Why AAP Ignores Inventory SSH Key Variables and Uses Credentials
This EX294 practice question tests your understanding of deploy ansible automation platform. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. A key principle to apply: inventory variable precedence over credentials. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Exhibit
Refer to the exhibit.
```
[webservers]
web1 ansible_host=192.168.1.10
web2 ansible_host=192.168.1.11
[webservers:vars]
ansible_user=admin
ansible_ssh_private_key_file=/home/admin/.ssh/id_rsa
```
An admin imports this inventory into AAP and assigns a machine credential that uses SSH key authentication. The job fails with 'Authentication failed'. What is the most likely cause?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "most likely"
Why it matters: Probability qualifier — the question wants the most probable cause or outcome, not a guaranteed one. Eliminate low-probability options.
Exhibit
Refer to the exhibit.
```
[webservers]
web1 ansible_host=192.168.1.10
web2 ansible_host=192.168.1.11
[webservers:vars]
ansible_user=admin
ansible_ssh_private_key_file=/home/admin/.ssh/id_rsa
```
A
The private key file path in the inventory does not exist on the controller.
Why wrong: The private key file path in the inventory does not exist on the controller. While this could cause a failure, it is not the most likely cause because the variable ansible_ssh_private_key_file is being used instead of the credential, so the credential's key is irrelevant. The failure is due to the variable overriding the credential.
B
The credential's SSH key is not being used because the inventory variable ansible_ssh_private_key_file conflicts.
The credential's SSH key is not being used because the inventory variable ansible_ssh_private_key_file conflicts. In AAP, inventory variables take precedence over credentials. If ansible_ssh_private_key_file is set, AAP uses that path and ignores the credential's key. This is the most likely cause of the 'Authentication failed' error.
C
The machine credential does not contain an SSH private key.
Why wrong: The machine credential does not contain an SSH private key. The scenario states the credential uses SSH key authentication, so it does contain a private key. The issue is not the absence of a key but the fact that the inventory variable overrides it.
D
The 'ansible_become' variable is missing from the inventory.
Why wrong: The 'ansible_become' variable is missing from the inventory. The become variable controls privilege escalation, not SSH authentication. A missing become variable would not cause an authentication failure at the SSH level.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The credential's SSH key is not being used because the inventory variable ansible_ssh_private_key_file conflicts.
In Red Hat Ansible Automation Platform (AAP), when a machine credential is assigned to a host, AAP should use the SSH key from that credential for authentication. However, if the inventory contains the variable ansible_ssh_private_key_file, this variable takes precedence over the credential's key. The credential's key is therefore ignored, and AAP attempts to use the path specified in the inventory variable. If that path does not exist or the key is incorrect, authentication fails. This explains why the credential's SSH key is not being used, even though it is correctly configured.
Key principle: Inventory variable precedence over credentials
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
The private key file path in the inventory does not exist on the controller.
Why it's wrong here
The private key file path in the inventory does not exist on the controller. While this could cause a failure, it is not the most likely cause because the variable ansible_ssh_private_key_file is being used instead of the credential, so the credential's key is irrelevant. The failure is due to the variable overriding the credential.
✓
The credential's SSH key is not being used because the inventory variable ansible_ssh_private_key_file conflicts.
Why this is correct
The credential's SSH key is not being used because the inventory variable ansible_ssh_private_key_file conflicts. In AAP, inventory variables take precedence over credentials. If ansible_ssh_private_key_file is set, AAP uses that path and ignores the credential's key. This is the most likely cause of the 'Authentication failed' error.
Clue confirmation
The clue word "most likely" in the question point toward this answer.
Related concept
Inventory variable precedence over credentials
✗
The machine credential does not contain an SSH private key.
Why it's wrong here
The machine credential does not contain an SSH private key. The scenario states the credential uses SSH key authentication, so it does contain a private key. The issue is not the absence of a key but the fact that the inventory variable overrides it.
✗
The 'ansible_become' variable is missing from the inventory.
Why it's wrong here
The 'ansible_become' variable is missing from the inventory. The become variable controls privilege escalation, not SSH authentication. A missing become variable would not cause an authentication failure at the SSH level.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Many certification questions include familiar terms but test a specific constraint. Read the exact wording before choosing an answer that is generally true but wrong for this case.
Trap categories for this question
Scenario analysis trap
The machine credential does not contain an SSH private key. The scenario states the credential uses SSH key authentication, so it does contain a private key. The issue is not the absence of a key but the fact that the inventory variable overrides it.
Detailed technical explanation
How to think about this question
Treat this as a scenario question. Identify the problem, the constraint, and the best action. Then compare each option against those facts.
KKey Concepts to Remember
Inventory variable precedence over credentials
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Inventory variable precedence over credentials
Real-world example
How this comes up in practice
A practitioner preparing for the EX294 exam encounters this exact type of scenario on the job. The correct answer here is not the most general option — it is the best answer for the specific constraint described. Inventory variable precedence over credentials Real exam questions reward reading the full scenario before eliminating options, because the constraint defines which answer fits.
What to study next
Got this wrong? Here's your next step.
Review inventory variable precedence over credentials, then practise related EX294 questions on the same topic to reinforce the concept.
Deploy Ansible Automation Platform — This question tests Deploy Ansible Automation Platform — Inventory variable precedence over credentials.
What is the correct answer to this question?
The correct answer is: The credential's SSH key is not being used because the inventory variable ansible_ssh_private_key_file conflicts. — In Red Hat Ansible Automation Platform (AAP), when a machine credential is assigned to a host, AAP should use the SSH key from that credential for authentication. However, if the inventory contains the variable ansible_ssh_private_key_file, this variable takes precedence over the credential's key. The credential's key is therefore ignored, and AAP attempts to use the path specified in the inventory variable. If that path does not exist or the key is incorrect, authentication fails. This explains why the credential's SSH key is not being used, even though it is correctly configured.
What should I do if I get this EX294 question wrong?
Review inventory variable precedence over credentials, then practise related EX294 questions on the same topic to reinforce the concept.
Are there clue words in this question I should notice?
Yes — watch for: "most likely". Probability qualifier — the question wants the most probable cause or outcome, not a guaranteed one. Eliminate low-probability options.
What is the key concept behind this question?
Inventory variable precedence over credentials
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This EX294 practice question is part of Courseiva's free Red Hat certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the EX294 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.