RHCE EX294: How to Pass the Red Hat Certified Engineer Exam

Key takeaways

• EX294 is performance-based: you configure real systems with Ansible and are marked on the result, not on your answers to questions.
• Hold RHCSA first. Red Hat lists it as the prerequisite for the RHCE certification.
• The pass mark is 210 out of 300 and the certification is valid for 3 years. Always confirm the current exam details and fee on Red Hat's page.
• Practise on RHEL, Rocky Linux or AlmaLinux. CentOS Linux is end-of-life and should not be your lab.
• Most failed attempts come from slow typing of YAML, forgotten become, and playbooks that were never run twice to check idempotency.

What is the RHCE EX294 exam?

EX294 is the exam for the Red Hat Certified Engineer (RHCE) credential. It tests whether you can manage Red Hat Enterprise Linux systems by automating them with Ansible. You sit at a live environment, get a list of tasks, and are marked on whether the systems end up in the state each task describes.

That last point shapes everything. Nobody reads your playbook for style. A script either configures the managed nodes correctly or it does not. This is why practice beats reading for this exam.

Who should take EX294?

• Linux administrators who hold RHCSA and want to move from typing commands to writing automation.
• DevOps and cloud engineers who already use Ansible in small ways and want a recognised credential.
• Engineers moving from shell scripts, Puppet or Chef to Ansible on Red Hat systems.

If you are still unsure about SELinux, LVM or systemd, take RHCSA first. Ansible modules only automate what you already understand.

What are the prerequisites?

Red Hat lists RHCSA (EX200) as the prerequisite for the RHCE certification, so plan to hold it before or alongside EX294. Beyond the certificate, you need:

• Comfort at the Linux command line, and basic shell scripting.
• Working knowledge of RHEL: users, packages, services, firewalld, SELinux, storage.
• Basic Ansible: running ad-hoc commands, reading YAML, writing a simple playbook.

What are the exam facts?

Exam details and versions change. Always confirm the objectives and format on the official Red Hat Training and Certification pages before you book.

What skills does EX294 test?

The objectives centre on Ansible for RHEL administration. In plain terms you should be able to:

• Install and configure a control node and set up SSH key access to managed nodes.
• Write static inventories with groups and variables, and understand dynamic inventories.
• Configure ansible.cfg so playbooks find the right inventory, user and privilege escalation.
• Run ad-hoc commands and choose the right module for a job.
• Write playbooks with plays, tasks, handlers, conditionals and loops.
• Use variables, facts and Jinja2 templates to generate configuration files.
• Build and use roles, including roles from collections or Ansible Galaxy-style sources.
• Protect secrets with Ansible Vault.
• Use Ansible to manage users, packages, services, storage, firewall rules, SELinux and scheduled jobs.
• Troubleshoot failing playbooks using verbose output and syntax checks.

Use fully qualified collection names such as ansible.builtin.dnf in your practice, since that is what current documentation shows. Check Red Hat's objectives to see whether tools such as ansible-navigator are expected in your exam version.

What does an exam-style task look like?

Here is a small practice task of the kind you should be able to do in a few minutes: install a web server on hosts in the web group, deploy a templated page, open the firewall and restart the service only when the page changes.

---
- name: Configure web servers
 hosts: web
 become: true
 vars:
 site_message: "Managed by Ansible"
 tasks:
 - name: Install httpd
 ansible.builtin.dnf:
 name: httpd
 state: present

 - name: Deploy index page from template
 ansible.builtin.template:
 src: index.html.j2
 dest: /var/www/html/index.html
 mode: "0644"
 notify: Restart httpd

 - name: Enable and start httpd
 ansible.builtin.service:
 name: httpd
 state: started
 enabled: true

 - name: Open HTTP in firewalld
 ansible.posix.firewalld:
 service: http
 permanent: true
 immediate: true
 state: enabled

 handlers:
 - name: Restart httpd
 ansible.builtin.service:
 name: httpd
 state: restarted

The template file index.html.j2 can be as simple as <h1>{{ site_message }} on {{ ansible_facts['hostname'] }}</h1>. Run the playbook, then run it again. The second run should report changed=0. If it does not, a task is not idempotent and you have found something to fix.

Before running it, check with ansible-playbook --syntax-check site.yml. Use ansible-doc ansible.posix.firewalld to see the parameters offline. In the exam, ansible-doc is your friend.

How do you protect secrets with Vault?

Ansible Vault encrypts variable files so passwords are not stored in plain text. The commands you must know by heart are:

ansible-vault create secret.yml
ansible-vault edit secret.yml
ansible-vault view secret.yml
ansible-vault encrypt vars/db.yml
ansible-playbook site.yml --ask-vault-pass
ansible-playbook site.yml --vault-password-file ~/.vault_pass

If you use a password file, set its permissions to 0600 and reference it in ansible.cfg with vault_password_file. A common loss of marks is a playbook that works only because you typed the password by hand.

How should you set up a practice lab?

You need one control node and two or three managed nodes. Four virtual machines are plenty.

• Use RHEL, Rocky Linux or AlmaLinux. RHEL is free to use for individual development and learning with a Red Hat developer subscription. Rocky and AlmaLinux are RHEL-compatible rebuilds.
• Do not use CentOS Linux. It is end-of-life and no longer receives updates. CentOS Stream tracks ahead of RHEL and behaves differently.
• Give every node a hostname and make sure the control node can resolve them.
• Reset the lab often. Rebuilding a node from a snapshot is part of practice, because the exam gives you fresh systems.

Our official-course page for RHCE EX294 includes guided labs if you prefer a trainer-led setup.

What is a good preparation plan?

1. Weeks 1 and 2: foundations. Inventories, ansible.cfg, ad-hoc commands, and the common modules for packages, services, files and users.
2. Weeks 3 and 4: playbooks. Variables, facts, loops, conditionals, handlers and templates. Write each playbook without copying.
3. Weeks 5 and 6: roles and Vault. Build at least three roles from scratch, one using templates and handlers. Practise Vault until the commands are automatic.
4. Weeks 7 and 8: timed mock exams. Set a 4-hour timer. Write your own task list from the objectives, solve it without notes, and review what took too long.

Adjust the timing to your experience. The goal is to finish a full set of tasks with time left to check each one.

What mistakes cost candidates marks?

• Never running the playbook twice. Idempotency problems hide until the second run.
• Forgetting become: true or setting it in the wrong place.
• YAML indentation errors, especially in nested module arguments.
• Using the command or shell module when a proper module exists. It works once but is rarely idempotent.
• Handlers that never fire because notify text does not match the handler name exactly.
• Not testing after a reboot. If a task says the setting must persist, confirm it survives a restart.
• Spending too long on one task. Move on and return. Partial results often earn marks.
• Not reading the task fully. File names, paths, modes and group names are specified for a reason.

Is RHCE worth it for your career?

RHCE shows employers you can automate Linux estates, which is the core of many system administration, DevOps and platform roles. It is also a stepping stone toward the Red Hat Certified Architect (RHCA) track. Salary outcomes depend heavily on your experience, city and employer, so treat any promised figure with caution.

Next steps

Write the sample playbook above from memory tomorrow, run it twice, and note what you forgot. If you want a structured path, see our RHCE EX294 course. For exam-day tactics read 10 tips to ace the RHCE EX294 exam, and check fees and vouchers on the RHCE EX294 cost page.

Related reading

• Latest RHCE EX294 Real Exam Questions & Answers for Guaranteed Success
• How to Pass RHCE EX294 Certification [ A Success Story] in 1st Attempt.