EX294 Deploy Ansible Automation Platform — All Questions With Answers

Question 1easymultiple choice

An organization wants to deploy Ansible Automation Platform 2.x in a highly available configuration. Which component must be deployed in an active-active cluster to ensure controller failover?

Question 2hardmultiple choice

A DevOps engineer is troubleshooting an Ansible Automation Platform deployment where ansible-navigator fails to run a playbook, showing the error 'Error: Unable to pull execution environment image'. The ansible-navigator configuration file is shown in the exhibit. Which change should the engineer make to resolve the issue?

Exhibit

Refer to the exhibit.

[root@controller ~]# cat /etc/ansible-automation-platform/ansible-navigator.yml
---
ansible-navigator:
  execution-environment:
    image: registry.internal.example.com/ee-supported:latest
    pull:
      policy: missing
  playbook-artifact:
    enable: false
  logging:
    level: debug
  mode: stdout
  set-environment:
    ANSIBLE_INVENTORY: /opt/inventory/hosts
    ANSIBLE_ROLES_PATH: /opt/roles

Question 3mediummulti select

Read the full Ansible explanation →

Which TWO statements are true about deploying Red Hat Ansible Automation Platform using the automation mesh?

Question 4hardmultiple choice

Read the full Ansible explanation →

A systems administrator is deploying Ansible Automation Platform 2.4 using the provided setup script. The installation fails with the error shown in the exhibit. Based on the exhibit, what is the most likely cause of the failure?

Exhibit

Refer to the exhibit.

[root@controller ~]# cat /etc/ansible-automation-platform/setup.sh
#!/bin/bash
# AAP 2.4 installer

# ...
ADMIN_PASSWORD='redhat'
PGHOST='192.168.1.100'
PGPORT='5432'
PGDATABASE='awx'
PGUSER='awx_admin'
PGPASSWORD='secure_pass'
# ...

[root@controller ~]# ./setup.sh -i inventory.yml
...
TASK [Installer : wait for controller to be ready] ****************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Timeout waiting for controller to become ready. Check logs."}

[root@controller ~]# cat /var/log/ansible-automation-platform/controller/startup.log
...
ERROR: could not connect to server: Connection refused
	Is the server running on host "192.168.1.100" and accepting TCP/IP connections on port 5432?

Question 5mediummultiple choice

Read the full VPN explanation →

A company is deploying Red Hat Ansible Automation Platform 2.3 in a hybrid cloud environment. The automation controller is installed on a RHEL 8 server in the on-premises data center. Execution nodes are distributed: four in the same data center, two in a remote branch office connected via VPN, and three in AWS EC2 instances. The VPN connection to the branch office is low-bandwidth and high-latency. The AWS nodes use a direct connect with stable bandwidth. During initial testing, playbooks running on the branch office execution nodes frequently timeout or hang, while on-premises and AWS nodes work fine. The automation mesh topology is configured with all nodes as direct children of the controller. The team wants to minimize latency and ensure reliable execution for the branch office nodes. Which course of action should the administrator take?

Question 6easymulti select

Read the full Ansible explanation →

Which TWO statements are true regarding the deployment of Ansible Automation Platform in a highly available configuration?

Question 7mediummultiple choice

Read the full Ansible explanation →

You are deploying Red Hat Ansible Automation Platform in a restricted network environment where the automation controller, automation hub, and execution nodes cannot access the internet. You have successfully installed the automation controller and automation hub on separate RHEL 8 servers using a local repository. The automation hub is configured to sync collections from a local mirror. After deployment, you attempt to create a new job template that uses a collection from automation hub, but the job template creation fails with the error: 'Failed to find collection' for a collection that exists in automation hub. The execution nodes are subscribed to the same local repository. The automation controller is configured with the automation hub as the default collections server. What is the most likely cause?

Question 8mediumdrag order

Read the full Ansible explanation →

Drag and drop the steps to configure an Ansible control node for managing remote hosts into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 9mediumdrag order

Read the full Ansible explanation →

Drag and drop the steps to configure a basic NFS server to export a directory in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 10mediummatching

Read the full Ansible explanation →

Match each Ansible module to its primary function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Manage packages via YUM

Copy files to remote hosts

Manage system services

Deploy Jinja2 templates

Manage user accounts

Question 11mediummatching

Read the full Ansible explanation →

Match each Ansible inventory parameter to its meaning.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Hostname or IP to connect to

SSH user for connection

SSH port number

Private key file path

Python interpreter path

Question 12mediummultiple choice

Read the full Ansible explanation →

An organization is deploying Automation Platform for the first time. The security team requires that all SSH private keys used for automation be stored securely with access controls. Which AAP feature should be used to meet this requirement?

Question 13hardmultiple choice

Read the full Ansible explanation →

A job template consistently fails with 'Authentication failed' for a managed host. The admin has verified that the username/password in the credential is correct and that the host is reachable. What is the most likely remaining cause?

Question 14easymultiple choice

Read the full Ansible explanation →

An admin is configuring a project in Automation Platform to pull playbooks from a Git repository. Which source control type should be selected?

Question 15mediummulti select

Read the full Ansible explanation →

An organization is designing a high-availability Automation Platform deployment. Which TWO practices are essential for achieving high availability?

Question 16hardmulti select

Read the full Ansible explanation →

Which THREE of the following are core components of Automation Platform that are installed by default in a standard setup?

Question 17easymulti select

Read the full Ansible explanation →

A job template has failed. Which TWO logs should be examined first to diagnose the issue?

Question 18easymultiple choice

Read the full Ansible explanation →

An admin checks the job details and sees this error from the API. What is the most likely cause?

Exhibit

Refer to the exhibit.

```
{
  "status": "failed",
  "error": "Invalid callback plugin specified: 'some_plugin'",
  "job_id": 1234
}
```

Question 19mediummultiple choice

Read the full Ansible explanation →

An admin attempts to run this playbook as a job template in AAP. The job fails with 'ERROR! 'now' is not a valid attribute for a task'. What is the issue?

Exhibit

Refer to the exhibit.

```yaml
---
- name: Deploy app
  hosts: all
  become: true
  tasks:
    - name: Copy config
      template:
        src: config.j2
        dest: /etc/app/config.yml
      now: yes
```

Question 20hardmultiple choice

Read the full Ansible explanation →

An admin imports this inventory into AAP and assigns a machine credential that uses SSH key authentication. The job fails with 'Authentication failed'. What is the most likely cause?

Exhibit

Refer to the exhibit.

```
[webservers]
web1 ansible_host=192.168.1.10
web2 ansible_host=192.168.1.11

[webservers:vars]
ansible_user=admin
ansible_ssh_private_key_file=/home/admin/.ssh/id_rsa
```

Question 21easymultiple choice

Read the full Ansible explanation →

An admin needs to restrict which users can launch specific job templates. Which AAP feature should be used?

Question 22mediummultiple choice

Read the full Ansible explanation →

An admin is creating a workflow that must run a survey at the beginning to collect user input. Which node type should be used for the first step?

Question 23hardmultiple choice

Read the full Ansible explanation →

A job template runs successfully on some hosts but fails on others with 'Permission denied' for the same task. The admin has verified that the credential is correct. What is the most likely cause?

Question 24easymultiple choice

Read the full Ansible explanation →

An admin wants to use custom Python modules in a job template without affecting the global controller environment. What should be used?

Question 25mediummultiple choice

Read the full Ansible explanation →

An admin configures an automation mesh environment. What is the primary purpose of mesh nodes in AAP?

Question 26hardmultiple choice

Read the full Ansible explanation →

After upgrading AAP, an admin notices that all job templates using a custom virtual environment fail with 'No module named 'foo''. The virtual environment was previously working. What should the admin do first?

Question 27easymultiple choice

Read the full Ansible explanation →

A systems administrator is installing Ansible Automation Platform on a Red Hat Enterprise Linux 9 server. They download the installer tarball and run `./setup.sh`. The installation fails with an error indicating that the database password is incorrect. What is the most likely cause?

Question 28mediummultiple choice

Read the full Ansible explanation →

An organization uses Ansible Automation Controller. They have an inventory source that syncs from a Git repository containing `inventory/hosts.yml`. The job template uses this inventory. Recently, the inventory stopped updating. The admin checks the job logs and sees: `ERROR! Could not update inventory source: invalid inventory source definition`. What is the most likely issue?

Question 29hardmultiple choice

Read the full Ansible explanation →

A large enterprise has deployed Ansible Automation Platform with multiple organizations. A team lead needs to allow a junior administrator to create and manage job templates within their own organization, but not modify organizations, users, or system settings. Which RBAC roles should be assigned?

Question 30easymultiple choice

Read the full Ansible explanation →

An administrator wants to use automation mesh to distribute workloads across multiple execution nodes. After configuring mesh topology, some jobs fail with: `Error: No healthy mesh node found for execution`. What is the most likely cause?

Question 31mediummultiple choice

Read the full Ansible explanation →

A team uses execution environments (EE) for job templates. The admin builds a custom EE using `ansible-builder` with a `execution-environment.yml` file that includes a `base_image: registry.redhat.io/ansible-automation-platform-21/ee-minimal-rhel8:latest` and a custom Python requirement. However, the controller reports that the EE is not found when launching a job. What is the most likely issue?

Question 32hardmultiple choice

Read the full Ansible explanation →

An administrator is designing a workflow that includes an approval node. The workflow should pause at the approval node until a user with the appropriate role approves or denies. The workflow is triggered by a webhook. After setting up, the webhook successfully starts the workflow, but the approval node is never created. What is the most likely cause?

Question 33easymultiple choice

Read the full Ansible explanation →

A user wants to authenticate against Ansible Automation Controller using LDAP. They configure the LDAP settings in the controller UI. After saving, they test the connection and it succeeds. However, when an LDAP user tries to log in, they get an authentication failure. What is the most likely issue?

Question 34mediummulti select

Read the full Ansible explanation →

Which TWO are valid methods to back up an Ansible Automation Controller installation? (Choose two.)

Question 35hardmulti select

Read the full Ansible explanation →

Which TWO should be configured to enable centralized logging from multiple Automation Controller nodes to an external Elasticsearch cluster? (Choose two.)

Question 36mediummulti select

Read the full Ansible explanation →

Which THREE are valid user roles within an Automation Controller organization? (Choose three.)

Question 37easymultiple choice

Read the full Ansible explanation →

A junior administrator is deploying Ansible Automation Platform (AAP) 2.3 on a fresh RHEL 9 server. They have downloaded the installer and edited the inventory file. The installation fails early in the process with: `TASK [private_automation_hub : Check that server_url has been configured]` and the error message: `FAILED - Could not connect to the Automation Hub server`. The inventory file has the following relevant lines: `automationhub_server_url=https://hub.example.com:443` and `automationhub_validate_certs=false`. The server `hub.example.com` is reachable from the installation node and responds with a 404 on the root path. The admin verified that the SSL certificate is self-signed. What should the admin do to resolve the issue?

Question 38mediummultiple choice

Read the full Ansible explanation →

A team has been using Ansible Automation Controller for six months. They have a job template that runs a playbook against a static inventory. Recently, the job template started hanging indefinitely after launching. The admin checks the job output and sees: `PLAY [all] ************************` with no further output. The playbook uses `delegate_to: localhost` for some tasks. The admin executed the same playbook manually with `ansible-playbook` on the control node and it completes successfully. The controller logs show no errors. What is the most likely cause of the hang in the controller?

Question 39hardmultiple choice

Read the full Ansible explanation →

An enterprise is running Ansible Automation Platform with automation mesh across three data centers. Each data center has a control node and multiple execution nodes. The mesh topology is set up with `node_type: control` for control nodes and `node_type: execution` for execution nodes. The nodes in DC2 can reach nodes in DC1 and DC3, but DC1 and DC3 cannot directly reach each other. The admin notices that jobs that require execution on DC3 are being scheduled on DC1 or DC2, causing slow performance. The admin checks the mesh node list and sees all nodes are healthy. What should the admin do to ensure jobs are executed geographically closest to the target nodes?

Question 40easymulti select

Read the full Ansible explanation →

Which TWO statements are true about deploying Red Hat Ansible Automation Platform on a Red Hat Enterprise Linux 8 system?

Question 41hardmultiple choice

Read the full Ansible explanation →

A junior admin runs the command shown in the exhibit. What is the most likely cause of the error?

Network Topology

Question 42mediummultiple choice

Read the full Ansible explanation →

A company is deploying Ansible Automation Platform (AAP) in a three-node cluster: one automation controller node, one private automation hub node, and one database node (PostgreSQL). The deployment uses an execution environment that pulls from the private automation hub. After a successful installation, all nodes are reachable and services are running. However, when launching a job template that uses the execution environment, the job fails with the error: 'Unable to pull execution environment image from automation-hub.example.com:5000/ee/my-ee:latest - request to registry failed with status 403 Forbidden'. The administrator confirms that the execution environment image exists in the private automation hub and that the automation controller node can reach the registry via curl. What is the most likely cause and solution?

Refer to the exhibit. [root@controller ~]# cat /etc/ansible-automation-platform/ansible-navigator.yml --- ansible-navigator: execution-environment: image: registry.internal.example.com/ee-supported:latest pull: policy: missing playbook-artifact: enable: false logging: level: debug mode: stdout set-environment: ANSIBLE_INVENTORY: /opt/inventory/hosts ANSIBLE_ROLES_PATH: /opt/roles

Refer to the exhibit. [root@controller ~]# cat /etc/ansible-automation-platform/setup.sh #!/bin/bash # AAP 2.4 installer # ... ADMIN_PASSWORD='redhat' PGHOST='192.168.1.100' PGPORT='5432' PGDATABASE='awx' PGUSER='awx_admin' PGPASSWORD='secure_pass' # ... [root@controller ~]# ./setup.sh -i inventory.yml ... TASK [Installer : wait for controller to be ready] **************************** fatal: [localhost]: FAILED! => {"changed": false, "msg": "Timeout waiting for controller to become ready. Check logs."} [root@controller ~]# cat /var/log/ansible-automation-platform/controller/startup.log ... ERROR: could not connect to server: Connection refused Is the server running on host "192.168.1.100" and accepting TCP/IP connections on port 5432?

Refer to the exhibit. ```yaml --- - name: Deploy app hosts: all become: true tasks: - name: Copy config template: src: config.j2 dest: /etc/app/config.yml now: yes ```