EX294 Implement advanced Ansible automation Practice Question
Which two statements about ansible-vault are true? (Select exactly 2.)
⚠ Common exam trap
Many candidates confuse the encryption algorithm (AES-128 vs AES-256) or assume vault-encrypted files cannot be dynamically included, when in fact include_vars works seamlessly with decryption.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Vault can encrypt entire files or individual variables.
Ansible-vault can encrypt either entire files (e.g., vars files, role defaults) or individual variables within a YAML file using the `!vault` tag. This flexibility allows you to protect sensitive data at the granularity you choose, without requiring separate encrypted files for each secret.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Vault-encrypted files cannot be used with include_vars.
Why it's wrong here
They can be used if vault password is provided.
- ✓
Vault can encrypt entire files or individual variables.
Why this is correct
ansible-vault encrypts at file level; variable encryption requires specific syntax.
- ✗
Vault uses AES-128 encryption by default.
Why it's wrong here
It uses AES-256.
- ✗
Vault passwords can be stored directly in ansible.cfg.
Why it's wrong here
Only a path to a password file can be configured.
- ✓
Vault supports multiple passwords with vault IDs.
Why this is correct
Vault ID allows using different passwords for different encrypted files.
Go deeper
Related to this question
About these practice questions
This EX294 question is part of Courseiva's 392-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This EX294 practice question is part of Courseiva's free Red Hat certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the EX294 exam.