localdomain localhost6 localhost6.localdomain6-------------------------------------------------------------------

• Explanation: Solution as: # pwd /home/admin/ansible # wget http://classroom.example.com/hosts.j2 # vim hosts.j2 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 {% for host in groups['all'] %} {{ hostvars[host]['ansible_facts']['default_ipv4']['address'] }} {{ hostvars[host] ['ansible_facts']['fqdn'] }} {{ hostvars[host]['ansible_facts']['hostname'] }} {% endfor %} :wq! # vim gen_hosts.yml --- - name: collecting all host information hosts: all tasks: - name: template: src: hosts.j2 dest: /etc/myhosts when: inventory_hostname in groups['dev'] :wq # ansible-playbook gen_hosts.yml ---syntax-check # ansible-playbook gen_hosts.yml

Create a playbook that changes the default target on all nodes to multi-user tarqet. Do this in playbook file called target.yml in /home/sandy/ansible

• Explanation: - name: change default target hosts: all tasks: - name: change target file: src: /usr/lib/systemd/system/multi-user.target dest: /etc/systemd/system/default.target state: link

===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.===================================================================================Create Logical volumes with lvm.yml in all nodes according to followingrequirements.----------------------------------------------------------------------------------------* Create a new Logical volume named as 'data'* LV should be the member of 'research' Volume Group* LV size should be 1500M* It should be formatted with ext4 file-system.--> If Volume Group does not exist then it should print the message 'VG Not found'--> If the VG can not accommodate 1500M size then it should print 'LV Can not becreated withfollowing size', then the LV should be created with 800M of size.--> Do not perform any mounting for this LV.

• Explanation: Solution as: # pwd /home/admin/ansible # vim lvm.yml --- - name: hosts: all ignore_errors: yes tasks: - name: lvol: lv: data vg: research size: '1500' - debug: msg: 'VG Not found' when: ansible_lvm.vgs.research is not defined - debug: msg: 'LV Can not be created with following size' when: ansible_lvm.vgs.research.size_g < '1.5' - name: lvol: lv: data vg: research size: '800' when: ansible_lvm.vgs.research.size_g < '1.5' - name: filesystem: fstype: ext4 dev: /dev/research/data :wq! # ansible-playbook lvm.yml ---syntax-check # ansible-playbook lvm.yml

Create a file called specs.empty in home/bob/ansible on the local machine as follows:HOST=MEMORY=BIOS=VDA_DISK_SIZE=VDB_DISK_SIZE=Create the playbook /home/bob/ansible/specs.yml which copies specs.empty to all remote nodes' path /root/specs.txt. Using the specs.yml playbook then edit specs.txt on the remote machines to reflect the appropriate ansible facts.

• Explanation: Solution as:

Install and configure ansibleUser sandy has been created on your control node with the appropriate permissions already, do not change or modify ssh keys. Install the necessary packages to run ansible on the control node. Configure ansible.cfg to be in folder /home/sandy/ansible/ansible.cfg and configure to access remote machines via the sandy user. All roles should be in the path /home/sandy/ansible/roles. The inventory path should be in /home/sandy/ansible/invenlory.You will have access to 5 nodes.node3.example.comConfigure these nodes to be in an inventory file where node I is a member of group dev. nodc2 is a member of group test, node3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

• Explanation: In/home/sandy/ansible/ansible.cfg [defaults] inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false [privilegeescalation] become=true become_user=root become_method=sudo become_ask_pass=false In /home/sandy/ansible/inventory [dev] node 1 .example.com [test] node2.example.com [proxy] node3 .example.com [prod] node4.example.com node5 .example.com [webservers:children] prod

===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.===================================================================================Create a playbook called hwreport.yml that produces an output file called /root/hwreport.txt on all managed nodes with the following information:--------------------------------------------------------------------------------------------------------> Inventory host name--> Total memory in MB--> BIOS version--> Size of disk device vda--> Size of disk device vdbEach line of the output file contains a single key-value pair.* Your playbook should:hwreport.empty andsave it as /root/hwreport.txt--> Modify with the correct values.note: If a hardware item does not exist, the associated value should be set to NONE----------------------------------------------------------------------------------------------while practising you to create these file hear. But in exam have to download as perquestation.hwreport.txt file consists.my_sys=hostnamemy_BIOS=biosversionmy_MEMORY=memorymy_vda=vdasizemy_vdb=vdbsize

• Explanation: Solution as: # pwd /home/admin/ansible # vim hwreport.yml - name: hosts: all ignore_errors: yes tasks: - name: download file get_url: url: http://classroom.example.com/content/ex407/hwreport.empty dest: /root/hwreport.txt - name: vdasize replace: regexp: 'vdasize' replace: '{{ ansible_facts.devices.vda.size }}' dest: /root/hwreport.txt register: op1 - debug: var: op1 - name: none replace: regexp: 'vdasize' replace: NONE dest: /root/hwreport.txt when: op1.failed == true - name: vdbsize replace: regexp: 'vdbsize' replace: '{{ ansible_facts.devices.vdb.size }}' dest: /root/hwreport.txt register: op2 - debug: var: op2 - name: none replace: regexp: 'vdbsize' replace: NONE dest: /root/hwreport.txt when: op2.failed == true - name: sysinfo replace: regexp: '{{item.src}}' replace: '{{item.dest}}' dest: /root/hwreport.txt loop: - src: 'hostname' dest: '{{ ansible_facts.fqdn }}' - src: 'biosversion' dest: '{{ ansible_facts.bios_version }}' - src: 'memory' dest: '{{ ansible_facts.memtotal_mb }}' :wq! # ansible-playbook hwreport.yml ---syntax-check # ansible-playbook hwreport.yml

Create an ansible vault password file called lock.yml with the password reallysafepw in the /home/sandy/ansible directory. In the lock.yml file define two variables. One is pw_dev and the password is 'dev' and the other is pw_mgr and the password is 'mgr' Create a regular file called secret.txt which contains the password for lock.yml.

• Explanation: ansible-vault create lock.yml New Vault Password: reallysafepw Confirm: reallysafepw