RHCSA — Red Hat Certified System Administrator
I prepare candidates for RHCSA differently than for any multiple-choice exam. The EX200 is entirely performance-based — you get a RHEL virtual machine and a task list, and you have 150 minutes to complete the tasks. There are no answer choices. Either the system is configured correctly when the automated grader runs, or it is not. Reading study guides alone will not pass this exam. You need to type commands under time pressure until the correct sequence is muscle memory.
Exam at a glance
| Detail | Value |
|---|---|
| Provider | Red Hat |
| Exam code | EX200 |
| Full name | Red Hat Certified System Administrator (RHCSA) |
| RHEL version | RHEL 9 (current); RHEL 8 version still offered |
| Duration | 150 minutes |
| Question format | Performance-based tasks (no multiple choice) |
| Passing score | 210 / 300 (70%) |
| Exam fee | ~$400 USD |
| Validity | 3 years (renewable via Red Hat recertification activity) |
| Delivery | In-person at Red Hat testing center or remote proctored |
| Retake policy | No mandatory wait period; fee applies per attempt |
What's tested
Red Hat publishes the RHCSA exam objectives in full. The graded tasks draw from these categories.
Essential tools. Shell navigation, find with multiple criteria, input/output redirection, grep and regular expressions, SSH key-based authentication, archiving with tar and compression options. These are the foundational tasks that appear in almost every practice exam.
Create simple shell scripts. Conditional logic (if/else), loops (for, while), positional parameters, exit codes. Scripts on the exam are typically short — 5–15 lines — and test specific constructs.
Operate running systems. Starting and stopping services with systemctl, changing default targets (systemd equivalent of runlevels), identifying and killing processes, process priorities with nice and renice, recovering the root password via GRUB (this appears on most exam forms).
Configure local storage. Partitioning with fdisk and gdisk, creating swap partitions and activating them persistently, working with LVM (pvcreate, vgcreate, lvcreate, lvextend, pvmove), and understanding when to use MBR vs GPT partitioning.
Create and configure file systems. Creating ext4 and xfs file systems, mounting them persistently via /etc/fstab, configuring autofs for NFS auto-mounting, setting file permissions (standard and special bits), configuring access control lists (ACLs) with setfacl and getfacl.
Deploy, configure, and maintain systems. Package management with dnf — installing, removing, searching, and working with repos. Configuring NTP (chronyc), modifying the boot process via GRUB2 configuration.
Manage basic networking. Configuring static IP addresses with nmcli or nmtui, setting hostnames, configuring name resolution, testing connectivity. The exam expects nmcli fluency — not editing config files by hand.
Manage users and groups. Creating users and groups, setting password aging policies, configuring sudoers, managing group membership.
Manage security. SELinux — this is where most candidates lose points. Understanding SELinux modes (enforcing, permissive, disabled), changing them persistently with semanage, restoring file contexts with restorecon, troubleshooting denials with ausearch and sealert. Firewall management with firewall-cmd — adding services and ports, making changes permanent.
Common exam traps
SELinux context after file relocation. The single most common failure on actual RHCSA exams: you copy or move a file to a new location, configure a service to use it, and the service fails because the file has the wrong SELinux context. The fix is restorecon -Rv /path/to/file (or the full directory). Candidates who know the command abstractly often fail to apply it in the correct order — the service must fail first, then you look at SELinux contexts, then you apply restorecon. Practice this exact sequence until it is automatic.
firewall-cmd -- permanent vs live. Running firewall-cmd --add-service=http applies the rule immediately but it does not survive a reboot. Running firewall-cmd --add-service=http --permanent saves the rule but does not apply it to the running firewall. To do both, you need either two commands or --add-service=http --permanent followed by --reload. Candidates who only remember one of the two fail the reboot check that the grader performs.
LVM extension order. The sequence for extending a logical volume has no shortcuts: pvcreate on the new device, vgextend to add the physical volume to the volume group, lvextend -L +size /dev/vg/lv to extend the logical volume, then xfs_growfs or resize2fs to extend the filesystem. Skipping the filesystem resize step leaves the extra space allocated but unused — the grader checks the mounted filesystem size, not just the LV size.
GRUB password recovery — do not skip the persist step. The root password reset task requires you to boot into a special shell, change the password, and then — crucially — ensure the change persists. The exact final step depends on whether SELinux is in enforcing mode: you must run touch /.autorelabel before rebooting so SELinux relabels the shadow file. Missing this step means the password change is lost when the system boots normally.
Persistent mounts in /etc/fstab using UUIDs. The exam often asks you to mount a file system persistently. Using device names like /dev/sdb1 works but is fragile — device order can change between boots. Use blkid to find the UUID and reference that in /etc/fstab. Experienced Linux users who use device names out of habit sometimes lose points here because the grader reboots the system before checking.
How ARIA prepares you for RHCSA
RHCSA is a skills exam, not a knowledge exam. My evaluation adapts to your actual command-line experience. If you can answer conceptual questions about LVM but make errors in the command sequence, the roadmap focuses on hands-on practice tasks, not more reading.
The roadmap I generate for RHCSA is structured around the grader's perspective: what does a correctly configured system look like for each task? Each milestone corresponds to a category of exam tasks. Milestone validation checks whether you can complete the task from scratch, not just whether you understand the concept.
For someone with general Linux experience on Debian or Ubuntu, plan for 6–8 weeks — the SELinux and systemd content is RHEL-specific and requires dedicated practice. For someone already working on RHEL or CentOS daily, 3–4 weeks of focused practice on the exam task categories is typically enough.
Pass guarantee for RHCSA
RHCSA qualifies for the ClaudeLab pass guarantee. The guarantee evaluates your readiness across the exam task categories, not just conceptual knowledge. Full conditions here.
Related certifications
RHCE (Red Hat Certified Engineer) is the direct successor — it requires an active RHCSA and focuses entirely on Ansible automation for RHEL system management. If you are planning to pursue RHCE, treat RHCSA as a prerequisite, not just a companion. For the container and orchestration track, CKA (Certified Kubernetes Administrator) and DCA (Docker Certified Associate) pair naturally with RHCSA for a complete Linux infrastructure skill set. The Linux+ (CompTIA) is a lighter alternative if the performance-based format is a concern — it is multiple choice and covers a broader range of distributions.
Start your RHCSA roadmap
Start your RHCSA roadmap with ARIA → claudelab.me
RHCSA rewards candidates who have practiced every task category under time pressure. The evaluation I run will identify which task categories you are not drilling fast enough — SELinux and storage are where most people need the most reps. The roadmap builds in timed practice sessions from Phase 1 onward, not as an end-stage sprint.