EX294 Timed Practice Test 4 — 10 Questions

Question 1

Which command runs a playbook using an execution environment named 'my-ee'?

Accepted Answer

ansible-navigator run playbook.yml --execution-environment my-ee. Option A is correct. The 'ansible-navigator run' command with the '--execution-environment' flag specifies the EE to use. Options B and C use incorrect commands. Option D uses a short flag but is also correct; however, only A is listed as correct to avoid ambiguity.

Answer

ansible-playbook -i inventory playbook.yml -e 'ansible_python_interpreter=/usr/bin/python3' --ee my-ee

Answer

ansible-runner run --ee my-ee playbook.yml

Answer

ansible-navigator run playbook.yml --ee my-ee

Question 2

You are building an execution environment for a large enterprise that requires several collections from both Red Hat Automation Hub and an internal GitLab repository. Your execution-environment.yml file includes both sources. However, the build process consistently fails during the 'adding collections' step with an error indicating that a specific collection from the internal Git repository cannot be found. You have confirmed that the Git repository URL and branch are correct, and that the repository is accessible from the build host. The collection's galaxy.yml file exists and is valid. What is the most likely reason for the failure?

Accepted Answer

The ansible-builder process does not have the necessary Git credentials configured.. The correct answer is D. The ansible-builder process requires Git credentials to clone collections from private Git repositories. Even if the URL and branch are correct and the repository is accessible from the build host, the builder itself may not have the necessary SSH keys or HTTPS credentials configured. This is a common oversight when using internal GitLab repositories, as the builder runs in a containerized environment that does not inherit the host's credentials by default.

Answer

The base image does not have Git installed.

Answer

The collection's Galaxy namespace conflicts with a collection from Automation Hub.

Answer

The 'requirements.yml' file for the internal collection is missing.

Question 3

An administrator wants to use automation mesh to distribute workloads across multiple execution nodes. After configuring mesh topology, some jobs fail with: `Error: No healthy mesh node found for execution`. What is the most likely cause?

Accepted Answer

The execution node is not registered with a unique `node_id`.. Option B is correct because each execution node in an automation mesh must have a unique `node_id` to be properly identified and reachable by the mesh controller. When nodes share a `node_id` or are not registered with a unique identifier, the controller cannot distinguish between them, leading to the 'No healthy mesh node found for execution' error. This uniqueness is critical for the mesh's peer-to-peer routing and health-checking mechanism.

Answer

The mesh nodes are not all connected to each other.

Answer

The `hop` count is set too high in the mesh configuration.

Answer

The `node_type` is set to `control` for all nodes.

Question 4

An admin imports this inventory into AAP and assigns a machine credential that uses SSH key authentication. The job fails with 'Authentication failed'. What is the most likely cause?

Accepted Answer

The credential's SSH key is not being used because the inventory variable ansible_ssh_private_key_file conflicts.. Option B is correct because AAP does not use inventory variables for authentication; it uses credentials. The variable 'ansible_ssh_private_key_file' is ignored by AAP, and the credential must be used. Option A is incorrect because the credential is present. Option C is incorrect because the key path is not used. Option D is incorrect because the become method is not relevant to this failure.

Answer

The private key file path in the inventory does not exist on the controller.

Answer

The machine credential does not contain an SSH private key.

Answer

The 'ansible_become' variable is missing from the inventory.

Question 5

An admin needs to restrict which users can launch specific job templates. Which AAP feature should be used?

Accepted Answer

Role-based access control (RBAC) on job templates.. Role-based access control (RBAC) on job templates is the correct feature because it allows an administrator to assign specific permissions (e.g., execute, read, or admin) to users or teams for individual job templates in Ansible Automation Platform (AAP). This directly restricts which users can launch specific job templates without affecting other resources.

Answer

Execution environments with custom modules.

Answer

Machine credentials with different users.

Answer

Inventory groups with host restrictions.

Question 6

After upgrading AAP, an admin notices that all job templates using a custom virtual environment fail with 'No module named 'foo''. The virtual environment was previously working. What should the admin do first?

Accepted Answer

Recreate the custom virtual environment and reinstall the 'foo' package.. After an AAP upgrade, custom virtual environments are not automatically migrated or preserved; they must be recreated and their packages reinstalled. The 'No module named 'foo'' error indicates that the Python environment no longer contains the required package, so recreating the environment and reinstalling 'foo' is the correct first step to restore functionality.

Answer

Switch the job template to use an execution environment instead.

Answer

Reassign the job template to the default virtual environment.

Answer

Verify that the credential associated with the job template is valid.

Question 7

A systems administrator is installing Ansible Automation Platform on a Red Hat Enterprise Linux 9 server. They download the installer tarball and run `./setup.sh`. The installation fails with an error indicating that the database password is incorrect. What is the most likely cause?

Accepted Answer

The `admin_password` variable in the inventory file does not match the PostgreSQL password.. Option A is correct because the `admin_password` variable in the AAP installer inventory file (typically `inventory` or `hosts`) sets the password for the AAP admin user, not the PostgreSQL database password. The database password is set by the `pg_password` variable. If `admin_password` is incorrectly used where `pg_password` is expected, or if the two are mismatched, the installer will fail with a 'database password is incorrect' error during the database connection check.

Answer

The `bootstrap.yml` file has an incorrect value for `pg_password`.

Answer

The PostgreSQL server is not listening on the expected port.

Answer

The license file has not been placed in the installer directory.

Question 8

Which TWO are valid methods to back up an Ansible Automation Controller installation? (Choose two.)

Accepted Answer

Perform a `pg_dump` of the PostgreSQL database and copy `/var/lib/awx` files.. Option A is correct because backing up an Ansible Automation Controller installation requires preserving both the PostgreSQL database and the file system. The `pg_dump` command creates a logical backup of the database, while copying `/var/lib/awx` captures critical configuration files, job artifacts, and credentials stored on disk. This combination ensures a complete restore capability.

Answer

Use the controller UI to export configuration via `dumpconfig`.

Answer

Execute `awx-manage backup` on the controller node.

Answer

Use `invoke-rc.d automation-controller backup`

Question 9

Which THREE of the following are valid Ansible lookup plugins? (Select exactly three.)

Accepted Answer

`csvfile`. Option A is correct because `csvfile` is a built-in Ansible lookup plugin that reads data from CSV files, allowing playbooks to parse structured tabular data. It is documented in the official Ansible lookup plugin list and is commonly used for dynamic inventory or configuration values.

Answer

`map`

Answer

`select`

Question 10

A company uses Ansible Tower and has defined a custom inventory script. The inventory returns JSON with nested groups. The playbook needs to list all hosts from a specific group 'webservers' that are not in the 'drain' subgroup. Which combination of filters correctly extracts these hosts?

Accepted Answer

{{ groups['webservers'] | difference(groups['drain']) }}. Option D is correct because the `difference` filter in Ansible returns the elements of the first list that are not present in the second list. This directly matches the requirement: all hosts in the 'webservers' group that are not in the 'drain' subgroup.

Answer

{{ groups['webservers'] | symmetric_difference(groups['drain']) }}

Answer

Answer