Most Asked RHCE Interview Questions [2025 Updated]

RHCSA Foundational Skills

1. What is the RHCE certification, and how does it extend RHCSA?

The RHCE certification validates advanced skills in RHEL system administration and Ansible automation, building on RHCSA’s foundational tasks like user management and file systems. RHCE emphasizes automation, complex networking, and security for enterprise environments.

• Importance: Proves expertise in scalable system management.

• Example: Automating a multi-node web server deployment.

• Verification: Review RHCE objectives at redhat.com.

2. How do you check the RHEL version?

Use commands to identify the OS version for compatibility with automation tools and updates.

• Commands:

  cat /etc/redhat-release
  # Output: Red Hat Enterprise Linux release 9.3 (Plow)

• Importance: Ensures software and automation compatibility.

• Verification: Cross-check with uname -r.

3. How do you create a user with sudo privileges?

Create a user and add them to the wheel group for administrative access.

• Commands:

  sudo useradd -m ansibleadm
  sudo usermod -aG wheel ansibleadm
  sudo passwd ansibleadm

• Importance: Enables secure administrative tasks.

• Verification: Run sudo -l -U ansibleadm.

4. How do you set group permissions for a directory?

Configure ownership and permissions for shared access.

• Commands:

  sudo chown :developers /shared
  sudo chmod g+rw /shared

• Importance: Facilitates collaborative workflows.

• Verification: Check ls -l /shared.

5. How do you check system uptime?

Monitor system runtime to plan maintenance.

• Commands:

  uptime
  # Output: 10:30:01 up 6 days

• Importance: Tracks server availability.

• Verification: Cross-check with who -b.

6. How do you schedule a cron job?

Use crontab to automate recurring tasks.

• Commands:

  crontab -e
  # Add: 0 3 * * * /backup.sh

• Importance: Reduces manual effort.

• Verification: Check crontab -l.

7. How do you create an LVM logical volume?

Set up Logical Volume Management for flexible storage.

• Commands:

  sudo pvcreate /dev/sdb1
  sudo vgcreate app_vg /dev/sdb1
  sudo lvcreate -L 10G -n app_lv app_vg
  sudo mkfs.ext4 /dev/app_vg/app_lv

• Importance: Supports dynamic storage needs.

• Verification: Check lvs and df -h.

8. How do you configure a static IP address?

Use nmcli to ensure consistent network connectivity.

• Commands:

  sudo nmcli con mod "eth0" ipv4.addresses "192.168.1.100/24" ipv4.gateway "192.168.1.1"
  sudo nmcli con up "eth0"

• Importance: Maintains stable networking.

• Verification: Check ip addr show eth0.

9. How do you manage firewalld services?

Configure firewall rules to secure network traffic.

• Commands:

  sudo firewall-cmd --zone=public --add-service=http --permanent
  sudo firewall-cmd --reload

• Importance: Protects services from unauthorized access.

• Verification: Check firewall-cmd --list-services.

10. How do you troubleshoot SELinux denials?

Analyze and resolve SELinux access issues using logs and tools.

• Commands:

  sudo sealert -a /var/log/audit/audit.log
  sudo audit2allow -a -M mypolicy
  sudo semodule -i mypolicy.pp

• Importance: Ensures secure application functionality.

• Verification: Retest the operation.

Ansible Automation Basics

11. What is Ansible, and why is it essential for RHCE?

Ansible is an open-source automation tool for configuration management, application deployment, and task orchestration. It’s central to RHCE EX294 for automating complex, scalable system administration tasks.

• Importance: Streamlines multi-server management.

• Example: Automating Nginx deployment across 50 nodes.

• Verification: Check ansible --version.

12. How do you install Ansible on RHEL 9?

Install Ansible using the system package manager.

• Steps:

  • Enable EPEL or Red Hat repositories.

  • Run: sudo dnf install -y ansible.

• Importance: Enables automation workflows.

• Verification: Run ansible --version.

13. How do you set up an Ansible inventory file?

Define managed nodes in a structured inventory file.

• Example:

  # inventory.ini
  [webservers]
  192.168.1.10
  192.168.1.11
  [dbservers]
  192.168.1.20

• Importance: Specifies automation targets.

• Verification: Run ansible-inventory --list -i inventory.ini.

14. How do you test Ansible connectivity to hosts?

Use the ping module to verify SSH connectivity.

• Command:

  ansible all -i inventory.ini -m ping

• Importance: Confirms communication with nodes.

• Verification: Look for pong responses.

15. How do you run an ad-hoc Ansible command?

Execute a single task on managed nodes without a playbook.

• Command:

  ansible webservers -i inventory.ini -m command -a "uptime"

• Importance: Enables quick task execution.

• Verification: Check command output.

16. What is an Ansible playbook, and how do you create one?

A playbook is a YAML file defining automation tasks.

• Example:

  # playbook.yml
  ---
  - name: Install httpd
    hosts: webservers
    tasks:
      - name: Install httpd package
        dnf:
          name: httpd
          state: present
        become: yes

• Importance: Enables complex automation workflows.

• Verification: Run ansible-playbook playbook.yml.

17. How do you execute an Ansible playbook?

Run a playbook to apply configurations across hosts.

• Command:

  ansible-playbook -i inventory.ini playbook.yml

• Importance: Applies multi-task automation.

• Verification: Check task output for success.

18. How do you use variables in Ansible?

Define variables to make playbooks reusable and dynamic.

• Example:

  # playbook.yml
  ---
  - name: Use variables
    hosts: webservers
    vars:
      package_name: httpd
    tasks:
      - name: Install package
        dnf:
          name: "{{ package_name }}"
          state: present
        become: yes

• Importance: Enhances playbook flexibility.

• Verification: Run ansible-playbook playbook.yml.

19. How do you secure Ansible communication?

Use SSH keys for secure host connections.

• Steps:

  • Generate key: ssh-keygen.

  • Copy key: ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected].

• Importance: Protects automation data.

• Verification: Test with ansible all -m ping.

20. How do you handle errors in Ansible playbooks?

Manage task failures using error-handling directives.

• Example:

  - name: Try command
    command: /bin/false
    ignore_errors: yes

• Importance: Ensures robust automation.

• Verification: Run playbook and check output.

Advanced Ansible Automation

21. How do you create an Ansible role?

Use ansible-galaxy to generate a role structure, then add tasks.

• Commands:

  ansible-galaxy init webserver
  # Edit webserver/tasks/main.yml
  - name: Install httpd
    dnf:
      name: httpd
      state: present
    become: yes

• Importance: Organizes reusable automation code.

• Verification: Run ansible-playbook -i inventory.ini webserver.yml.

22. How do you apply an Ansible role in a playbook?

Reference roles in the playbook’s roles section.

• Example:

  # playbook.yml
  ---
  - name: Deploy webserver
    hosts: webservers
    roles:
      - webserver

• Importance: Simplifies complex automation.

• Verification: Run ansible-playbook playbook.yml.

23. How do you use Ansible Galaxy?

Download community roles from Ansible Galaxy for reuse.

• Command:

  ansible-galaxy install geerlingguy.apache

• Importance: Leverages pre-built automation.

• Verification: Check ~/.ansible/roles.

24. How do you create a custom Ansible module?

Write a Python script with Ansible module utilities.

• Example:

  # library/my_module.py
  #!/usr/bin/python
  from ansible.module_utils.basic import AnsibleModule
  def main():
      module = AnsibleModule(argument_spec=dict(name=dict(type='str')))
      module.exit_json(changed=False, msg=f"Hello {module.params['name']}")

• Importance: Extends Ansible functionality.

• Verification: Use in playbook and run.

25. How do you use conditionals in Ansible?

Apply tasks based on system conditions using when.

• Example:

  - name: Install httpd on RHEL
    dnf:
      name: httpd
      state: present
    when: ansible_distribution == "RedHat"

• Importance: Customizes task execution.

• Verification: Run on mixed OS hosts.

26. How do you loop over tasks in Ansible?

Use loop to execute tasks for multiple items.

• Example:

  - name: Install packages
    dnf:
      name: "{{ item }}"
      state: present
    loop:
      - httpd
      - mariadb

• Importance: Reduces playbook redundancy.

• Verification: Check dnf list installed.

27. How do you manage Ansible facts?

Gather and use system facts for dynamic automation.

• Example:

  - name: Gather facts
    setup:
  - name: Print hostname
    debug:
      msg: "{{ ansible_facts['hostname'] }}"

• Importance: Provides system-specific data.

• Verification: Check output.

28. How do you delegate tasks in Ansible?

Run tasks on a specific host using delegate_to.

• Example:

  - name: Run on localhost
    command: whoami
    delegate_to: localhost

• Importance: Enables remote task execution.

• Verification: Check task output.

29. How do you use Ansible Vault for secrets?

Encrypt sensitive data with ansible-vault.

• Commands:

  ansible-vault create secret.yml
  ansible-playbook --vault-id @prompt playbook.yml

• Importance: Secures credentials.

• Verification: Decrypt with ansible-vault view secret.yml.

30. How do you optimize Ansible performance?

Enable pipelining and use asynchronous tasks to improve speed.

• Configuration:

  # ansible.cfg
  [ssh_connection]
  pipelining = True

• Importance: Speeds up playbook execution.

• Verification: Measure runtime.

System Configuration with Ansible

31. How do you install a package using Ansible?

The dnf module automates package installation across nodes.

• Example:

  - name: Install nginx
    dnf:
      name: nginx
      state: present
    become: yes

• Importance: Ensures consistent software deployment.

• Verification: Check nginx -v.

32. How do you manage services with Ansible?

Control system services using the service module.

• Example:

  - name: Start and enable nginx
    service:
      name: nginx
      state: started
      enabled: yes
    become: yes

• Importance: Automates service management.

• Verification: Check systemctl status nginx.

33. How do you configure a file with Ansible?

Use the template module for dynamic file configurations.

• Example:

  - name: Copy nginx config
    template:
      src: nginx.conf.j2
      dest: /etc/nginx/nginx.conf
    become: yes

• Importance: Ensures consistent configurations.

• Verification: Check /etc/nginx/nginx.conf.

34. How do you set up a cron job with Ansible?

Automate scheduled tasks with the cron module.

• Example:

  - name: Schedule backup
    cron:
      name: "Daily backup"
      minute: "0"
      hour: "3"
      job: "/backup.sh"

• Importance: Automates repetitive tasks.

• Verification: Check crontab -l.

35. How do you manage user accounts with Ansible?

Create or modify users with the user module.

• Example:

  - name: Create user
    user:
      name: alice
      state: present
      groups: wheel
      password: "{{ 'mypassword' | password_hash('sha512') }}"
    become: yes

• Importance: Streamlines user administration.

• Verification: Check /etc/passwd.

36. How do you configure SELinux with Ansible?

Manage SELinux settings using the selinux module.

• Example:

  - name: Set SELinux to enforcing
    selinux:
      policy: targeted
      state: enforcing
    become: yes

• Importance: Ensures security compliance.

• Verification: Check getenforce.

37. How do you manage firewalld with Ansible?

Configure firewall rules with the firewalld module.

• Example:

  - name: Allow HTTP
    firewalld:
      service: http
      permanent: yes
      state: enabled
    become: yes

• Importance: Secures network services.

• Verification: Check firewall-cmd --list-services.

38. How do you configure LVM with Ansible?

Automate volume management with lvg and lvol modules.

• Example:

  - name: Create volume group
    lvg:
      vg: app_vg
      pvs: /dev/sdb1
  - name: Create logical volume
    lvol:
      vg: app_vg
      lv: app_lv
      size: 10g

• Importance: Simplifies storage management.

• Verification: Check lvs.

39. How do you manage SSH keys with Ansible?

Add SSH keys to user accounts with the authorized_key module.

• Example:

  - name: Add SSH key
    authorized_key:
      user: ansibleadm
      key: "{{ lookup('file', '/home/ansibleadm/.ssh/id_rsa.pub') }}"

• Importance: Secures remote access.

• Verification: Test SSH login.

40. How do you reboot a host with Ansible?

Restart systems using the reboot module.

• Example:

  - name: Reboot server
    reboot:
      reboot_timeout: 300
    become: yes

• Importance: Applies system changes.

• Verification: Check uptime post-reboot.

Networking with Ansible

41. How do you configure a static IP with Ansible?

Use the nmcli module to set network configurations.

• Example:

  - name: Set static IP
    nmcli:
      conn_name: eth0
      type: ethernet
      ip4: 192.168.1.100/24
      gw4: 192.168.1.1
      state: present
    become: yes

• Importance: Ensures reliable networking.

• Verification: Check ip addr show eth0.

42. How do you configure DNS with Ansible?

Set DNS servers using the nmcli module.

• Example:

  - name: Set DNS
    nmcli:
      conn_name: eth0
      dns4: 8.8.8.8
      state: present
    become: yes

• Importance: Enables name resolution.

• Verification: Test with nslookup google.com.

43. How do you set up a network bridge with Ansible?

Create a bridge for virtualization or containers.

• Example:

  - name: Create bridge
    nmcli:
      conn_name: br0
      type: bridge
      state: present
  - name: Add slave
    nmcli:
      conn_name: eth0
      type: bridge-slave
      master: br0

• Importance: Supports virtualized networking.

• Verification: Check nmcli con show.

44. How do you manage iptables with Ansible?

Configure legacy firewall rules with the iptables module.

• Example:

  - name: Allow SSH
    iptables:
      chain: INPUT
      protocol: tcp
      destination_port: 22
      jump: ACCEPT
    become: yes

• Importance: Provides firewall compatibility.

• Verification: Check iptables -L.

45. How do you configure NFS with Ansible?

Set up Network File System for shared storage.

• Example:

  - name: Install NFS
    dnf:
      name: nfs-utils
      state: present
  - name: Configure exports
    lineinfile:
      path: /etc/exports
      line: "/data *(rw,sync)"
  - name: Start NFS
    service:
      name: nfs-server
      state: started
      enabled: yes

• Importance: Enables file sharing.

• Verification: Mount on client and check.

46. How do you synchronize time with Ansible?

Configure NTP using the chrony module.

• Example:

  - name: Enable chronyd
    service:
      name: chronyd
      state: started
      enabled: yes

• Importance: Ensures accurate system time.

• Verification: Check chronyc sources.

47. How do you monitor network interfaces with Ansible?

Run network diagnostics using the command module.

• Example:

  - name: Check interfaces
    command: ip addr show
    register: output
  - debug:
      msg: "{{ output.stdout }}"

• Importance: Tracks network status.

• Verification: Review output.

48. How do you configure a VPN with Ansible?

Import VPN configurations with the nmcli module.

• Example:

  - name: Import VPN
    nmcli:
      conn_name: myvpn
      type: vpn
      vpn: "{{ lookup('file', 'client.ovpn') }}"
      state: present

• Importance: Secures remote connections.

• Verification: Check nmcli con show.

49. How do you add a network route with Ansible?

Add routing rules using the command module.

• Example:

  - name: Add route
    command: ip route add 10.0.0.0/24 via 192.168.1.1

• Importance: Enables custom routing.

• Verification: Check ip route.

50. How do you troubleshoot network issues with Ansible?

Diagnose connectivity with ad-hoc commands.

• Example:

  - name: Test connectivity
    command: ping -c 4 8.8.8.8
    register: result
  - debug:
      msg: "{{ result.stdout }}"

• Importance: Restores network functionality.

• Verification: Check ping results.

Security with Ansible

51. How do you enforce SELinux policies with Ansible?

Manage SELinux contexts and modes with the selinux module.

• Example:

  - name: Set SELinux context
    sefcontext:
      target: '/var/www(/.*)?'
      setype: httpd_sys_content_t
      state: present

• Importance: Ensures secure configurations.

• Verification: Check ls -Z /var/www.

52. How do you manage SSH configurations with Ansible?

Edit sshd_config using the lineinfile module.

• Example:

  - name: Change SSH port
    lineinfile:
      path: /etc/ssh/sshd_config
      regexp: '^#Port 22'
      line: 'Port 2222'
    notify: Restart sshd

• Importance: Enhances SSH security.

• Verification: Test ssh -p 2222 user@localhost.

53. How do you set up file ACLs with Ansible?

Configure fine-grained permissions with the acl module.

• Example:

  - name: Set ACL
    acl:
      path: /data/file.txt
      entity: alice
      etype: user
      permissions: rw
      state: present

• Importance: Provides granular access control.

• Verification: Check getfacl /data/file.txt.

54. How do you enforce password policies with Ansible?

Configure password rules in pwquality.conf.

• Example:

  - name: Set password length
    lineinfile:
      path: /etc/security/pwquality.conf
      regexp: '^# minlen'
      line: 'minlen = 12'

• Importance: Strengthens authentication security.

• Verification: Test with passwd alice.

55. How do you configure a chroot jail with Ansible?

Set up isolated environments for SSH users.

• Example:

  - name: Create chroot directory
    file:
      path: /jail/alice/bin
      state: directory
  - name: Configure chroot
    lineinfile:
      path: /etc/ssh/sshd_config
      line: 'ChrootDirectory /jail/alice'
    notify: Restart sshd

• Importance: Isolates users for security.

• Verification: Test SSH login as alice.

56. How do you audit file access with Ansible?

Configure auditd to monitor file activities.

• Example:

  - name: Audit file
    command: auditctl -w /data -p rwxa

• Importance: Tracks unauthorized access.

• Verification: Check /var/log/audit/audit.log.

57. How do you restrict SSH access with Ansible?

Limit SSH users in sshd_config.

• Example:

  - name: Restrict SSH
    lineinfile:
      path: /etc/ssh/sshd_config
      line: 'DenyUsers bob'
    notify: Restart sshd

• Importance: Enhances server security.

• Verification: Test SSH login as bob.

58. How do you configure PAM with Ansible?

Edit PAM files for authentication rules.

• Example:

  - name: Limit login attempts
    lineinfile:
      path: /etc/pam.d/sshd
      line: 'auth required pam_tally2.so deny=5'

• Importance: Customizes authentication policies.

• Verification: Test login failures.

59. How do you set suid with Ansible?

Apply special permissions using the file module.

• Example:

  - name: Set suid
    file:
      path: /script.sh
      mode: u+s

• Importance: Enables privilege escalation.

• Verification: Check ls -l /script.sh.

60. How do you limit resources with Ansible?

Configure resource limits in limits.conf.

• Example:

  - name: Limit processes
    lineinfile:
      path: /etc/security/limits.conf
      line: 'alice hard nproc 100'

• Importance: Prevents resource abuse.

• Verification: Check ulimit -u as alice.

Containers with Ansible

61. How do you manage Podman containers with Ansible?

Use the podman_container module to run containers.

• Example:

  - name: Run httpd container
    podman_container:
      name: web
      image: registry.access.redhat.com/ubi9/httpd-24
      state: started
      ports: "8080:8080"

• Importance: Automates containerized workloads.

• Verification: Check podman ps.

62. How do you create a persistent volume with Ansible?

Mount volumes for container data persistence.

• Example:

  - name: Create volume directory
    file:
      path: /data
      state: directory
  - name: Run container with volume
    podman_container:
      name: web
      image: httpd
      volumes: /data:/var/www/html

• Importance: Ensures data durability.

• Verification: Check /data.

63. How do you build a container image with Ansible?

Use buildah to create custom images.

• Example:

  - name: Build image
    command: buildah bud -t myweb .

• Importance: Supports custom containerization.

• Verification: Check podman images.

64. How do you manage Podman networks with Ansible?

Create isolated networks with the podman_network module.

• Example:

  - name: Create network
    podman_network:
      name: mynet
      state: present

• Importance: Isolates container communication.

• Verification: Check podman network ls.

65. How do you use podman-compose with Ansible?

Run multi-container applications with podman-compose.

• Example:

  - name: Run podman-compose
    command: podman-compose -f compose.yml up

• Importance: Simplifies container orchestration.

• Verification: Check podman ps.

Advanced System Administration

66. How do you configure Apache with Ansible?

Automate web server setup with multiple modules.

• Example:

  - name: Install httpd
    dnf:
      name: httpd
      state: present
  - name: Configure virtual host
    template:
      src: vhost.conf.j2
      dest: /etc/httpd/conf.d/site.conf
  - name: Start httpd
    service:
      name: httpd
      state: started

• Importance: Streamlines web server deployment.

• Verification: Test curl http://localhost.

67. How do you secure Apache with SSL/TLS using Ansible?

Configure HTTPS with mod_ssl.

• Example:

  - name: Install mod_ssl
    dnf:
      name: mod_ssl
      state: present
  - name: Configure SSL
    template:
      src: ssl.conf.j2
      dest: /etc/httpd/conf.d/ssl.conf

• Importance: Encrypts web traffic.

• Verification: Test curl https://localhost.

68. How do you configure a database with Ansible?

Set up MariaDB or PostgreSQL with automation.

• Example:

  - name: Install MariaDB
    dnf:
      name: mariadb-server
      state: present
  - name: Start MariaDB
    service:
      name: mariadb
      state: started

• Importance: Automates database deployment.

• Verification: Check mysql -u root -p.

69. How do you set up a load balancer with Ansible?

Configure HAProxy for high availability.

• Example:

  - name: Install HAProxy
    dnf:
      name: haproxy
      state: present
  - name: Configure HAProxy
    template:
      src: haproxy.cfg.j2
      dest: /etc/haproxy/haproxy.cfg

• Importance: Ensures application availability.

• Verification: Test load balancer access.

70. How do you configure clustering with Ansible?

Set up high-availability clusters with Pacemaker.

• Example:

  - name: Install Pacemaker
    dnf:
      name: pacemaker
      state: present
  - name: Start Pacemaker
    service:
      name: pacemaker
      state: started

• Importance: Supports fault-tolerant systems.

• Verification: Check pcs status.

Troubleshooting with Ansible

71. How do you debug Ansible playbooks?

Use verbose mode and the debug module to troubleshoot.

• Example:

  - name: Debug variable
    debug:
      msg: "{{ ansible_facts['hostname'] }}"

• Importance: Identifies playbook errors.

• Verification: Run ansible-playbook -v playbook.yml.

72. How do you troubleshoot failed Ansible tasks?

Capture task results with register for analysis.

• Example:

  - name: Run command
    command: ls /nonexistent
    register: result
    ignore_errors: yes
  - debug:
      msg: "{{ result.stderr }}"

• Importance: Resolves automation issues.

• Verification: Review error messages.

73. How do you monitor logs with Ansible?

Check system logs using the command module.

• Example:

  - name: Check logs
    command: tail -n 10 /var/log/messages
    register: logs
  - debug:
      msg: "{{ logs.stdout }}"

• Importance: Aids troubleshooting.

• Verification: Check log output.

74. How do you handle Ansible connection failures?

Verify SSH and inventory settings.

• Steps:

  • Check SSH keys: ssh-copy-id user@host.

  • Test: ansible all -m ping -v.

• Importance: Ensures reliable automation.

• Verification: Check error messages.

75. How do you troubleshoot network issues with Ansible?

Diagnose connectivity with ad-hoc commands.

• Example:

  - name: Ping gateway
    command: ping -c 4 192.168.1.1
    register: ping_result
  - debug:
      msg: "{{ ping_result.stdout }}"

• Importance: Restores network functionality.

• Verification: Check ping results.

Performance Tuning with Ansible

76. How do you optimize system performance with Ansible?

Apply performance profiles using the tuned module.

• Example:

  - name: Set performance profile
    tuned:
      profile: throughput-performance
      state: enabled

• Importance: Enhances system efficiency.

• Verification: Check tuned-adm active.

77. How do you limit CPU usage with Ansible?

Use cpulimit or cgroups for resource control.

• Example:

  - name: Limit CPU
    command: cpulimit -p 1234 -l 50

• Importance: Prevents resource hogging.

• Verification: Check top.

78. How do you monitor disk I/O with Ansible?

Run iostat to analyze disk performance.

• Example:

  - name: Check disk I/O
    command: iostat -x 1 3
    register: iostat
  - debug:
      msg: "{{ iostat.stdout }}"

• Importance: Identifies disk bottlenecks.

• Verification: Review %util.

79. How do you optimize swap usage with Ansible?

Adjust vm.swappiness with the sysctl module.

• Example:

  - name: Set swappiness
    sysctl:
      name: vm.swappiness
      value: '10'
      state: present

• Importance: Balances memory usage.

• Verification: Check cat /proc/sys/vm/swappiness.

80. How do you analyze performance with Ansible?

Collect metrics with sar for performance analysis.

• Example:

  - name: Run sar
    command: sar -u 1 3
    register: sar
  - debug:
      msg: "{{ sar.stdout }}"

• Importance: Tracks performance trends.

• Verification: Check CPU/memory stats.

Backup and Recovery with Ansible

81. How do you back up a directory with Ansible?

Create archives using the command module.

• Example:

  - name: Backup /etc
    command: tar -czf /backup/etc-$(date +%F).tar.gz /etc

• Importance: Ensures data recovery.

• Verification: Check ls /backup.

82. How do you automate backups with Ansible?

Schedule backups with the cron module.

• Example:

  - name: Schedule backup
    cron:
      name: "Daily backup"
      minute: "0"
      hour: "3"
      job: "tar -czf /backup/daily-$(date +\%F).tar.gz /home"

• Importance: Ensures regular data protection.

• Verification: Check crontab -l.

83. How do you restore a backup with Ansible?

Extract archives to restore data.

• Example:

  - name: Restore backup
    command: tar -xzf /backup/etc-2025-09-08.tar.gz -C /restore

• Importance: Recovers lost data.

• Verification: Check ls /restore.

84. How do you create a disk image with Ansible?

Use dd for low-level disk backups.

• Example:

  - name: Create disk image
    command: dd if=/dev/sda of=/backup/disk.img bs=64K

• Importance: Preserves disk data.

• Verification: Check ls -lh /backup/disk.img.

85. How do you use rear with Ansible?

Automate disaster recovery with rear.

• Example:

  - name: Install rear
    dnf:
      name: rear
      state: present
  - name: Create recovery image
    command: rear mkbackup

• Importance: Minimizes downtime.

• Verification: Check /var/lib/rear.

System Boot and Recovery

86. How do you modify GRUB with Ansible?

Edit GRUB configuration and regenerate the bootloader.

• Example:

  - name: Set GRUB timeout
    lineinfile:
      path: /etc/default/grub
      regexp: '^GRUB_TIMEOUT='
      line: 'GRUB_TIMEOUT=10'
  - name: Update GRUB
    command: grub2-mkconfig -o /boot/grub2/grub.cfg

• Importance: Customizes boot behavior.

• Verification: Reboot to check.

87. How do you configure single-user mode with Ansible?

Set temporary boot parameters for maintenance.

• Example:

  - name: Boot to single-user mode
    command: systemctl reboot --firmware-setup

• Importance: Facilitates system recovery.

• Verification: Check boot logs.

88. How do you update the kernel with Ansible?

Install new kernel packages with dnf.

• Example:

  - name: Install kernel
    dnf:
      name: kernel
      state: latest

• Importance: Ensures security updates.

• Verification: Check uname -r post-reboot.

89. How do you rebuild initramfs with Ansible?

Regenerate initramfs using dracut.

• Example:

  - name: Rebuild initramfs
    command: dracut -f /boot/initramfs-$(uname -r).img

• Importance: Ensures boot functionality.

• Verification: Check ls /boot.

90. How do you troubleshoot boot issues with Ansible?

Check boot logs for errors.

• Example:

  - name: Check boot logs
    command: journalctl -b
    register: logs
  - debug:
      msg: "{{ logs.stdout }}"

• Importance: Diagnoses boot failures.

• Verification: Review logs.

Advanced RHCE Topics

91. How do you configure Ansible Tower/AAP?

Install and set up Ansible Automation Platform for centralized management.

• Steps:

  • Install: sudo dnf install ansible-tower.

  • Run setup: sudo tower-setup.

• Importance: Streamlines enterprise automation.

• Verification: Access Tower web interface.

92. How do you integrate Ansible with OpenShift?

Manage OpenShift resources with the oc module.

• Example:

  - name: Create OpenShift project
    oc_project:
      name: myproject
      state: present

• Importance: Automates container orchestration.

• Verification: Check oc get projects.

93. How do you manage Red Hat subscriptions with Ansible?

Use the rhsm_subscription module for repository access.

• Example:

  - name: Attach subscription
    rhsm_subscription:
      state: present
      username: user
      password: pass

• Importance: Enables access to RHEL repositories.

• Verification: Check subscription-manager status.

94. How do you configure a proxy with Ansible?

Set proxy settings for network access.

• Example:

  - name: Set proxy
    lineinfile:
      path: /etc/environment
      line: 'http_proxy=http://proxy.example.com:8080'

• Importance: Supports restricted networks.

• Verification: Test with curl.

95. How do you manage kernel parameters with Ansible?

Configure system behavior with the sysctl module.

• Example:

  - name: Enable IP forwarding
    sysctl:
      name: net.ipv4.ip_forward
      value: '1'

• Importance: Optimizes system performance.

• Verification: Check sysctl net.ipv4.ip_forward.

Real-World Scenarios

96. How do you automate a web server deployment?

Use a playbook to install and configure a web server.

• Example:

  - name: Deploy web server
    hosts: webservers
    tasks:
      - name: Install httpd
        dnf:
          name: httpd
          state: present
      - name: Start httpd
        service:
          name: httpd
          state: started

• Importance: Streamlines production deployments.

• Verification: Test curl http://webserver.

97. How do you automate database backups?

Schedule database dumps with cron.

• Example:

  - name: Schedule DB backup
    cron:
      name: "DB backup"
      minute: "0"
      hour: "2"
      job: "mysqldump -u root mydb > /backup/db-$(date +\%F).sql"

• Importance: Protects critical data.

• Verification: Check ls /backup.

98. How do you automate system updates?

Keep packages updated with the dnf module.

• Example:

  - name: Update packages
    dnf:
      name: '*'
      state: latest

• Importance: Maintains system security.

• Verification: Check dnf history.

99. How do you deploy a multi-tier application?

Use roles to manage web, app, and database tiers.

• Example:

  - name: Deploy multi-tier app
    hosts: all
    roles:
      - webserver
      - appserver
      - database

• Importance: Manages complex architectures.

• Verification: Test application functionality.

100. How do you automate log rotation?

Configure logrotate with the template module.

• Example:

  - name: Configure logrotate
    template:
      src: logrotate.conf.j2
      dest: /etc/logrotate.d/app

• Importance: Manages log file sizes.

• Verification: Test logrotate -d /etc/logrotate.d/app.

Career and Interview Tips

101. How do you prepare for the RHCE EX294 exam?

To excel in the RHCE EX294 exam, focus on hands-on practice and understanding key concepts.

• Steps:

  • Set up RHEL 9 VMs for Ansible practice.

  • Study EX294 objectives on redhat.com.

  • Use mock exams from CertDepot or Red Hat Developer sandbox.

• Importance: Ensures exam readiness.

• Verification: Complete sample playbooks successfully.

102. How do you demonstrate RHCE skills in an interview?

Showcase practical expertise to stand out in technical interviews.

• Tips:

  • Share Ansible playbooks via GitHub or a portfolio.

  • Explain automation workflows clearly (e.g., automating NFS setup).

  • Discuss enterprise scenarios like multi-node deployments.

• Importance: Proves hands-on proficiency.

• Verification: Practice explaining tasks like LVM automation.

103. How do you stay updated with RHEL 9 features?

Keep skills current with reliable resources.

• Resources:

  • Red Hat’s blog and release notes for updates.

  • Follow X (@RedHat) for announcements.

  • Use CertDepot for tutorials and labs.

• Importance: Ensures relevance in fast-evolving tech.

• Verification: Test new features (e.g., Podman) in a VM.

104. How do you handle complex automation scenarios?

Break down complex tasks into manageable components.

• Approach:

  • Use modular roles for reusability.

  • Apply conditionals and loops for flexibility.

• Example:

  - name: Conditional task
    dnf:
      name: "{{ item }}"
      state: present
    when: ansible_distribution == "RedHat"
    loop:
      - httpd
      - nginx

• Importance: Manages large-scale deployments efficiently.

• Verification: Run on mixed OS hosts.

105. How do you demonstrate automation ROI in an interview?

To highlight automation’s value, focus on measurable outcomes and business impact.

• Importance: Shows business value to stakeholders.

• Verification: Share a case study or playbook (e.g., a GitHub repo with automation scripts).