Red Hat Certified Specialist in Identity Management exam Free Sample Questions

You are the lead architect designing a Red Hat Identity Management (IdM) topology for a multinational corporation with data centers in New York, London, and Tokyo. The network team has established high-latency, limited-bandwidth links between these regions. You need to configure the replication topology to ensure data consistency while minimizing cross-region traffic.

Which topology configuration strategy provides the optimal balance of redundancy and network efficiency?

A system administrator is attempting to install a new IdM server using ipa-server-install on a RHEL 9 system. The installation fails immediately during the prerequisite check phase with an error indicating that the hostname is not resolvable. The server is intended to be the primary DNS server for the new IdM domain.

Which combination of arguments should the administrator use to successfully proceed with the installation given this context?

You are using Ansible to deploy a new IdM replica. You have defined the inventory and variables, but the playbook fails. The error log indicates that the ipareplica role cannot establish a connection to the enrollment server.

Which of the following firewall ports must be open on the master IdM server to allow the replica to enroll and establish the initial replication agreement?

A developer needs to configure a Linux web server to authenticate users using Kerberos Single Sign-On (SSO). You have installed mod_auth_gssapi and created the service principal HTTP/webserver.example.com.

After generating the keytab, users report receiving a '401 Unauthorized' error when accessing the site, and the Apache error logs show 'gss_acquire_cred() failed'.

What is the most likely cause of this issue?

You are tasked with automating the onboarding of 500 new developers. They require a specific set of HBAC rules and sudo privileges. You decide to use Ansible to manage this configuration.

Which Ansible module from the ansible-freeipa collection should you use to ensure that the developer group exists and includes all 500 users, while maintaining idempotency?

A security audit requires that a specific department's sensitive secrets be stored in a way that allows the application to encrypt data using the vault's public key, but only the central IdM service can decrypt it using the private key for retrieval.

Which type of IdM vault should you create to meet this requirement?