Free Red Hat Certified Specialist in Ansible Automation Exam EX407 Exam Practice Test

Using the Simulation Program, perform the following tasks:Static Inventories Task:1. Add a new group to your default ansible host file. call the group [ec2]2. Add a new host to the new group you created.3. Add a variable to a new host entry in the /etc/ansible/hosts file. Add the following. localhost http_port=80 maxRequestsPerChild=8084. Check to see if maxRequestsPerChild is pulled out with an ad-hoc command.5. Create a local host file and put a target group and then a host into it. Then ping it with an ad-hoc command.

• Explanation: 1. Edit the /etc/ansible/hosts file. Add a group. 2. Edit the /etc/ansible/hosts file. Add a user under the group you created. 3. Edit the /etc/ansible/hosts file. Find a host. if we add a variable called maxRequestsPerChild to the host it would look like this. host1 maxRequestsPerChild=808 4. ansible ec2 -m shell -a 'echo {{ maxRequestsPerChild }}' 5. Edit a local file. It could be called anything. Lets call it myhosts. Inside the file it would have a host like the following. [mygroup] myusername1.mylabserver.com

Create a file called mysecret.yml on the control host using ansible vault in home/bob/ansible. Set the password to 'notasafepass' and inside the file create a variable called dev_pass with the value of devops. Save the file. Then go back in the file and change dev_pass value to devops123. Then change the vault password of mysecret.yml to verysafepass

• Explanation: ansible-vault create lock.yml New Vault Password: reallysafepw Confirm: reallysafepw

Create a playbook called webdev.yml in 'home/sandy/ansible. The playbook will create a directory Avcbdev on dev host. The permission of the directory are 2755 and owner is webdev. Create a symbolic link from /Webdev to /var/www/html/webdev. Serve a file from Avebdev7index.html which displays the text 'Development' Curl http://node1.example.com/webdev/index.html to test

• Explanation: Solution as:

===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.===================================================================================Use Ansible Galaxy with a requirements file called /home/admin/ansible/roles/install.yml to download and install roles to /home/admin/ansible/roles from thefollowing URLs:http:// classroom.example.com /role1.tar.gz The name of this role should be balancerhttp:// classroom.example.com /role2.tar.gz The name of this role should be phphello

• Explanation: Solution as: # pwd /home/admin/ansible/roles # vim install.yml --- - src: http://classroom.example.com/role1.tar.gz name: balancer - src: http://classroom.example.com/role2.tar.gz name: phphello :wq! # pwd /home/admin/ansible # ansible-galaxy install -r roles/install.yml -p roles

Using the Simulation Program, perform the following tasks:1. Use an ansible ad-hoc command, check the connectivity of your servers.2. Use an ad-hoc ansible command, find the free space of your servers.3. Use an ad-hoc ansible command, find out the memory usage of your servers.4. Do an ls -l on the targets /var/log/messages file.5. Tail the contents of the targets /var/log/messages file.

• Explanation: 1. ansible all -m ping 2. ansible all -a '/bin/df -h' 3. ansible all -a '/usr/bin/free' 4. ansible all -a 'ls -l /var/log/messages' 5. ansible local -b -a 'tail /var/log/messages'

===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.===================================================================================Modify file content.------------------------Create a playbook called /home/admin/ansible/modify.yml as follows:* The playbook runs on all inventory hosts* The playbook replaces the contents of /etc/issue with a single line of text asfollows:--> On hosts in the dev host group, the line reads: ''Development''--> On hosts in the test host group, the line reads: ''Test''--> On hosts in the prod host group, the line reads: ''Production''

• Explanation: Solution as: # pwd /home/admin/ansible # vim modify.yml --- - name: hosts: all tasks: - name: copy: content: 'Development' dest: /etc/issue when: inventory_hostname in groups['dev'] - name: copy: content: 'Test' dest: /etc/issue when: inventory_hostname in groups['test'] - name: copy: content: 'Production' dest: /etc/issue when: inventory_hostname in groups['prod'] :wq # ansible-playbook modify.yml ---syntax-check # ansible-playbook modify.yml

Install and configure ansibleUser bob has been created on your control node. Give him the appropriate permissions on the control node. Install the necessary packages to run ansible on the control node.Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:* The roles path should include /home/bob/ansible/roles, as well as any other path that may be required for the course of the sample exam.* The inventory file path is /home/bob/ansible/inventory.* Ansible should be able to manage 10 hosts at a single time.* Ansible should connect to all managed nodes using the bob user.Create an inventory file for the following five nodes:Configure these nodes to be in an inventory file where node1 is a member of group dev. nodc2 is a member of group test, nodc3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

• Explanation: In/home/sandy/ansible/ansible.cfg [defaults] inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false [privilegeescalation] become=true become_user=root become_method=sudo become_ask_pass=false In /home/sandy/ansible/inventory [dev] node 1 .example.com [test] node2.example.com [proxy] node3 .example.com [prod] node4.example.com node5 .example.com [webservers:children] prod

Create a role called sample-apache in /home/sandy/ansible/roles that enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template called index.html.j2 which creates and serves a message from /var/www/html/index.html Whenever the content of the file changes, restart the webserver service.Welcome to [FQDN] on [IP]Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in /home/sandy/ansible/ called apache.yml and use the role to serve the index file on webserver hosts.

• Explanation: /home/sandy/ansible/apache.yml /home/sandy/ansible/roles/sample-apache/tasks/main.yml /home/sandy/ansible/roles/sample-apache/templates/index.html.j2 In /home/sandy/ansible/roles/sample-apache/handlers/main.yml

Create a playbook called issue.yml in /home/sandy/ansible which changes the file /etc/issue on all managed nodes: If host is a member of (lev then write 'Development' If host is a member of test then write 'Test' If host is a member of prod then write 'Production'

• Explanation: Solution as:

===================================================================================control.realmX.example.com _ workstation.lab.example.comnode1.realmX.example.com _ servera.lab.example.comnode2.realmX.example.com _ serverb.lab.example.comnode3.realmX.example.com _ serverc.lab.example.comnode4.realmX.example.com _ serverd.lab.example.comnode5.realmX.example.com- username:root, password:redhat- username:admin, password:redhatnote1. don't change 'root' or 'admin' password.note2. no need to create ssh-keygen for access, its pre-definednote3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.===================================================================================Install and configure Ansible on the control-node control.realmX.example.com asfollows:---------------------------------------------------------------------------------------------> Install the required packages--> Create a static inventory file called /home/admin/ansible/inventory as follows:node1.realmX.example.com is a member of the dev host groupnode2.realmX.example.com is a member of the test host groupnode3.realmX.example.com & node4.realmX.example.com are members of the prodhost groupnode5.realmX.example.com is a member of the balancers host group.prod group is a member of the webservers host group--> Create a configuration file called ansible.cfg as follows:--> The host inventory file /home/admin/ansible/inventory is defined--> The location of roles used in playbooks is defined as /home/admin/ansible/ roles

• Explanation: Solution as: Through physical host, login to workstation.lab.example.com with user root. # ssh root@workstation.lab.example.com # hostname workstation.lab.example.com # yum install platform-python* # su - admin # pwd /home/admin/ # vim .vimrc # mkdir -p ansible/roles # cd ansible # vim inventory [dev] servera.lab.example.com [test] serverb.example.com [prod] serverc.example.com serverd.example.com [balancer] serverd.lab.example.com [webservers:children] prod :!wq # vim ansible.cfg [defaults] inventory = ./inventory role_path = ./roles remote_user = admin ask_pass = false [privilege_escalation] become = true become_method = sudo become_user = root become_ask_pass = false :!wq # ansible all ---list-hosts