EX294 Practice Test 13 — 15 Questions

Question 1

Refer to the exhibit. What is the output of the debug task?

Accepted Answer

192.168.1.10. The `debug` task in Ansible uses the `msg` parameter to display the value of a variable. In the exhibit, the variable `ansible_default_ipv4.address` is referenced, which returns the IPv4 address of the default network interface. Since the host's default interface is eth0 with IP 192.168.1.10, the debug output is that IP address. Option D correctly shows the output as '192.168.1.10'.

Answer

10.0.0.5

Answer

[ '192.168.1.10' ]

Answer

eth0

Question 2

Match each SELinux context component to its meaning.

Accepted Answer

user: The SELinux user identity that defines which roles a user can enter.. The SELinux security context consists of user:role:type:level. User identifies the SELinux user, role defines allowed types via RBAC, type is for Type Enforcement, and level for MLS/MCS. Common confusions include mistaking user for process attributes or role for hardware.

Answer

user: The component that specifies the process's current working directory.

Answer

role: The component that defines the hardware architecture.

Question 3

An automation team is designing a content collection to distribute internal Ansible modules across the organization. The collection should be installed from a private Galaxy server. To minimize namespace conflicts and ensure discoverability, which naming convention should be used for the collection?

Accepted Answer

namespace.collection_name. In Ansible, collections are distributed using a fully qualified collection name (FQCN) in the format `namespace.collection_name`. This naming convention is required by the Ansible Galaxy server and the `ansible-galaxy collection install` command to uniquely identify and install collections, minimizing namespace conflicts and ensuring discoverability across the organization.

Answer

collection_name.namespace

Answer

namespace_collection_name

Answer

namespace-collection_name

Question 4

Match each Linux command to its function.

Accepted Answer

ls: Lists directory contents. Correct matches: ls lists directory contents, cp copies files/directories, mv moves/renames, rm removes. Common confusions include mixing up cp with mv and ls with cat.

Answer

ls: Displays file contents

Answer

cp: Moves files

Question 5

You are an Ansible Tower administrator for a company that uses a dynamic inventory script to pull hosts from AWS. The script has been working for months, but after a recent security update, the job template that uses this inventory fails with the error: 'ERROR! Unable to parse /path/to/inventory/script.py as an inventory source'. The script is executable and the path is correct. What is the most likely cause?

Accepted Answer

The required Python modules (e.g., boto3) are missing in the Tower virtual environment.. The error 'Unable to parse /path/to/inventory/script.py as an inventory source' typically occurs when the dynamic inventory script fails to execute properly. Since the script is executable and the path is correct, the most likely cause is that the required Python modules (e.g., boto3 for AWS) are missing in the Ansible Tower virtual environment. Tower runs inventory scripts in its own Python virtual environment, and if boto3 is not installed there, the script cannot import it and fails, leading to the parse error.

Answer

The inventory source type has been changed to 'Manual' instead of 'Scraped from project'.

Answer

The script has been deleted from the project directory.

Answer

The script lacks execute permissions for the Tower service user.

Question 6

Match each storage concept to its description.

Accepted Answer

LVM: Allows flexible disk management with volume groups and logical volumes. The correct matches are: LVM for flexible disk management with VGs and LVs, RAID for combining disks for redundancy/performance, Stratis for pool-based snapshots and thin provisioning, and VDO for block-level deduplication/compression. Common confusions include swapping LVM with VDO and RAID with Stratis.

Answer

LVM: Deduplicates and compresses data at the block level

Answer

RAID: Provides thin provisioning and snapshots using a pool-based model

Question 7

Drag and drop the steps to create and apply a simple Ansible playbook that installs httpd into the correct order.

Accepted Answer

Create the playbook file, then define hosts and tasks, then execute the playbook, then verify the httpd service.. A playbook defines hosts and tasks; tasks use modules; after execution, verification confirms success.

Answer

Define hosts and tasks, then create the playbook file, then execute the playbook, then verify the httpd service.

Answer

Create the playbook file, then execute the playbook, then verify the httpd service, then define hosts and tasks.

Answer

Execute the playbook, then create the playbook file, then define hosts and tasks, then verify the httpd service.

Question 8

Which TWO conditions cause an Ansible rolling update playbook to abort immediately? (Choose exactly two.)

Accepted Answer

The failure count in a batch exceeds max_fail_percentage.. Ansible's rolling update logic uses `max_fail_percentage` to control batch failure tolerance. If the number of failed hosts in a batch exceeds this percentage, the playbook aborts immediately to prevent cascading failures. Option C is correct because setting `any_errors_fatal: yes` causes the entire playbook to abort as soon as any task fails on any host, regardless of batch boundaries.

Answer

A task returns 'changed' when 'changed_when: false' is used.

Answer

The playbook runs with the --check flag.

Answer

A host is unreachable due to network issues.

Question 9

An Ansible inventory file uses the `gce.py` dynamic inventory script for Google Cloud. After running the script, the inventory contains hosts but no variables. What is the most likely cause?

Accepted Answer

The script's JSON output lacks the 'vars' section for the group.. Dynamic inventory scripts like `gce.py` output JSON that must include a `_meta` section with `hostvars` for host-specific variables, and a `vars` subsection within each group to define group-level variables. If the script's JSON output lacks the `vars` section for a group, Ansible will still see the hosts but will not populate any variables for that group, resulting in hosts with no associated variables.

Answer

The script is not executable.

Answer

The GCE service account lacks permissions to read instance metadata.

Answer

The inventory file uses `hosts: all`.

Question 10

An Ansible playbook retrieves a list of dictionaries from an API. Each dictionary has keys 'name', 'status', and 'zone'. The playbook needs to filter out entries where 'status' is 'inactive' and then extract only the 'name' values. Which THREE of the following combinations of filters and loops would achieve this?

Accepted Answer

{{ data | rejectattr('status', 'equalto', 'inactive') | map(attribute='name') | list }}. `rejectattr` filters out items where `status` equals 'inactive', and then `map(attribute='name')` extracts the `name` values from the remaining dictionaries. The `| list` filter converts the result into a list. This is a standard Jinja2 filter chain in Ansible for filtering and transforming data.

Answer

{{ data | rejectattr('status', 'equalto', 'inactive') | extract('name') | list }}

Answer

{{ data | selectattr('status != inactive') | map(attribute='name') | list }}

Question 11

An Ansible automation engineer is writing a playbook to configure network devices. They need to extract specific data from a JSON structure returned by an API call. Which two filters from the `ansible.utils` collection can be used to manipulate the data?

Accepted Answer

ipaddr. The `ipaddr` filter from `ansible.utils` is used to manipulate and validate IP addresses and network objects within a JSON structure, making it suitable for extracting specific network data from API responses. The `zip` filter combines lists element-wise into a list of tuples, which can help restructure data returned by an API for further processing. Both filters are part of the `ansible.utils` collection and directly support data manipulation tasks in Ansible playbooks.

Answer

to_json

Answer

json_query

Answer

from_json

Question 12

An organization wants to share a collection internally across multiple teams while ensuring that each team can only use specific modules from the collection. Which approach best supports this requirement?

Accepted Answer

Create separate collections for each team and publish them to the private Automation Hub.. It uses separate collections published to a private Automation Hub, which allows each team to access only the specific collection containing the modules they need. This approach leverages Automation Hub's role-based access control (RBAC) to enforce team-specific permissions, ensuring that teams cannot see or use modules from other collections.

Answer

Use a single collection and annotate modules with metadata to restrict access.

Answer

Store the collection in a Git repository and use branch permissions to hide modules.

Answer

Publish a single collection with all modules and rely on documentation to indicate which modules are for which team.

Question 13

Refer to the exhibit. The administrator defines a default variable 'db_port' in the role's defaults/main.yml. However, the playbook sets 'db_port: 3307' as a role parameter. After running the playbook, what is the value of 'db_port' on the target host?

Accepted Answer

3307

Answer

Undefined

Answer

An error occurs because of conflicting definitions.

Answer

3306

Question 14

As an Ansible Tower administrator, you are tasked with setting up a job template that interacts with multiple cloud providers. The job template uses a custom credential type that includes two fields: 'api_token' (type password) and 'region' (type text). During a test run, the job fails with an error that the 'region' variable is not defined in the playbook. The playbook references {{ region }} and {{ api_token }}. You verified that the credential is assigned to the job template and the values are populated. What is the most likely issue?

Accepted Answer

The playbook uses the variable names without the credential-specific prefix.. In Ansible Tower/AWX, when a custom credential type is used, the variables defined in the credential's injector configuration are automatically prefixed with the credential name (or a custom namespace) when injected into the job environment. If the injector does not explicitly map the fields to the exact variable names used in the playbook (e.g., `region` and `api_token`), the playbook will fail with an undefined variable error. The most likely issue is that the credential's injector configuration does not set the variables as `{{ region }}` and `{{ api_token }}` without a prefix, or the playbook is expecting the variables without the credential-specific namespace that Tower injects by default.

Answer

The credential is assigned to the project instead of the job template.

Answer

The 'api_token' field is encrypted but the 'region' field is not, causing a parsing error.

Answer

The 'region' field is defined as 'password' type, so it is hidden.

Question 15

What is the most likely cause of the failure?

Accepted Answer

The nginx role's defaults or vars do not define 'nginx_version'.. The error indicates that Ansible cannot resolve the variable 'nginx_version' during the playbook run. Since the `--check` flag only simulates changes and does not affect variable resolution, the most likely cause is that the nginx role's `defaults/main.yml` or `vars/main.yml` does not define this variable, leaving it undefined and causing the failure.

Answer

The --check flag prevents role variable resolution.

Answer

The host web1 is not configured to use the nginx role.

Answer

The nginx role was not included in the playbook correctly.