EX200 Questions and Answers

Solution:

firewall-cmd --permanent --add-service=http

firewall-cmd --reload

firewall-cmd --list-services

Detailed Explanation:

--permanent saves the rule.

--reload applies it.

--list-services verifies the active configuration.

Firewalld remains the standard firewall interface in RHEL 10. ( Red Hat Documentation )

Solution:

dnf install -y dnf-automatic

systemctl enable --now dnf-automatic.timer

systemctl list-timers --all | grep dnf

Detailed Explanation:

dnf-automatic provides automated update checking and installation features.

The timer unit schedules the checks.

RHEL 10 DNF documentation specifically documents the dnf-automatic timer units. ( Red Hat Documentation )

Solution:

stratis filesystem snapshot pool1 fs1 fs1-snap

stratis filesystem list

Detailed Explanation:

This creates a snapshot of the existing Stratis file system.

Snapshots are useful for rollback, backup, and testing operations.

Stratis features, including pool and file-system management, are part of RHEL 10 file-system administration. ( Red Hat Documentation )

Solution:

Read-only access:

setfacl -m u:john:r-- /share/dev

Read-write access:

setfacl -m u:john:rw- /share/dev

Remove ACL permissions:

setfacl -m u:john:--- /share/dev

Detailed Explanation:

setfacl -m modifies the ACL.

u:john:r-- grants read only.

u:john:rw- grants read and write.

u:john:--- effectively removes access for that ACL entry.

ACLs are used when standard owner/group/other permissions are not enough.

Solution:

podman pull registry.access.redhat.com/ubi10/ubi

podman run -d --name webtest registry.access.redhat.com/ubi10/ubi sleep 3600

podman ps

Detailed Explanation:

podman pull downloads the image.

podman run -d starts the container in the background.

Rootless Podman is a normal RHEL container workflow.

RHEL 10 container documentation continues to center on Podman for image and container management. ( Red Hat Documentation )

Solution:

groupadd admin

mkdir -p /common/admin

chgrp admin /common/admin

chmod 2770 /common/admin

Detailed Explanation:

groupadd admin creates the group.

chgrp admin assigns the group ownership.

2770 means:

2 = SGID

7 = owner rwx

7 = group rwx

0 = others no access

This is a standard shared group-admin directory design.

Solution:

subscription-manager config --rhsm.manage_repos=0

Detailed Explanation:

This disables repository management by Subscription Manager, exactly as shown in the lab dataset.

Use this when a task wants system repositories disabled so custom repos can be managed manually.