ExamDumpster
Sign in

Free EX362 sample questions

Real questions from the Red Hat Certified Specialist in Identity Management exam practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 6 of 12 free sample questions.

Question 1Choose one

You are the lead architect designing a Red Hat Identity Management (IdM) topology for a multinational corporation with data centers in New York, London, and Tokyo. The network team has established high-latency, limited-bandwidth links between these regions. You need to configure the replication topology to ensure data consistency while minimizing cross-region traffic. Which topology configuration strategy provides the optimal balance of redundancy and network efficiency?

Question 2Choose one

A system administrator is attempting to install a new IdM server using `ipa-server-install` on a RHEL 9 system. The installation fails immediately during the prerequisite check phase with an error indicating that the hostname is not resolvable. The server is intended to be the primary DNS server for the new IdM domain. Which combination of arguments should the administrator use to successfully proceed with the installation given this context?

Question 3Choose 3

You are using Ansible to deploy a new IdM replica. You have defined the inventory and variables, but the playbook fails. The error log indicates that the `ipareplica` role cannot establish a connection to the enrollment server. Which of the following firewall ports must be open on the **master** IdM server to allow the replica to enroll and establish the initial replication agreement?

Question 4Choose one

A developer needs to configure a Linux web server to authenticate users using Kerberos Single Sign-On (SSO). You have installed `mod_auth_gssapi` and created the service principal `HTTP/webserver.example.com`. After generating the keytab, users report receiving a '401 Unauthorized' error when accessing the site, and the Apache error logs show 'gss_acquire_cred() failed'. What is the most likely cause of this issue?

Question 5Choose one

You are tasked with automating the onboarding of 500 new developers. They require a specific set of HBAC rules and sudo privileges. You decide to use Ansible to manage this configuration. Which Ansible module from the `ansible-freeipa` collection should you use to ensure that the developer group exists and includes all 500 users, while maintaining idempotency?

Question 6Choose one

A security audit requires that a specific department's sensitive secrets be stored in a way that allows the application to encrypt data using the vault's public key, but only the central IdM service can decrypt it using the private key for retrieval. Which type of IdM vault should you create to meet this requirement?

6 more free samples are waiting

Create a free account to unlock the whole EX362 sample bank, or get full access to all 147 practice questions in the simulator.

Create account