EMT Practice Test

1. Question Content...

---

Question1: Please set the selinux status as enforcing.

Question2: Configure port forwarding on the system1, as required:
1. Systems in the network 172.24.11.0/24, local port 5423 will be ported to 80 when visiting system1 This setting must be valid permanently

Question3: Configure security web service
Configure a TLS for site http://systeml.domain11.example.com, encrypt a signed certificate from http:// host.domain11.example.com/materials/system1.crt
Get the certificate key from http://host.domain11.example.com/materials/system1.key Get the signature authorization information of the certificate from http://host.domain11.example.com/materials/domain11.crt

Question4: In accordance with the following requirements, sharing /common directory through smb service:
-- your sub service must be in the SAMBA working-set
-- the shared name of common is common
-- the common share just can be shared by the customers in the example.com domain
-- the common must can be available for browsing
-- mary must can login to the smb share and for read operation, "password" is the secret code if it need to be verified.

Question5: Configure the ISCS Server
Configure the system1 provide a ISCSI service disk named iqn.2014-09.com.example.domain11:system1 and meet the following requirements at the same time:
1. Server Port 3260
2. Use iscsi_store as its back-end volume, its size is 3G
3. This service just can be accessed by system2.domian11.example.com

Question6: Create a script to add users
Create a script named /root/mkusers on the system1, this script can achieve to add local users for the system1, and user names of these users are all from a file which contains the usernames list, and meet the following requirements at the same time:
1. This script is required to provide a parameter; this parameter is the file which contains the usernames list
2. This script need provide the following message: Usage：/root/mkusers if it does not provide a parameter, then exit and return the corresponding value
3. This script need provide the following message: Input file not found if it provides a name that does not exist, then exit and return the corresponding value
4. Create a user shell log into /bin/false
5. This script does not need to set password for users
6. You can get the usernames list from the following URL as a test: http://rhgls. domain11.example.com/ materials/ userlist

Question7: Configure NFS service
Configure the NFS service on the system1, as required:
1. Share the directory /public in read only way, just can be accessed by systems in domain11.example.com at the same time
2. Share the directory /protected in rad and write way, Kerberos security encryption required, you can use the key provided by the following URL:
http://host.domain11.example.com/materials/nfs_server.keytab
3. Directory /protected should contain the sub directory named project and deepak;
4. User deepak can access /protected/project in read and write ways

Question8: Share directories via SMB
Configure the SMB service on the system1
Your SMB server must be a member of the work group STAFF
Share /common and share name must be common
Only clients of domain11.example.com can access the common share
Common must be able to browse
User andy must be able to read the content of the share, if necessary, verfication code is redhat

Question9: Deploying your exam system: linking to the iscsi target in the instructor.example.com and distinguish it well, then formatted as ext3 file system. You must can be able to mout the file system of the iscsi target to the /mnt/iscsi directory in your own system and make this file system can automatically mount (permanently mount) after system restart.

Question10: Database Query
Using database Contacts on the system1, and using the corresponding SQL to search and answer the following questions:
1. Password is tangerine's people name?
2. How many people's name is John and live is Shanghai at the same time?

Question11: Configure IPV6 Address
Configure interface eth0 on your test system, using the following IPV6 addresses:
system1 address should be: 2003：acl8：：305/64
system2 address should be: 2003：acl8：：30a/64
Both the two systems must can communicate with systems in network 2003：acl8/64 Addresses must be valid after the restart
Both the two systems must keep the current IPV4 address and can communicate

Question12: Custom User Environment
Create a custom command on system1 and system2 named as qstat, this custome command will execute the following commands:
/bin/ps - Ao pid,tt,user,fname,rsz
This command is valid for all users in the system

Question13: Mount a NFS Share
Mount a NFS share to system1.domain11.example.com on the system2, as required:
1. Mount the /public to the directory /mnt/nfsmount
2. Mount the /protected to the directory /mnt/nfssecure, in a security way, key download URL:
http://host.domain11.example.com/materials/nfs_client.keytab
3. User deepak can creat files on /mnt/nfssecure/project
4. These file systemes automatically hang up when the system is started

Question14: Configure a database
Create a Maria DB database named Contacts, meet the following requirements at the same time:
1. Database should contain the contents of the database replication, URL for copying files is: http:// rhgls.domain11.example.com/materials/users.mdb
2. Database just can be accessed by localhost
3. In addition to user, database juat can be searched by user Luigi, user password is redhat 4. Password for user root i redhat, do not allow an empty password login at the same time

Question15: Given the kernel of a permanent kernel parameters: sysctl=1.
It can be shown on cmdline after restarting the system.
Kernel of /boot/grub/grub.conf should be added finally, as

Question16: Expand your web service including a virtual hosting, address is：http://wwwX.example.com, X is the number of your exam machine. However, requiring you do as the following:
-- Set up the DocumentRoot of this virtual hosting as /var/http/virtual
-- Download ftp：//instructor.example.com/pub/rhce/www.html
-- Rename www.html file document as index.html
-- Move this file document to this virtual hosting's DocumentRoot
-- Don't do any changes to this document
-- Making sure that harry users are able to create project in /var/http/virtual Attention: Original web address is http://serverX.example.com must also can be browsed. The DNS of the Server instructor.example.com has already been analyzed as the domain wwwX.example.com.

Question17: Configure the Virtual Host
Expand your web server on the system1, create a virtual host for site
http://www.domain11.example.com
Then Executes the following steps:
1. Setting the DocumentRoot to /var/www/virtual
2. From http://rhgls.domain11.example.com/materials/www.html
3. Download a file, rename as index.html, don't modify file index.html content
4. Put the file index.html under the directory DocumentRoot of Virtual Host
5. Ensure that user andy can create files under directory /var/www/virtual Note: original site http://systeml.domian11.example.com/ must still be able to be accessed, Name server domain11.example.com provide the domain name resolution for host name

Question18: Creating a directory /var/http/virtual/limited, Just limiting the local user to enter and browse the shared web page in this directory and users can't access this webpage if they are not the local user.

Question19: Configure Multi-User Mount
Share the directory /devops through SMB on the systeml, as required:
1. Share name is devops
2. The shared directory devops just can be used by clients in domain11.example.com
3. The shared directory devop must be able to be browsed
4. User silene must can be able to access this share through read, access code is redhat
5. User akira must can be able to access this share through read and write, access code is redhat
6. This share permanently mount to system2. domain11.example.com the user /mnt/dev, make user silene as authentication any users can get temporary write permissions from akira

Question20: According to the following requirements, deploying your ftp login rule:
1. Users in example.com domain must be able to login to your ftp server as an anonymous user.
2. But users outside the example.com domain are unable to login to your server

Question21: Configure the local mail service
Configure the mail service on system1 and system2, as required:
1. These systems do not accept external send mails
2. Any mails sent locally are automatically routed to rhgls.domain11.example.com
3. Mails sent from these systems will be displayed from rhgls.domain11.example.com 4. You can send mail to local user 'authur' to test your configuration system rhgls.domain11.example.com
5. Have already configured to transfer this user's mails to the following URL rhgls.domain11.example.com/ received_mail/11

Question22: Via nfs service share the /common directory in your system, just doine ONE share in example.com domain.

Question23: Arrange a web service address is: http://serverX.example.com, X is the number of your exam machine.
Deploy it in accordance with the following requirements:
Download ftp：//instructor.example.com/pub/rhce/server.html
Can not do any modification to file document server.html
Rename file document server.html as index.html
Copy the file document server.html to DocumentRoot

Question24: Create a Shell script /root/program:
The shell script will come back to "user" parameter when you are entering "kernel" parameter.
The shell script will come back to "kernel" when you are entering "user" parameter.
It will output the standard error when this script "usage:/root/program kernel|user" don't input any parameter or the parameter you inputted is entered as the requirements.

Question25: Implement a web server
Configure a site http://systeml. domain11.example.com/ on the system1, then executes the following steps:
1. From http://rhgls. domain11.example.com/materials/station.html
2. Download a file, rename the file as index.htm, do not modify the file content
3. Copy the file index.html to the DocumentRoot directory of your web server
4. Clients from the domain group3.example.com can access the web service
5. Clients from my133t.org refuse to access the web service

Question26: Configure the Link Aggreation
Configure a link between systeml. group3.example.com and system2. group3.example.com as required:
This link use interface eth1 and eth
This link still can work when one interface failed
This link use the following address 172.16.3.20/255.255.255.0 in systeml This link use the following address 172.16.3.25/255.255.255.0 in in system2 This link remains normal after the system is restarted

Question27: Configure the ftp to allow anonymously download the directory /var/ftp/pub, and reject the domain t3gg.com to access.

Question28: Dynamic WEB content
Configure to provide dynamic web content on the system1, as required:
1. Dynamic content provided by a virtual machine named dynamic.domain11.example.com
2. Virtual host listening on port 8909
3. Download a script from http://rhgls.domain11.example.com/materials/webapp.wsgi, then put it in the right place, don't modify the file content in any situations
4. Dynamically generated web page should be received when clients access http:// dynamic.domain11example.com:8909/
5. This http:// dynamic.domain11.example.com:8909/ must be able to be accessed by all system of domain11.example.com

Question29: Shutdown the /root/cdrom.iso under /opt/data, and set as boot automatically mount.

Question30: In accordance with the following requirements to deploy ssh login service:
1. harry belongs to example.com which can remote login your systems.
2. However, users of remote.test can not use ssh login to your machine.

Question31: Configure Web Content Access
Create a directory private under directory DocumentRoot of web server on the system1, as required:
1. Download a file copy to this directory from http://rhgls.domain11.example.com/materials/private.html and rename it as index.html.
2. Don't make any changes to this file content
3. Any users from the system1 can browse the content of the private, but cannot access this directory content from other systems

Question32: Configure ISCISI Clients
Configure the system2 to make it can link to iqn.2014-09.com.example.domain11:system1 provided by the system, meet the following requirements at the same time:
1. ISCISI devices automatically loads during the system start-up
2. Block device ISCISI contains a 2100MIB partition, and formatted as ext4
3. This partition mount to the /mnt/data, mount automatically during the system start-up

Question33: Deploy your SMTP mail service and complete it by the following requirements:
-- Your mail service must can receive the local and remote mails
-- harry must can receive the remote mail
-- The mail which is delivered to mary should be put into the mail /var/spool/mail/mary

Question34: Configure a mail alias to your MTA, for example, send emails to harry but mary actually is receiving emails.

Question35: Create a script
Create a script named /root/foo.sh on the system1, make it provide the following characteristics:
When running /root/foo.sh redhat, the output is fedora
When running /root/foo.sh fedora, the output is redhat
When there is no parameter or parameter is not redhat or fedora, the following information generated by the error output: /root/foo.sh redhat:fedora

Question36: Cofigure SELINUX
Modify the state of selinux to Enforcing mode
Use VIM /etc/selinux

Question37: Please open the ip_forward, and take effect permanently.

Question38: Configure the SSH Access as required:
Users can visit your two virtual machine systems via clients of domain group3.example.com through SSH remote

Question39: Forbidden the Mary user configuration tasks in your system.

Question40: Configure ssh to allow user harry to access, reject the domain t3gg.com (172.25.0.0/16) to access.