Free Red Hat Certified Specialist in Advanced Automation: Ansible Best Practices Exam EX447 Exam Practice Test

Create a file called mysecret.yml on the control host using ansible vault in home/bob/ansible. Set the password to 'notasafepass' and inside the file create a variable called dev_pass with the value of devops. Save the file. Then go back in the file and change dev_pass value to devops123. Then change the vault password of mysecret.yml to verysafepass

• Explanation: ansible-vault create lock.yml New Vault Password: reallysafepw Confirm: reallysafepw

Create a file called specs.empty in home/bob/ansible on the local machine as follows:HOST=MEMORY=BIOS=VDA_DISK_SIZE=VDB_DISK_SIZE=Create the playbook /home/bob/ansible/specs.yml which copies specs.empty to all remote nodes' path /root/specs.txt. Using the specs.yml playbook then edit specs.txt on the remote machines to reflect the appropriate ansible facts.

• Explanation: Solution as:

Create a playbook that changes the default target on all nodes to multi-user tarqet. Do this in playbook file called target.yml in /home/sandy/ansible

• Explanation: - name: change default target hosts: all tasks: - name: change target file: src: /usr/lib/systemd/system/multi-user.target dest: /etc/systemd/system/default.target state: link

Create an ansible vault password file called lock.yml with the password reallysafepw in the /home/sandy/ansible directory. In the lock.yml file define two variables. One is pw_dev and the password is 'dev' and the other is pw_mgr and the password is 'mgr' Create a regular file called secret.txt which contains the password for lock.yml.

• Explanation: ansible-vault create lock.yml New Vault Password: reallysafepw Confirm: reallysafepw

Create a file called requirements.yml in /home/sandy/ansible/roles to install two roles. The source for the first role is geerlingguy.haproxy and geerlingguy.php. Name the first haproxy-role and the second php-role. The roles should be installed in /home/sandy/ansible/roles.

• Explanation: in /home/sandy/ansible/roles vim requirements.yml Run the requirements file from the roles directory: ansible-galaxy install -r requirements.yml -p /home/sandy/ansible/roles

Install and configure ansibleUser bob has been created on your control node. Give him the appropriate permissions on the control node. Install the necessary packages to run ansible on the control node.Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:* The roles path should include /home/bob/ansible/roles, as well as any other path that may be required for the course of the sample exam.* The inventory file path is /home/bob/ansible/inventory.* Ansible should be able to manage 10 hosts at a single time.* Ansible should connect to all managed nodes using the bob user.Create an inventory file for the following five nodes:Configure these nodes to be in an inventory file where node1 is a member of group dev. nodc2 is a member of group test, nodc3 is a member of group proxy, nodc4 and node 5 are members of group prod. Also, prod is a member of group webservers.

• Explanation: In/home/sandy/ansible/ansible.cfg [defaults] inventory=/home/sandy/ansible/inventory roles_path=/home/sandy/ansible/roles remote_user= sandy host_key_checking=false [privilegeescalation] become=true become_user=root become_method=sudo become_ask_pass=false In /home/sandy/ansible/inventory [dev] node 1 .example.com [test] node2.example.com [proxy] node3 .example.com [prod] node4.example.com node5 .example.com [webservers:children] prod

Create a playbook /home/bob /ansible/motd.yml that runs on all inventory hosts and docs the following: The playbook should replaee any existing content of/etc/motd in the following text. Use ansible facts to display the FQDN of each hostOn hosts in the dev host group the line should be 'Welcome to Dev Server FQDN'.On hosts in the webserver host group the line should be 'Welcome to Apache Server FQDN'.On hosts in the database host group the line should be 'Welcome to MySQL Server FQDN'.

• Explanation: /home/sandy/ansible/apache.yml /home/sandy/ansible/roles/sample-apache/tasks/main.yml

Create a playbook called regulartasks.yml which has the system that append the date to /root/datefile every day at noon. Name is job 'datejob'

• Explanation: Solution as:

Create a role called sample-apache and store it in /home/bob/ansible/roles. The role shouldsatisfy the following requirements:*In the role, install and enable httpd. Also enable the firewall to allow http. Also run the template*index.html.j2 and make sure this runs Create a template index.html.j2 that displays 'Welcome to the server HOSTNAME'In a play called apache.yml in /home/bob/ansible/ run the sample-apache role.

• Explanation: /home/sandy/ansible/apache.yml /home/sandy/ansible/roles/sample-apache/tasks/main.yml /home/sandy/ansible/roles/sample-apache/templates/index.html.j2 In /home/sandy/ansible/roles/sample-apache/handlers/main.yml

Create a role called sample-apache in /home/sandy/ansible/roles that enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template called index.html.j2 which creates and serves a message from /var/www/html/index.html Whenever the content of the file changes, restart the webserver service.Welcome to [FQDN] on [IP]Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in /home/sandy/ansible/ called apache.yml and use the role to serve the index file on webserver hosts.

• Explanation: /home/sandy/ansible/apache.yml /home/sandy/ansible/roles/sample-apache/tasks/main.yml /home/sandy/ansible/roles/sample-apache/templates/index.html.j2 In /home/sandy/ansible/roles/sample-apache/handlers/main.yml