EX294 Implement advanced Ansible automation • Complete Question Bank
Complete EX294 Implement advanced Ansible automation question bank — all 0 questions with answers and detailed explanations.
fatal: [web1]: FAILED! => {\n "msg": "the field 'args' has an invalid value, which appears to include a variable that is undefined. The error was: 'ansible_os_family' is undefined"\n}You have an Ansible playbook that uses the 'lineinfile' module to manage the /etc/ssh/sshd_config file. The playbook runs without errors, but after execution, the SSH service becomes unreachable on some hosts. Investigation reveals that the file contains duplicate lines for 'Port 22' and 'PermitRootLogin no'. The playbook uses the following task:
- name: Ensure SSH settings ansible.builtin.lineinfile: path: /etc/ssh/sshd_config regexp: "^{{ item.key }}" line: "{{ item.key }} {{ item.value }}" loop: - { key: 'Port', value: '22' } - { key: 'PermitRootLogin', value: 'no' }
The playbook is run multiple times. What is the most likely cause of the duplicate lines?
Your team is responsible for managing a fleet of 200 RHEL 8 servers using Ansible Tower. You have been asked to implement a secure automation workflow that meets the following requirements:
1. All playbooks must be stored in a private Git repository hosted on an internal GitLab server. 2. Credentials to access the Git repository must be stored securely in Ansible Tower. 3. The automation must run on a schedule every night at 2:00 AM. 4. If a playbook run fails, the team must be notified via email. 5. The playbooks require SSH private keys to connect to the managed hosts; these keys must be stored securely. 6. A development team needs to be able to launch the same job template manually, but they must not be able to modify the job template or view the credentials.
You have created a Machine Credential for SSH and a Source Control Credential for Git. You have also created a Job Template that references the project, inventory, and credentials. What is the correct sequence of steps to satisfy all requirements?
An engineer runs the playbook as shown:
```yaml - hosts: all tasks: - block: - name: configure firewall command: /bin/false - name: enable service service: name=httpd enabled=yes - name: start service service: name=httpd state=started
- hosts: all tasks: - name: next task debug: msg="Continuing to next play" ```
What is the expected result?
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag a concept onto its matching description — or click a concept then click the description.
Fully qualified domain name
OS family (e.g., RedHat)
Total memory in MB
Number of CPU cores
Default IPv4 interface info
- name: Check if package is installed command: rpm -q httpd register: result failed_when: result.rc != 0 and 'not installed' not in result.stderr changed_when: false
TASK [Gathering Facts] *********************************************************
fatal: [server1]: FAILED! => {"msg": "Missing sudo password"}[webservers] web1 ansible_host=192.168.1.10 http_port=80 web2 ansible_host=192.168.1.11 http_port=8080 [webservers:vars] http_port=80
db_password: !vault |\n $ANSIBLE_VAULT;1.1;AES256\n 65633239636661303062643934383034656661653332313234363166666562356362336638613235\n 3631326331383333616565613737353565386336303231660a666538613337343366346639666337\n 65303334376432343533393338333335393763363034646161333966373730336163386639636335\n 3332376365323932610a323639303336316338616336366232333338353731333434613266306336\n 3766
[webservers]\nweb1\n\n[databases]\ndb1\n\n[production:children]\nwebservers\ndatabases\n\n[production:vars]\nansible_user=admin\n
Refer to the exhibit. [webservers] web1 ansible_host=10.1.1.1 web2 ansible_host=10.1.1.2 [webservers:vars] ansible_user=deploy ansible_port=2222 [dbservers] db1 ansible_host=10.2.2.1 [dbservers:vars] ansible_user=dbadmin
Refer to the exhibit.
- name: Deploy app
hosts: app_servers
gather_facts: no
tasks:
- name: Copy config
copy:
src: /templates/app.conf.j2
dest: /etc/app.conf
backup: yes
- name: Ensure service is running
service:
name: app
state: startedRefer to the exhibit.
---
- name: example block
block:
- name: risky task
command: /bin/false
rescue:
- name: rescue task
debug:
msg: "Rescued"
always:
- name: always task
debug:
msg: "Always runs"# cat tasks/main.yml
- name: Create config
template:
src: config.j2
dest: /etc/config.cfg
notify: restart service
- name: Verify config
command: /usr/local/bin/validate /etc/config.cfg
changed_when: false
# cat handlers/main.yml
- name: restart service
service:
name: myapp
state: restarted
# ansible-playbook site.yml
PLAY [all] *********************************************************************
TASK [Create config] ***********************************************************
changed: [host1]
TASK [Verify config] ***********************************************************
fatal: [host1]: FAILED! => {"changed": false, "msg": "Validation failed", "rc": 1}# ansible-doc -t lookup fileglob
> FILEGLOB (/usr/lib/python3.9/site-packages/ansible/plugins/lookup/fileglob.py)
# cat lookup_usage.yml
- name: Copy config files
copy:
src: "{{ item }}"
dest: /etc/app/
with_fileglob:
- "/tmp/configs/*.conf"
# ls /tmp/configs/
server1.conf server2.conf server3.conf server4.conf
# ansible-playbook lookup_usage.yml -l host1
TASK [Copy config files] *******************************************************
ok: [host1] => (item=/tmp/configs/server1.conf)
ok: [host1] => (item=/tmp/configs/server2.conf)
ok: [host1] => (item=/tmp/configs/server3.conf)
ok: [host1] => (item=/tmp/configs/server4.conf)# cat vars.yml
---
packages:
- httpd
- mariadb-server
- php
# cat playbook.yml
- hosts: all
vars_files:
- vars.yml
tasks:
- name: Install packages
yum:
name: "{{ packages }}"
state: present
become: yes
# ansible-playbook playbook.yml
PLAY [all] *********************************************************************
TASK [Gathering Facts] *********************************************************
ok: [server1]
TASK [Install packages] ********************************************************
fatal: [server1]: FAILED! => {"changed": false, "msg": "This module requires a list of package names or a comma-separated string.", "results": []}---
- name: Deploy web app
hosts: webservers
become: yes
vars:
app_version: "2.1.0"
tasks:
- name: Install Apache
yum:
name: httpd
state: latest
- name: Deploy application
copy:
src: /var/www/app-v{{ app_version }}.tar.gz
dest: /var/www/html/app.tar.gz
- name: Extract archive
unarchive:
src: /var/www/html/app.tar.gz
dest: /var/www/html/
remote_src: yes
- name: Start Apache
service:
name: httpd
state: started[root@control ~]# ansible-playbook -i inventory site.yml -vvv
ansible-playbook 2.9.18
config file = /etc/ansible/ansible.cfg
configured module search path = ['/usr/share/ansible/plugins/modules']
ansible python module location = /usr/lib/python3.6/site-packages/ansible
executable location = /usr/bin/ansible-playbook
python version = 3.6.8 (default, Nov 16 2020, 16:55:22) [GCC 8.3.1 20191121 (Red Hat 8.3.1-5)]
Using /etc/ansible/ansible.cfg as config file
PLAY [Install packages] ********************************************************
TASK [Gathering Facts] *********************************************************
ok: [server1]
TASK [Install httpd] ***********************************************************
fatal: [server1]: FAILED! => {"changed": false, "msg": "No package matching 'httpd' found available, tried everything", "results": []}
PLAY RECAP *********************************************************************
server1 : ok=1 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0---
- name: Configure SSH
hosts: all
tasks:
- name: Ensure SSH server is running
service:
name: sshd
state: started
- name: Set SSH MaxAuthTries
lineinfile:
path: /etc/ssh/sshd_config
regexp: '^#?MaxAuthTries'
line: 'MaxAuthTries 3'
notify: restart sshd
handlers:
- name: restart sshd
service:
name: sshd
state: restarted---
- name: Deploy configuration
hosts: all
vars:
config_source: "/templates/app.conf.j2"
tasks:
- name: Template configuration
template:
src: "{{ config_source }}"
dest: "/etc/app/app.conf"
notify: restart app
handlers:
- name: restart app
systemd:
name: app
state: restarted
daemon_reload: yes