EX294 Vault Credential Practice Question
An administrator needs to store a secret API token in Ansible Automation Controller so that it can be used in job templates without exposing the token in plain text. Which type of credential should be used?
⚠ Common exam trap
Candidates often assume Machine credentials can store any secret due to the password field, but Machine credentials are intended for SSH host access and should not be repurposed for API tokens. Vault credentials provide proper encryption and are designed for secret storage.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Vault credential
A Vault credential in Ansible Automation Controller stores an encrypted password that can be used to decrypt Ansible Vault files. While originally designed for vault files, it can also be used to securely store any secret, such as an API token, by referencing it via the {{ vault_password }} variable in job templates. This ensures the token is never exposed in plain text. Machine credentials are for SSH authentication, Network credentials for network devices, and Cloud credentials for cloud provider APIs—none are suitable for storing arbitrary API tokens.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Vault credential
Why this is correct
Correct. Vault credential stores an encrypted password that can be used for secrets like API tokens.
- ✗
Machine credential
Why it's wrong here
Incorrect. Machine credential is for SSH authentication, not for storing arbitrary secrets.
- ✗
Network credential
Why it's wrong here
Incorrect. Network credential is for network device authentication (e.g., SNMP).
- ✗
Cloud credential
Why it's wrong here
Incorrect. Cloud credential is for cloud provider authentication (e.g., AWS, Azure).
Go deeper
Related to this question
About these practice questions
Courseiva writes every EX294 question from scratch — 520 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This EX294 practice question is part of Courseiva's free Red Hat certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the EX294 exam.