Red Hat Certified Specialist in Ansible (EX407) Practice Exam

• Edit /etc/ansible/ansible.cfg and add the following line: inventory = /etc/ansible/exam_inv/

sudo chmod u+x /etc/ansible/exam_inv/inv.py

Create a file named /etc/ansible/exam_inv/group with the following content:

[testservers]
node2

Edit the Ansible configuration file:

vim /etc/ansible/ansible.cfg

Add the following line:

timeout = 60

Edit /etc/ansible/ansible.cfg and add the following line:

forks  = 10

The contents of ad-hoc.sh should be as follows: #!/bin/sh ## This script should run without error completing the documented tasks before completing the exam.

# Create the user john on labservers
ansible labservers -b -m user -a "name=john"

# Copy the file demo to /home/ansible/demo on node1
ansible node1 -m copy -a "src=/home/ansible/files/demo dest=/home/ansible/demo"

# Install elinks on labservers
ansible labservers -b -m yum -a "name=elinks state=latest"

• Create the a simple text filled called /home/ansible/exam/secure with the following contents:

    secret: bluebird
  

• Run ansible-vault encrypt /home/ansible/exam/secure providing a password you keep noted.

Create a playbook with the following contents:

--- 
- hosts: localhost
  vars_files:
    - /home/ansible/exam/secure
  become: yes
  tasks:
    - name: create classified directory
      file:
        state: touch
        name: /mnt/classified
    - name: insert secret text into file
      lineinfile:
        path: /mnt/classified
        line: "{{ secret }}

Edit the file /home/ansible/exam/ad-hoc-2.sh to contain the following: #!/bin/sh

## Write Ansible ad-hoc commands below

# Create new file called /opt/test.sh
# Set owner of the file to ansible
# Set mode to 0755
ansible localhost -b -m file -a 'state=touch name=/opt/test.sh mode=0755 owner=ansible'


# Add content to the file:
# #!/bin/sh
# echo hi there

ansible -b localhost -m lineinfile -a 'line="#!/bin/sh\necho hi there" path=/opt/test.sh'

Note: this solution assumes httpd is installed (this will be done in a later task). The file output will resemble the following:

CentOS: 10.0.1.221 02:7c:ef:0a:2b:4c

Create a file called /home/ansible/exam/facts.yml and add the following contents to it:

---
- hosts: web
  become: yes
  tasks:
    - name: create file
      file:
        state: touch
        name: /var/www/html/facts.htm
    - name: add line to file containing facts
      lineinfile:
        path: /var/www/html/facts.htm
        line: "{{ ansible_distribution }}: {{ ansible_default_ipv4['address'] }} {{ ansible_default_ipv4['macaddress'] }} "

• Run ansible-galaxy init /home/ansible/exam/roles/httpdServer to create a frame for the role.

• Edit /home/ansible/exam/roles/httpdServer/tasks/main.yml to contain the following:

   ---
   # tasks file for /home/ansible/exam/roles/httpdServer
  
   - yum:
       state: latest
       name: httpd
  
   - service:
       name: httpd
       state: started
       enabled: yes
  

• Edit /home/ansible/exam/roles/httpdServer/handlers/main.yml to contain the following:

   ---
   # handlers file for /home/ansible/exam/roles/httpdServer
  
   - name: restart httpd
     service:
       name: httpd
       state: restarted
     listen: restart httpd
  

• Deploy a file to /var/www/html/index.html containing the hostname of the host where it is deployed.
• Change LogLevel to error in /etc/httpd/conf/httpd.conf.
• Restart httpd only on httpd.conf file change.

Solution:

Create a file called /home/ansible/exam/webserver.yml containing the following:

	---
	- hosts: web
	  become: yes
	  roles:
	    - /home/ansible/exam/roles/httpdServer
	  tasks:
	    - name: create index file with hostname
	      copy:
	        content: "{{ ansible_hostname }}"
	        dest: /var/www/html/index.html
	    - name: update log level
	      replace:
	        path: /etc/httpd/conf/httpd.conf
	        regexp: "LogLevel.*$"
	        replace: "LogLevel error"
	      notify: "restart httpd"

Create a file called /home/ansible/exam/install_role.yml containing similar content (actual role used my vary):

---
- hosts: localhost
  tasks:
    - name: install role
      shell: "ansible-galaxy -p /home/ansible/exam/roles/ install MindPointGroup.RHEL7-STIG"

Create the file /home/ansible/exam/users.yml containing the following:

---
- hosts: localhost
  tasks:
  - name: download user_list.yml
    get_url:
      url: http://files.example.com/user_list.yml
      dest: /home/ansible/files/user_list.yml

- hosts: node1
  become: yes
  vars_files:
    - /home/ansible/files/user_list.yml
  tasks:
  - name: create groups from file
    group: 
      name: "{{ item }}"
    with_items:
      - "{{ user_groups }}"
  - name: create users for each group in staff
    user:
      name: "{{ item }}"
      group: staff
    with_items:
      - "{{ staff }}"
  - name: create users for each group in students
    user:
      name: "{{ item }}"
      group: students
    with_items:
      - "{{ students }}"
  - name: create users for each group in faculty
    user:
      name: "{{ item }}"
      group: faculty
    with_items:
      - "{{ faculty }}"

Create a file called /home/ansible/exam/unarchive.yml that contains the following text:

---
- hosts: localhost
  become: yes
  tasks:
  - name: download files.tgz
    get_url:
      url: http://files.example.com/files.tgz
      dest: /mnt/files.tgz
  - name: unarchive files.tgz
    unarchive:
      src: /mnt/files.tgz
      dest: /mnt/

Create a file called /home/ansible/exam/make_secret.yml containing the following text:

---
- hosts: localhost
  become: yes
  tasks:
  - name: create file
    block:
      - file:
          name: /mnt/secret/newfile
          state: touch
    rescue:
      - name: output error message
        debug:
          msg: "Unable to create secret file"

Create a file called /home/ansible/exam/break.yml that contains the following text:

---
- hosts: node2
  become: yes
  ignore_errors: yes
  tasks:
  - name: install fluffy
    yum:
      name: fluffy
      state: latest
  - debug:
      msg: "Attempted fluffy install!"