RedHat EX362
Q: 1
Revoke a compromised service certificate and confirm revocation is published.
Options
Q: 2
Confirm time skew tolerance settings realm-wide.
Options
Q: 3
You must deploy a brand-new IdM realm using scripts on RHEL 9. Use integrated DNS and set Google
Public DNS as a forwarder. Primary server: ipa1.example.com (10.10.10.11). Realm: EXAMPLE.COM,
domain: example.com. Ensure services start at boot and verify the install.
Options
Q: 4
Install the same replica using Ansible with ipareplica role, also enabling KRA (for key escrow).
Options
Q: 5
Protect only /secure/ with SSO but leave / public; confirm forced negotiate only on the secure path.
Options
Q: 6
Put Apache (SSO) in front of a backend app (Tomcat on 8080). Do SSO at Apache and proxy to Tomcat.
Options
Q: 7
Create a lightweight SSO health-check that fails if SPNEGO isn’t working.
Options
Q: 8
Bulk-create users from a CSV using Ansible and the ipa_user role.
Options
Q: 9
Automate creating an HTTP SSO client with Ansible using the freeipa.ansible_freeipa collection, then
drop an httpd conf.
Options
Q: 10
Verify SSH SSO using Kerberos tickets only—disable password auth temporarily for an IdM group.
Options
Question 1 of 10
