[Jun 08, 2022] EX447 certification guide Q&A from Training Expert ValidExam [Q10-Q27]

Q10. Create a role called sample-apache in that enables and starts httpd, enables and starts the firewall and allows the webserver service. Create a template calledindex.html.j2which creates and serves a message from/var/www/html/index.htmlWhenever the content of the file changes, restart the webserver service.
Welcome to [FQDN] on [IP]
Replace the FQDN with the fully qualified domain name and IP with the ip address of the node using ansible facts. Lastly, create a playbook in/home/sandy/ansible/calledapache.ymland use the role to serve the index file on webserver hosts.

Q11. Create a file calledpackages.yml in/home/sandy/ansibleto install some packages for the following hosts. On dev, prod and webservers install packages httpd, mod_ssl, and mariadb. On dev only install the development tools package. Also, on dev host update all the packages tothe latest.

Q12. Using the Simulation Program,perform the following tasks:
1. Use an ansible ad-hoc command, check the connectivity of your servers.
2. Use an ad-hoc ansible command, find the free space of your servers.
3. Use an ad-hoc ansible command, find out the memory usage of your servers.
4. Do an ls -l on the targets /var/log/messages file.
5. Tail the contents of the targets /var/log/messages file.

Q13. Create an ansible vault password file calledlock.ymlwith the passwordreallysafepwin the
/home/sandy/ansibledirectory. In the lock.yml file define two variables. One ispw_devand the password is
‘dev’ and the other ispw_mgrand the password is ‘mgr’ Create a regular file calledsecret.txtwhich contains the password for lock.yml.

Q14. Create a file calledrequirements.ymlin/home/sandy/ansible/rolesa file calledrole.yml in
/home/sandy/ansible/.Thehaproxy-roleshould be used on the host. And when you curl
http://node3.example.comit should display “Welcome tonode4.example.com” and when you curl again
“Welcome tonode5.example.com” The

Q15. Create a playbook calledwebdev.ymlin’home/sandy/ansible. The playbook will create a directory Avcbdev on dev host. The permission of the directory are 2755 and owner is webdev. Create a symbolic link from
/Webdevto /var/www/html/webdev. Serve a file from Avebdev7index.html which displays the text
“Development” Curlhttp://node1.example.com/webdev/index.htmlto test

Q16. Create a playbook /home/bob /ansible/motd.yml that runs on all inventory hosts and docs the following: The playbook should replaee any existing content of/etc/motd in the following text. Use ansible facts to display the FQDN of each host On hosts in the dev host group the line should be “Welcome to Dev Server FQDN”.
On hosts in the webserver host group the line should be “Welcome to Apache Server FQDN”.
On hosts in the database host group the line should be “Welcome to MySQL Server FQDN”.

Q17. Install and configure ansible
Userbobhas been created on your control node. Give him the appropriate permissions on the control node.Install the necessary packages to run ansible on the control node.
Create a configuration file /home/bob/ansible/ansible.cfg to meet the following requirements:
* The roles path should include /home/bob/ansible/roles, as well as any other path that maybe required for the course of the sample exam.
* The inventory file path is /home/bob/ansible/inventory.
* Ansible should be able to manage 10 hosts at a single time.
* Ansible should connect to all managed nodes using the bob user.
Create an inventory file for the following five nodes:
nodel.example.com
node2.example.com
node3.example.com
node4.example.com
node5.example.com
Configure these nodes to be in an inventory file where node1 is a member of groupdev.nodc2 is a member of group test, nodc3 is a member of group nodc4 and node 5 are members of groupprod.Also,prodis a member of group webservers.

Q18. Create an empty encrypted file called and set the passwordtonotsafepw.
Rekey the passwordtoiwejfj2221.

Q19. Create a file calledadhoc.shin/home/sandy/ansiblewhich will use adhoc commands to set up anew repository.
The name of the repo will be ‘EPEL’ the description ‘RHEL8’ the baseurl is’https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rmp’there is no gpgcheck, but you should enable the repo.
* You should be able to use an bash script using adhoc commands to enable repos. Depending on your lab setup, you may need to make this repo “state=absent” after you pass this task.