RHCA考试大纲

RHCA考试大纲

 

RHS333 Red Hat Enterprise Security: Network Services (4 days)
RH401 Red Hat Enterprise Deployment and Systems Management (4 days)
RH423 Red Hat Enterprise Directory Services and Authentication (4 days)
RH436 Red Hat Enterprise Storage Management (4 days)
RH442 Red Hat Enterprise System Monitoring and Performance Tuning (4 days)

RHS333 wrote:
RHS333 Red Hat Enterprise Security: Network Services Description

Duration:

4 days
Training Start Time: 9:00 a.m.
Training End Time: 4:30-5:00PM (depending on class progress)
What you will learn:

RHS333 goes beyond the essential security coverage offered in the RHCE curriculum and delves deeper into the security features, capabilities, and risks associated with the most commonly deployed services. Among the topics covered in this four-day, hands-on course are the following:

1. Mastering basic service security
* Review of host security
* Advanced TCP wrappers configuration
* Advanced xinetd configuration
2. Understanding cryptography
* Overview of cryptographic techniques
* Management of SSL certificates
3. Logging system activity
* Clock synchronization with NTP
* Configuring centralized syslog management
4. Securing BIND and DNS
* Name server topology and " views"
* Configuration of appropriate recursion and response policies
* Using TSIG authentication keys
* Running BIND in a chroot environment
5. Network user authentication security
* Managing portmap and NIS risks
* Using Kerberos authentication
6. Improving NFS security
* NFS security limitations
* Configurations to avoid
7. The secure shell: OpenSSH
* Protocol and service security
* Protecting public-key authentication
* Port-forwarding and X11-forwarding issues
8. Securing E-mail with Sendmail and Postfix
* User mail spool access issues
* Overview of Postfix configuration
* Access control and STARTTLS
* Anti-spam features
* Introduction to Procmail
9. Managing FTP access
* Controlling local and anonymous users
10. Apache security
* User authentication and access control
* Common misconfigurations
* Containing CGI risks
11. Basics of intrusion response
* Monitoring for suspicious activity
* Verifying suspected intrusions
* Recovering from an intrusion

RH401 wrote:
RH401 Red Hat Enterprise Deployment and Systems Management Description

Duration:

4 days
Training Start Time: 9:00 a.m.
Training End Time: 4:30-5:00PM (depending on class progress)
What you will learn:

1. Essential System Management
* System management tasks
* Standardization, centralization, and scalability
* Provisioning and automation
* Red Hat tools for system managment
2. Installing a Red Hat Network Satellite Server
* Features and advantages of the RHN Satellite Server
* Types of RHN Satellite Servers
* RHN Satellite Server hardware requirements
* Understanding software channels
* Installing an RHN Satellite Server
* Populating an RHN Satellite Server
* Troubleshooting an RHN Satellite Server installation
3. Building RPMs
* Building open source software
* Using RPM macros
* Writing custom spec files
* Using rpmbuild to create and sign RPMs
* Guidelines for custom RPMs
4. Use of CVS to Manage Configuration Files
* Basics of CVS for system administrators
* Creating local and remote repository access
* Structuring a CVS project
* Using CVS to track, log, and reverse configuration changes
5. Managing the Red Hat Network Satellite Server
* Preparing a client to use an RHN Satellite Server
* Creating and managing custom channels
6. Red Hat Network Management and Provisioning
* Types of RHN service
* Elements of a deployment system
* Use of custom channels in a deployment system

RH423 wrote:
RH423 Red Hat Enterprise Directory Services and Authentication

Duration:

4 days
Training Start Time: 9:00 a.m.
Training End Time: 4:30-5:00PM (depending on class progress)
What you will learn:

1. Introduction to Directory Services
* What is a directory?
* LDAP: models, schema, and attributes
* Object classes
* LDIF
2. The LDAP Naming Model
* Directory information trees and Distingued Names
* X.500 and " Internet" naming suffixes
* Planning the directory hierarchy
3. Red Hat Directory Server: Basic Configuration
* Installation and setup of Red Hat Directory Server
* Using the Red Hat Console
* Using logging to monitor Red Hat Directory Server activity
* Backing up and restoring the directory
* Basic performance tuning with indexes
4. Red Hat Directory Server: Authentication and Security
* Configuring TLS security
* Using access control instructions (ACI' s)
* ACI' s and the Red Hat Console
5. Searching and Modifying the LDAP Directory
* Using command line utilities to search the directory
* Search filter syntax
* Updating the directory
* Using graphical LDAP client utilities
6. Linux User Authentication with NSS and PAM
* Understanding authentication and authorization
* Name service switch (NSS)
* Advanced pluggable authentication modules (PAM) configuration
7. Centralized User Authentication with LDAP
* Central account management with LDAP
* Using migration scripts to migrate existing data into an LDAP server
* LDAP user authentication
8. Kerberos and LDAP
* Introduction to Kerberos
* Configuring the Kerberos key distribution center (KDC) and clients
* Configuring LDAP to support Kerberos
* Access control with Simple Authentication and Security Layer (SASL)
9. Directory Referrals and Replication
* Referrals and replication
* Single master configuration
* Multiple master configuration
* Planning for directory server availability
10. Authenticating Windows Clients
* Windows networking overview
* Configuring a Samba primary domain controller (PDC) using LDAP
11. Windows Domain Authentication and Linux Clients
* Active Directory servers
* Linux as a client
* Active Directory and NSS
* OpenLDAP
* Winbind

RH436 wrote:
RH436 Red Hat Enterprise Storage Management Description

Duration:

4 days
Training Start Time: 9:00 a.m.
Training End Time: 4:00-5:00PM (depending on class progress)
Day 4 of class is open-ended lab time using provided SAN storage and multiple servers.
What you will learn:

1. Review Red Hat Enterprise Linux Storage Management Technologies
2. Data Storage Design: Data Sharing
* Analyze Storage Dynamics
* SNIA Shared Storage Model(SSM)
* Volume Management + File System Management = Data Management
3. Cluster Suite Overview
* Define Cluster Suite Implementation in the SSM
* Explain Cluster Suite Configuration
* Implement Cluster Suite; HA NFS
4. Global File System(GFS) Overview
* Define GFS Implementation in the SSM
* Explain GFS Configuration
* Explain Pools and Distributed Storage
* Introduce Fencing
* Explain Fencing Procedures
* Implement Fencing Methods
5. Describe GFS Management
* Describe GFS journals
* Explain GFS Modification
* Single/Redundant GFS Lockmanagers(SLM/RLM)
* Increasing Data Storage Capacity
6. Modify the On-line GFS Environment: Managing Data Capacity
7. Monitor GFS
8. Implement GFS modifications
9. Migrating Cluster Suite NFS from DAS to GFS
10. Re-visit Cluster Suite using GFS

RH442 Red Hat Enterprise System Monitoring and Performance Tuning

Duration:
4 days

Training Start Time: 9:00 a.m.
Training End Time: 4:30-5:00PM (depending on class progress)
What you will learn:

1. Principles of Tuning
* Developing a model for tuning
* Understanding tuning metrics
2. Tuning Mechanisms for the Linux kernel
* Using standard utilities to monitor system performance (vmstat,iostat,etc.)
* Using of the sysfs and proc filesystems to obtain information about your system
* Using the sysfs and proc filesystems to alter system behavior
* Generating reports using standard utilties
3. Monitoring systems
* Using SNMP to monitor systems
* Using Red Hat Network to monitor systems
* Using the netdump service to monitor system crashes
4. Performance characteristics of standard hardware devices
* Factors affecting memory performance
* Factors affecting disk performance
5. Process scheduling
* How the Linux kernel schedules processes
* Process priority
* Real time processes
6. Memory
* How the Linux kernel utilizes memory
* System tunables that affect memory performance
* How processes utilize memory
* How page and buffer caches work
7. Disk I/O
* How the disk I/O subsystem works
* Tuning the disk I/O subsystem
* How I/O scheduling works
8. Filesystem performance
* Filesystem layout and performance
* How journaling works
9. Network Performance
* Kernel tunables affecting network performance
10. Application Tuning Issues
* Problem areas when developing applications
* Measuring algorithm performance
* Viewing application behavior using standard utilities
* Using OProfile to monitor application and system performanceTuning for SMB/CIFS servers
11. Service specific tuning recommendations
* Tuning NFS
* Tuning HTTPD
* Tuning Samba