How to Pass the RHCSA (EX200) Exam
Master the RHCSA EX200 with hands-on labs, real commands, and proven exam strategies.
The Red Hat Certified System Administrator (RHCSA) EX200 exam is a performance-based test that validates your ability to perform core system administration tasks in Red Hat Enterprise Linux (RHEL). Unlike multiple-choice exams, you must complete real-world tasks in a live environment. This guide covers the essential domains, study techniques, and CLI commands you need to master. With a passing score of 210 out of 300 points and 20-25 tasks to complete in 2.5 hours, preparation is key. Focus on hands-on practice, especially with LVM, SELinux, systemd, and network configuration.
Understand the Exam Objectives and Domains
The RHCSA EX200 exam covers 9 domains: System Administration Tasks (26%), Network Services (20%), Storage Management (18%), User and Group Management (12%), Security (10%), System Configuration (8%), and Troubleshooting (6%). Each domain has specific tasks you must perform. Download the official Red Hat EX200 exam objectives PDF and map your study plan. Focus on high-weight areas like system administration and network services. The exam is 2.5 hours with 20-25 tasks; you need 210 out of 300 points to pass.
sudo subscription-manager register --username <your-username> --password <your-password>
sudo subscription-manager attach --auto
sudo dnf install -y redhat-access-insightsUse Red Hat's official practice labs (RHCSA Rapid Track) to simulate the exam environment.
Do not skip SELinux or firewalld tasks — they are frequently tested and can cost you points.
Master LVM and Storage Management
Logical Volume Manager (LVM) is a core skill. You must create, extend, reduce, and remove physical volumes, volume groups, and logical volumes. Practice adding new disks, creating partitions with fdisk or parted, and configuring LVM. Also understand ext4 and XFS filesystem creation, mounting, and persistent mounts via /etc/fstab. A common task is to extend a logical volume and resize the filesystem.
sudo pvcreate /dev/sdb
sudo vgcreate myvg /dev/sdb
sudo lvcreate -n mylv -L 2G myvg
sudo mkfs.xfs /dev/myvg/mylv
sudo mkdir /mnt/mydata
sudo mount /dev/myvg/mylv /mnt/mydata
echo '/dev/myvg/mylv /mnt/mydata xfs defaults 0 0' | sudo tee -a /etc/fstabAlways verify mounts with 'df -h' and 'lsblk' after changes.
Be careful with 'lvremove' — it destroys data without confirmation.
Configure Network Services and Firewall Rules
You must configure network interfaces, set static IP addresses, and manage hostname resolution. Use nmcli or nmtui to configure NetworkManager. Also configure firewalld zones and rules, including adding services (http, ssh) and ports. A typical task is to allow HTTP traffic on port 80/tcp and verify with firewall-cmd. Additionally, configure SSH key-based authentication and disable root login.
sudo nmcli con mod eth0 ipv4.addresses 192.168.1.100/24
sudo nmcli con mod eth0 ipv4.gateway 192.168.1.1
sudo nmcli con mod eth0 ipv4.dns 8.8.8.8
sudo nmcli con mod eth0 ipv4.method manual
sudo nmcli con up eth0
sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-port=8080/tcp
sudo firewall-cmd --reloadUse 'nmcli con show' to verify your network configuration before the exam.
If you misconfigure networking, you may lose SSH access — always have a console session open.
Manage Users, Groups, and Permissions
User and group management is heavily tested. You must create, modify, and delete users and groups, set passwords, configure password aging with chage, and assign supplementary groups. Also set file permissions using chmod, chown, and ACLs with setfacl. A common task is to create a shared directory with group ownership and set the SGID bit so new files inherit the group.
sudo useradd -m -G wheel alice
sudo passwd alice
sudo groupadd developers
sudo usermod -aG developers alice
sudo mkdir /srv/project
sudo chown :developers /srv/project
sudo chmod 2775 /srv/project
sudo setfacl -m u:bob:rwx /srv/projectUse 'getfacl' to verify ACLs and 'id' to check user group membership.
Never use chmod 777 — it's a security risk and may cost points in the exam.
Configure SELinux and System Security
SELinux is mandatory on RHEL and you must understand its modes (enforcing, permissive, disabled) and contexts. You may be asked to change SELinux mode, set file contexts with semanage fcontext and restorecon, or troubleshoot denied operations using audit2why. Also configure sudoers for privilege escalation and set up a basic firewall. A typical task is to allow Apache to serve content from a non-default directory.
sudo getenforce
sudo setenforce 1
sudo semanage fcontext -a -t httpd_sys_content_t '/var/www/html(/.*)?'
sudo restorecon -Rv /var/www/html
sudo ausearch -m avc | audit2why
sudo visudo -f /etc/sudoers.d/customUse 'ls -Z' to view SELinux contexts on files and directories.
Do not disable SELinux entirely — it will cause you to fail the exam.
Automate with systemd and Cron Jobs
You must manage system services using systemctl, create custom systemd service units, and enable/disable services at boot. Also configure cron jobs for scheduled tasks (e.g., backup scripts). A common task is to create a systemd service that runs a script on boot and ensure it restarts on failure. Understand journalctl for log viewing and troubleshooting.
sudo systemctl enable --now httpd
sudo systemctl status httpd
sudo journalctl -u httpd --since '1 hour ago'
# Create a systemd service unit
cat <<EOF | sudo tee /etc/systemd/system/myapp.service
[Unit]
Description=My Custom App
After=network.target
[Service]
ExecStart=/usr/local/bin/myapp.sh
Restart=on-failure
[Install]
WantedBy=multi-user.target
EOF
sudo systemctl daemon-reload
sudo systemctl enable myapp
# Cron job
crontab -e
0 2 * * * /usr/local/bin/backup.shAlways run 'systemctl daemon-reload' after modifying a unit file.
Cron jobs run with minimal environment — always use full paths in scripts.
Practice with Containers (Podman) and Virtualization
Red Hat includes container management using Podman (not Docker). You must pull images, run containers, manage volumes, and create containerized services. Also understand rootless containers and systemd integration. A typical task is to run a web server container with a persistent volume and expose it on a host port. Practice with 'podman run', 'podman ps', and 'podman exec'.
sudo dnf install -y podman
podman pull registry.access.redhat.com/ubi8/httpd-24
podman run -d --name web -p 8080:80 -v /webdata:/var/www/html:Z registry.access.redhat.com/ubi8/httpd-24
podman ps
podman exec -it web /bin/bash
podman generate systemd --name web > /etc/systemd/system/container-web.service
sudo systemctl daemon-reload
sudo systemctl enable --now container-webUse the ':Z' flag with volumes to automatically set SELinux context for containers.
Rootless containers cannot bind to ports below 1024 — use higher ports like 8080.
Key tips
Set up a home lab with RHEL 9 (free developer subscription) and practice every objective at least 3 times.
Time management is critical — if stuck on a task, move on and come back later. Each task is worth points.
Use 'man' pages and '--help' flags during the exam — they are available and can save you.
Focus on LVM, SELinux, and systemd — these domains appear in nearly every exam session.
Practice with mock exams from platforms like Linux Academy or Udemy to get used to the performance-based format.
Join Red Hat's official study groups or forums (e.g., Red Hat Learning Community) for tips and shared experiences.
Frequently asked questions
What is the passing score for the RHCSA EX200 exam?
The passing score is 210 out of 300 points (70%). The exam consists of 20-25 performance-based tasks, each worth varying points. You must complete tasks in a live RHEL environment within 2.5 hours.
Do I need to know Docker for the RHCSA?
No, Red Hat uses Podman instead of Docker. You should be comfortable with Podman commands like podman run, podman ps, podman exec, and podman generate systemd. The concepts are similar, but syntax differs.
Can I use the internet during the exam?
No, the exam is closed-book. However, you have access to man pages, info pages, and the --help flag for commands. No external websites or notes are allowed.
How long does it take to prepare for the RHCSA?
Most candidates need 2-3 months of consistent study, with at least 2-3 hours of hands-on lab practice per day. If you have prior Linux experience, 4-6 weeks may suffice.
Is the RHCSA exam updated for RHEL 9?
Yes, as of 2024, the EX200 exam is based on RHEL 9. Make sure you study the RHEL 9 objectives, which include new topics like Podman containers, systemd-journald, and updated SELinux policies.
Practice with real exam questions
Apply what you just learned with exam-style practice questions.