RedHat Red Hat Certified System Administrator - RHCSARHEL 10 EX200 Exam Dumps: Updated Questions & Answers (June 2026)

Solution:

Create the script:

mkdir -p /usr/local/bin

cat > /usr/local/bin/backup-now.sh < < 'EOF'

#!/bin/bash

tar -czf /root/etc-$(date +%F).tar.gz /etc

EOF

chmod +x /usr/local/bin/backup-now.sh

Create the unit file:

cat > /etc/systemd/system/backup-now.service < < 'EOF'

[Unit]

Description=Run manual etc backup

[Service]

Type=oneshot

ExecStart=/usr/local/bin/backup-now.sh

[Install]

WantedBy=multi-user.target

EOF

Reload and test:

systemctl daemon-reload

systemctl start backup-now.service

systemctl status backup-now.service

Detailed Explanation:

Type=oneshot is correct for a task that runs and exits.

ExecStart points to the script.

systemctl daemon-reload is required after adding a new unit file.

RHEL 10 systemd documentation covers manual unit creation and management. ( Red Hat Documentation )

Solution:

Read-only access:

setfacl -m u:john:r-- /share/dev

Read-write access:

setfacl -m u:john:rw- /share/dev

Remove ACL permissions:

setfacl -m u:john:--- /share/dev

Detailed Explanation:

setfacl -m modifies the ACL.

u:john:r-- grants read only.

u:john:rw- grants read and write.

u:john:--- effectively removes access for that ACL entry.

ACLs are used when standard owner/group/other permissions are not enough.

Solution:

dnf install -y httpd policycoreutils-python-utils

mkdir -p /webdata

echo "RHEL10 Web Server" > /webdata/index.html

sed -i 's/^Listen 80/Listen 8080/' /etc/httpd/conf/httpd.conf

semanage port -a -t http_port_t -p tcp 8080

firewall-cmd --permanent --add-port=8080/tcp

firewall-cmd --reload

systemctl enable --now httpd

systemctl restart httpd

ss -tulpn | grep 8080

Detailed Explanation:

Apache defaults to port 80, so Listen 8080 changes the service port.

SELinux must allow Apache to bind to 8080, which is done with semanage port.

firewall-cmd opens the port externally.

RHEL 10 documents firewalld as the standard firewall management interface and SELinux port labeling for confined services. ( Red Hat Documentation )

Solution:

echo "umask 0277" > > /home/natasha/.bash_profile

Detailed Explanation:

A umask of 0277 removes group and other permissions entirely.

New files: base 666 minus mask 277 gives 400.

New directories: base 777 minus mask 277 gives 500.

Putting it in .bash_profile applies it for that user’s login shell.

Solution:

Create the swap partition:

fdisk /dev/sdb

partprobe /dev/sdb

Format it for swap:

mkswap /dev/sdb2

Enable it:

swapon /dev/sdb2

Persist it in /etc/fstab:

echo "/dev/sdb2 swap swap defaults 0 0" > > /etc/fstab

Verify:

swapon --show

Detailed Explanation:

mkswap prepares the partition as swap space.

swapon activates it immediately.

Adding an /etc/fstab entry ensures it survives reboot.

The lab uses a partition-based swap workflow.

Solution:

useradd harry

passwd harry

chage -M 30 -d 0 harry

chage -l harry

Detailed Explanation:

useradd harry creates the local user.

passwd harry sets the initial password.

chage -M 30 sets the maximum password age to 30 days.

chage -d 0 forces the user to change the password at next login.

chage -l harry verifies the policy.

Solution:

lvextend -L +500M /dev/vgdata/lvbackup

xfs_growfs /backup

df -h /backup

Detailed Explanation:

lvextend increases the LV size.

xfs_growfs expands the XFS filesystem while mounted.

This is a classic RHCSA storage task and aligns with RHEL 10 LVM/XFS workflows. ( Red Hat Documentation )

Solution:

Create timer unit:

cat > /etc/systemd/system/backup-now.timer < < 'EOF'

[Unit]

Description=Daily backup timer

[Timer]

OnCalendar=*-*-* 02:00:00

Persistent=true

[Install]

WantedBy=timers.target

EOF

Enable it:

systemctl daemon-reload

systemctl enable --now backup-now.timer

systemctl list-timers --all | grep backup-now

Detailed Explanation:

OnCalendar=*-*-* 02:00:00 means daily at 02:00.

Persistent=true runs missed jobs after boot if the system was off.

timers.target is the normal target for timer units.

RHEL 10 documentation includes systemd timer units as a standard scheduling mechanism. ( Red Hat Documentation )

Solution:

mkdir -p /share/projects

chown alex /share/projects/

chmod a+rwx,+t /share/projects/

ls -ld /share/projects/

Detailed Explanation:

chmod a+rwx gives read, write, and execute to everyone.

+t sets the sticky bit.

Sticky bit on a shared directory means users can create files, but only the file owner, directory owner, or root can delete them.

This is the same model used on /tmp.

Solution:

Create the Quadlet file:

mkdir -p /etc/containers/systemd

cat > /etc/containers/systemd/sleepy.container < < 'EOF'

[Container]

Image=registry.access.redhat.com/ubi10/ubi

ContainerName=sleepy

Exec=sleep 3600

[Install]

WantedBy=multi-user.target

EOF

Reload and enable:

systemctl daemon-reload

systemctl enable --now sleepy.service

systemctl status sleepy.service

Detailed Explanation:

Quadlet is the preferred modern way to manage Podman containers with systemd for new configurations.

The .container file is translated into a systemd-managed service.

RHEL 10 documentation notes that podman generate systemd still exists, but Quadlets are preferred for new setups. ( Red Hat Documentation )