EX294 Practice Test 9 — 10 Questions

Question 1

A team uses execution environments (EE) for job templates. The admin builds a custom EE using `ansible-builder` with a `execution-environment.yml` file that includes a `base_image: registry.redhat.io/ansible-automation-platform-21/ee-minimal-rhel8:latest` and a custom Python requirement. However, the controller reports that the EE is not found when launching a job. What is the most likely issue?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The built EE image was not pushed to the container registry specified in the controller's execution environment configuration.. After building a custom execution environment with `ansible-builder`, the resulting container image must be pushed to a container registry that the Automation Controller is configured to access. The controller does not automatically pull images from the local build cache; it references the image by its registry path. If the image is not present in the specified registry, the controller will report that the EE is not found when launching a job.

Answer

The base image is pointing to an incorrect registry path.

Answer

The custom Python requirement needs to be added to `requirements.txt` in the project.

Answer

The execution environment does not include a `Containerfile` for the build process.

Question 2

Drag and drop the steps to configure a systemd service to start automatically at boot in the correct order.

Accepted Answer

Create unit file, Reload systemd, Enable service, Start service, Verify status. The correct sequence for configuring a systemd service to start at boot is: first create the unit file, then reload systemd to load the new unit, next enable the service to create the necessary symlinks for automatic start, then start the service immediately, and finally verify its status. Common mistakes include omitting the reload step, enabling after starting, or performing the reload too late.

Answer

Create unit file, Enable service, Start service, Verify status

Answer

Create unit file, Reload systemd, Start service, Enable service, Verify status

Answer

Create unit file, Start service, Enable service, Reload systemd, Verify status

Question 3

Which three methods can be used to pass variables to an Ansible playbook? (Select exactly 3.)

Accepted Answer

In the playbook's vars_files directive.. The `vars_files` directive in a playbook allows you to specify external YAML or JSON files containing variables, which are then merged into the play's variable scope at runtime. This is a standard method for passing variables to a playbook, as it separates variable definitions from the playbook logic.

Answer

In the ansible.cfg file.

Answer

In the role's vars/main.yml.

Question 4

An admin attempts to build an execution environment using the exhibited files. The build fails with an error about incompatible Python dependency. What is the most likely cause?

Accepted Answer

The Python requirements.txt tries to install a version of Ansible that conflicts with the version in the base image.. The build fails because the Python `requirements.txt` file attempts to install a version of Ansible that conflicts with the version already present in the base image `ee-minimal-rhel8`. Execution environments are designed to include a specific Ansible version in the base image; adding a different version via pip creates a dependency conflict that breaks the build.

Answer

The execution-environment.yml file uses incorrect syntax for the 'dependencies' section.

Answer

The collections in requirements.yml are not fully qualified.

Answer

The base image 'ee-minimal-rhel8' is not a valid execution environment base image.

Question 5

In OpenShift, a DeploymentConfig uses the RollingUpdate strategy. Which parameter controls the maximum number of pods that can be unavailable during an update?

Accepted Answer

maxUnavailable. In OpenShift, the RollingUpdate strategy for a DeploymentConfig uses the `maxUnavailable` parameter to specify the maximum number or percentage of pods that can be unavailable during the update process. This ensures that the desired number of pods remain available to serve traffic while the update rolls out, controlling the trade-off between update speed and availability.

Answer

minReadySeconds

Answer

maxSurge

Answer

revisionHistoryLimit

Answer

progressDeadlineSeconds

Question 6

An organization uses automation controller and has multiple teams. They want to create an inventory that automatically includes all hosts from a cloud provider that belong to the 'production' tag, and this inventory should be accessible only to the SRE team. What is the correct way to achieve this?

Accepted Answer

Create a smart inventory with a filter for tag 'production' and assign the SRE team the 'read' role on that inventory.. A smart inventory in automation controller allows you to dynamically filter hosts from an existing source (like a cloud provider) based on criteria such as tags. By creating a smart inventory with a filter for the 'production' tag, you automatically include all matching hosts. Assigning the SRE team the 'read' role on that inventory restricts access to only that team, meeting both requirements without manual updates.

Answer

Create a static inventory file and restrict access via a custom script.

Answer

Use groups in the inventory and assign all production hosts to a group, then restrict access to that group.

Answer

Create a dynamic inventory plugin in each playbook and include a condition to check team membership.

Question 7

Based on the exhibit, which file is generated by `ansible-builder` to support the build?

Accepted Answer

Containerfile. The `ansible-builder` tool uses a definition file (typically `execution-environment.yml`) to construct a container image. During the build process, it generates a `Containerfile` (or `Dockerfile`) that contains the exact instructions for building the container image, such as base image selection, package installation, and collection inclusion. This generated file is the actual artifact that the container runtime (e.g., Podman or Docker) uses to create the execution environment image.

Answer

requirements.yml

Answer

execution-environment.yml

Answer

ansible.cfg

Question 8

An organization is designing a high-availability Automation Platform deployment. Which TWO practices are essential for achieving high availability?

Accepted Answer

Deploy multiple automation controllers behind a load balancer.. Option C is correct because deploying multiple automation controllers behind a load balancer eliminates a single point of failure for the control plane, allowing traffic to be redistributed if one controller node becomes unavailable, which is fundamental to high availability. Option E is correct because using an external PostgreSQL database with replication ensures the shared data layer (job history, credentials metadata, inventories, etc.) remains available even if a database node fails, and externalizing it also decouples database lifecycle from controller nodes. Option A is incorrect because a single PostgreSQL instance on the controller node creates a single point of failure and couples the database to that node, undermining HA. Option B is incorrect because consolidating everything on one powerful node still leaves a single point of failure regardless of performance. Option D is incorrect because storing secrets in the Automation Platform vault is a security best practice for credential management, not a high-availability mechanism.

Answer

Use a single instance of PostgreSQL on the controller node.

Answer

Installation on a single powerful node.

Answer

Store all secrets in the Automation Platform vault.

Question 9

Which THREE of the following are valid attributes of the ansible.builtin.service module?

Accepted Answer

state. The `state` attribute is a core parameter of the `ansible.builtin.service` module, used to define the desired service status (e.g., `started`, `stopped`, `restarted`, `reloaded`). This directly controls the service's runtime state on the target system.

Answer

pattern

Answer

runlevel

Question 10

Drag and drop the steps to configure a network bond (bond0) using nmcli in the correct order.

Accepted Answer

1. Create bond connection; 2. Add slave interfaces; 3. Set bonding mode; 4. Activate bond; 5. Verify bond status. The correct order to configure a network bond using nmcli is: create the bond connection first, then add slave interfaces to it, set the bonding mode (e.g., active-backup), activate the bond, and finally verify the bond status. This sequence ensures that the bond interface exists before adding slaves and that the mode is set before activation so that the bond operates correctly from the start.

Answer

1. Create bond connection; 2. Add slave interfaces; 3. Activate bond; 4. Set bonding mode; 5. Verify bond status

Answer

1. Set bonding mode; 2. Create bond connection; 3. Add slave interfaces; 4. Activate bond; 5. Verify bond status

Answer

1. Add slave interfaces; 2. Create bond connection; 3. Activate bond; 4. Set bonding mode; 5. Verify bond status