Courseiva

EX294 · topic practice

Coordinate rolling updates practice questions

Practise EX294 NAT and PAT questions covering address translation types, inside/outside interface roles, static vs dynamic vs PAT, and troubleshooting missing or incorrect translations.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Coordinate rolling updates
Practice 10 questionsBrowse domain →

What the exam tests

What to know about Coordinate rolling updates

NAT questions usually test how private addresses are translated, when to use static NAT, dynamic NAT or PAT, and how inside/outside interfaces affect traffic flow.

Static NAT, dynamic NAT and PAT behaviour.

Inside local, inside global, outside local and outside global address meanings.

How NAT affects connectivity between private networks and public destinations.

How to troubleshoot NAT rules, ACL matches and interface direction.

Why learners struggle

Why Coordinate rolling updates questions are commonly missed

NAT questions are missed when learners confuse the four address types (inside local, inside global, outside local, outside global) or misapply the interface direction. A translation rule can look correct but still fail if the ACL, interface, or direction is wrong.

  • ·Inside local vs inside global — inside local is the private source, inside global is the translated public address
  • ·PAT overloads — many sources share one public IP using unique port numbers
  • ·Interface direction — ip nat inside and ip nat outside must be on the correct interfaces
  • ·Static NAT vs dynamic NAT vs PAT — each serves a different use case
  • ·The NAT ACL identifies traffic to translate, not traffic to permit or deny
  • ·A missing translation can look like a routing problem if the interfaces are misconfigured

Watch out for

Common Coordinate rolling updates exam traps

  • ▸PAT allows many inside hosts to share one public address by using port numbers.
  • ▸NAT rules depend on correct inside and outside interface configuration.
  • ▸The ACL used for NAT identifies traffic to translate; it is not always a security filtering ACL.
  • ▸Static NAT maps one private address to one public address, while PAT overloads translations.

Practice set

Coordinate rolling updates questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice
Read the full Ansible explanation →

A company uses Ansible to manage rolling updates of a web server fleet. During a deployment, the playbook fails on one host due to a transient network error, and the rest of the fleet is left in an inconsistent state. Which strategy would best minimize the risk of inconsistency in future rolling updates?

Question 2hardmultiple choice
Read the full Ansible explanation →

An operations team is designing a rolling update for a stateful application that requires quorum (minimum 3 out of 5 nodes online). They plan to use Ansible's serial keyword. Which serial value ensures the update proceeds without breaking quorum while still being efficient?

Question 3easymulti select
Read the full Ansible explanation →

Which TWO options are best practices for coordinating rolling updates with Ansible? (Choose exactly two.)

Question 4mediummultiple choice
Read the full Ansible explanation →

Refer to the exhibit. The playbook uses serial: 1 (one host at a time). The update failed on web3.example.com. Based on the output, what is the most likely reason the play did not abort the rollout and how should the playbook be modified to stop on failure?

Exhibit

Refer to the exhibit.

PLAY [Update web servers] ********************************************************

TASK [Gathering Facts] *********************************************************
ok: [web1.example.com]
ok: [web2.example.com]
ok: [web3.example.com]

TASK [Update Apache config] ****************************************************
changed: [web1.example.com] => {
    "changed": true,
    "msg": "Config updated"
}
changed: [web2.example.com] => {
    "changed": true,
    "msg": "Config updated"
}
failed: [web3.example.com] => {
    "changed": false,
    "msg": "Permission denied"
}

TASK [Restart Apache] **********************************************************
ok: [web1.example.com] => {
    "changed": true,
    "msg": "Service restarted"
}
ok: [web2.example.com] => {
    "changed": true,
    "msg": "Service restarted"
}
skipping: [web3.example.com]

PLAY RECAP *********************************************************************
web1.example.com : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
web2.example.com : ok=3    changed=2    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
web3.example.com : ok=1    changed=0    unreachable=0    failed=1    skipped=1    rescued=0    ignored=0
Question 5hardmultiple choice
Read the full Ansible explanation →

You are managing a rolling update of a 10-node web application cluster using Ansible. The application requires that at least 8 nodes remain available during the update to handle traffic. You have written a playbook that uses serial: 2 (updates 2 nodes at a time). During a test run, the playbook updates the first batch of 2 nodes successfully, but when it proceeds to the second batch, one of the nodes fails to restart the web service. However, the playbook continues and updates the remaining nodes. At the end, only 7 nodes are healthy, causing performance degradation. You need to ensure that if a batch fails to meet the minimum health requirements, the entire rollout is stopped and no further updates are applied. Which course of action should you take?

Question 6mediummultiple choice
Read the full Ansible explanation →

An Ansible Engineer is planning a rolling update for a web application deployed across 10 nodes. The playbook uses the 'delegate_to' directive to manage load balancer health checks. Which of the following best describes the recommended approach to minimize downtime?

Question 7hardmulti select
Read the full Ansible explanation →

Which TWO of the following are best practices when coordinating rolling updates with Ansible?

Question 8easymultiple choice
Read the full Ansible explanation →

A team runs the playbook shown in the exhibit. They notice that during the update, some requests are still being sent to servers that have been disabled. What is the most likely cause?

Exhibit

Refer to the exhibit.

```
- name: Rolling update with load balancer
  hosts: webservers
  serial: 2
  tasks:
    - name: Disable server in haproxy
      community.general.haproxy:
        state: disabled
        host: "{{ inventory_hostname }}"
        socket: /var/run/haproxy.sock
      delegate_to: lb01

    - name: Update web server
      yum:
        name: httpd
        state: latest

    - name: Enable server in haproxy
      community.general.haproxy:
        state: enabled
        host: "{{ inventory_hostname }}"
        socket: /var/run/haproxy.sock
      delegate_to: lb01
```
Question 9mediummulti select
Read the full NAT/PAT explanation →

An administrator needs to update a web application that runs as a Kubernetes Deployment with 5 replicas. The application is stateless, but the update must not cause any downtime. Which TWO strategies ensure zero-downtime rolling updates?

Question 10easymultiple choice
Read the full NAT/PAT explanation →

You are managing a Kubernetes cluster running a critical stateful application deployed as a StatefulSet with 3 replicas. The application uses persistent volumes with ReadWriteOnce access mode. You need to update the container image from version 1.0 to 1.1. The application's performance degrades if more than one replica is unavailable at any time. The StatefulSet is configured with the default RollingUpdate strategy (partition=0). You have a maintenance window of 30 minutes. The update must be completed within the window with minimal risk. Which of the following approaches should you take?

Question 11mediumdrag order
Read the full NAT/PAT explanation →

Drag and drop the steps to configure a firewall rule using firewalld to allow HTTPS traffic in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 12mediummatching
Read the full Ansible explanation →

Match each Ansible playbook directive to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Specify target hosts or groups

Enable privilege escalation

Define variables

List of modules to execute

Special tasks run on notification

Question 13easymultiple choice
Read the full Ansible explanation →

An administrator wants to update a web server fleet with minimal downtime. They need to update each server one at a time. Which Ansible playbook directive should be used?

Question 14mediummultiple choice
Read the full Ansible explanation →

During a rolling update using an Ansible playbook with serial: 2, one host in the first batch becomes unreachable. The playbook fails with an unreachable host error. How should the administrator proceed to complete the update on the remaining hosts while excluding the problematic host?

Question 15hardmultiple choice
Read the full Ansible explanation →

A large enterprise manages thousands of servers grouped by data center. They are designing a rolling update that must complete within a maintenance window. Which combination of Ansible strategies best minimizes total update time while maintaining safety?

Question 16easymultiple choice
Read the full Ansible explanation →

An administrator notices that during a rolling update, the playbook seems to hang after updating the first host. The playbook uses serial: 5. What is the most likely cause?

Question 17mediummultiple choice
Read the full Ansible explanation →

A team uses Ansible to update a database cluster with one primary and two replicas. The goal is zero downtime. Which update order is the safest?

Question 18hardmultiple choice
Read the full Ansible explanation →

An organization uses Ansible Tower (AWX) for rolling updates. They have a job template that runs a playbook with serial: 5. The inventory contains 50 hosts. The update fails after the first batch due to a syntax error in a playbook. After fixing the error, the administrator wants to resume updating from where it left off without updating already successful hosts. Which approach achieves this?

Question 19easymultiple choice
Read the full Ansible explanation →

What is the effect of setting 'serial: 5' in an Ansible playbook that targets a group of 20 hosts?

Question 20mediummultiple choice
Read the full NAT/PAT explanation →

An administrator uses a rolling update strategy with serial: 3 and max_fail_percentage: 20. They have 10 hosts in the inventory. The first batch of 3 hosts: 2 succeed, 1 fails. What happens next?

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Sign up freeLog in

Focused Coordinate rolling updates sessions

Start a Coordinate rolling updates only practice session

Every question in these sessions is drawn from the Coordinate rolling updates domain — nothing else.

10 questions20 questions30 questions50 questions
Browse all Coordinate rolling updates questions →Mixed EX294 session

Related practice questions

Related EX294 topic practice pages

Move into related areas when this topic feels solid.

Deploy Ansible Automation Platform practice questions

Practise EX294 questions linked to Deploy Ansible Automation Platform.

Manage inventories and credentials practice questions

Practise EX294 questions linked to Manage inventories and credentials.

Manage task execution and roles practice questions

Practise EX294 questions linked to Manage task execution and roles.

Coordinate rolling updates practice questions

Practise EX294 questions linked to Coordinate rolling updates.

Transform data with filters and plugins practice questions

Practise EX294 questions linked to Transform data with filters and plugins.

Create content collections and execution environments practice questions

Practise EX294 questions linked to Create content collections and execution environments.

Implement advanced Ansible automation practice questions

Practise EX294 questions linked to Implement advanced Ansible automation.

Manage automation security and operations practice questions

Practise EX294 questions linked to Manage automation security and operations.

EX294 fundamentals practice questions

Practise EX294 questions linked to EX294 fundamentals.

EX294 scenario practice questions

Practise EX294 questions linked to EX294 scenario.

EX294 troubleshooting practice questions

Practise EX294 questions linked to EX294 troubleshooting.

Frequently asked questions

What does the EX294 exam test about Coordinate rolling updates?
NAT questions usually test how private addresses are translated, when to use static NAT, dynamic NAT or PAT, and how inside/outside interfaces affect traffic flow.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Coordinate rolling updates questions in a focused session?
Yes — the session launcher on this page draws every question from the Coordinate rolling updates domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other EX294 topics?
Use the topic links above to move to related areas, or go back to the EX294 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the EX294 exam covers. They are not copied from any real exam or dump site.