Free EX362 sample questions

Real questions from the Red Hat Certified Specialist in Identity Management exam practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 6 of 12 free sample questions.

Question 1Choose one

A system administrator is attempting to install a new IdM server using `ipa-server-install` on a RHEL 9 system. The installation fails immediately during the prerequisite check phase with an error indicating that the hostname is not resolvable. The server is intended to be the primary DNS server for the new IdM domain. Which combination of arguments should the administrator use to successfully proceed with the installation given this context?

Question 2Choose 3

You are using Ansible to deploy a new IdM replica. You have defined the inventory and variables, but the playbook fails. The error log indicates that the `ipareplica` role cannot establish a connection to the enrollment server. Which of the following firewall ports must be open on the **master** IdM server to allow the replica to enroll and establish the initial replication agreement?

Question 3Choose one

A developer needs to configure a Linux web server to authenticate users using Kerberos Single Sign-On (SSO). You have installed `mod_auth_gssapi` and created the service principal `HTTP/webserver.example.com`. After generating the keytab, users report receiving a '401 Unauthorized' error when accessing the site, and the Apache error logs show 'gss_acquire_cred() failed'. What is the most likely cause of this issue?

Question 4Choose one

You are tasked with automating the onboarding of 500 new developers. They require a specific set of HBAC rules and sudo privileges. You decide to use Ansible to manage this configuration. Which Ansible module from the `ansible-freeipa` collection should you use to ensure that the developer group exists and includes all 500 users, while maintaining idempotency?

Question 5Choose one

A security audit requires that a specific department's sensitive secrets be stored in a way that allows the application to encrypt data using the vault's public key, but only the central IdM service can decrypt it using the private key for retrieval. Which type of IdM vault should you create to meet this requirement?

Question 6Choose one

You need to configure a new IdM client using `authselect`. The security policy mandates that the system must strictly use SSSD for authentication and must create home directories automatically upon the first successful login. Which command correctly configures the system profile?

6 more free samples are waiting

Create a free account to unlock the whole EX362 sample bank, or get full access to all 147 practice questions in the simulator.

Create account