EX457 시험 - RedHat실제시험문제와 답 - 230문항

Question No : 1

An administrator is creating a new Project in Automation Controller to pull playbooks from a public GitHub repository.
Review the following snippet of the Project configuration:
```
Name: New Network Project
Organization: Default
Source Control Type: Git
Source Control URL: https://github.com/ansible/ansible-tower-samples.git
Source Control Branch/Tag/Commit: main
Source Control Credential: [Not Set]
...
```
What will be the result of this Project configuration for a public, non-authenticated GitHub repository?

A.The Project creation will fail because it is missing a Source Control Credential.
B.The Project will be created successfully and will be able to clone playbooks from the specified URL and branch during a sync.
C.The Project sync will fail because it must use an SSH URL instead of an HTTPS UR
D.The Project will be created successfully, but it will default to the `master` branch instead of the `main` branch.

정답:

Question No : 2

A team uses Automation Controller to manage a multi-environment network. Their Ansible playbooks are stored in a Git repository with different branches for each environment.
- The `develop` branch is for testing new features.
- The `main` branch represents stable, tested code for production.
How should an administrator configure Automation Controller to ensure the stability of the production environment and prevent accidental changes? (Select all that apply.)

A.In the "Production Playbooks" Project configuration, check the "Update Revision on Launch" option.
B.Create a Project named "Development Playbooks" and set its "Source Control Branch" to `develop`.
C.In all Job Templates that target the production environment, use only the "Production Playbooks" Project.
D.Use the "Development Playbooks" Project for all Job Templates, but use a survey to select the `main` branch for production jobs.
E.Create a Project named "Production Playbooks" and set its "Source Control Branch" to `main`.

정답:

Question No : 3

After running a task with the `cisco.ios.ios_facts` module, the following data structure is returned.
"ansible_facts": {
"ansible_net_gather_subset": [
"all"
],
"ansible_net_hostname": "csr1000v",
"ansible_net_interfaces": {
"GigabitEthernet1": {
"bandwidth": 1000000,
"description": null,
"ipv4": [
{
"address": "192.168.1.101",
"subnet": "24"
}
],
"macaddress": "0a:de:3f:74:e7:00",
"mediatype": "Virtual",
"mtu": 1500,
"operstatus": "up",
"type": "CSR vNIC"
}
},
"ansible_net_model": "CSR1000V",
"ansible_net_serialnum": "9K8ZW5V7M4S",
"ansible_net_version": "16.09.04"
}
Which Jinja2 expression will correctly extract the serial number of the device?

A.`ansible_facts['ansible_net_serialnum']`
B.`ansible_net_serialnum`
C.`ansible_facts.serialnum`
D.`ansible_facts.ansible_net_serialnum`

정답:

Question No : 4

What is the primary purpose of a "Machine" credential type within Ansible Automation Controller?

A.To store a password for use with Ansible Vault to decrypt encrypted variables.
B.To provide authentication details, such as a username/password or SSH key, for connecting to managed nodes.
C.To authenticate to a source control repository like Git to check out a project.
D.To define permissions for users and teams within an organization.

정답:

Question No : 5

An automation engineer is examining the log file from an `ansible-navigator` run to look for specific failures.
Review the following log file snippet from `/home/student/playbook_run.log`:
[INFO] Running playbook: configure_routers.yml
[ERROR] Task failed on host rtr-01: could not connect to device
[INFO] Task 'Gather Facts' completed on rtr-02
[WARNING] Module 'legacy_facts' is deprecated.
[ERROR] Task failed on host rtr-03: authentication failure
Which command will display only the lines containing the case-sensitive string "ERROR"?

A.`grep "ERROR" /home/student/playbook_run.log`
B.`search "ERROR" < /home/student/playbook_run.log`
C.`cat /home/student/playbook_run.log | find "ERROR"`
D.`cat /home/student/playbook_run.log`

정답:

Question No : 6

A team follows the Git-flow workflow, where all feature development happens in `feature/*` branches, which are then merged into a `develop` branch for integration testing. Only after the `develop` branch passes all tests is it merged into the `main` branch for production releases.
An administrator needs to model this workflow in Automation Controller. They want to ensure that an update and deployment of the `main` branch can only be triggered after the `develop` branch's project sync has succeeded.
Which Automation Controller feature is best suited to implement this conditional, multi-step Git and deployment process?

A.Create a Workflow Template containing two Projects: one tracking the `develop` branch and another tracking the `main` branch. Set up a conditional workflow link between them.
B.Create one Project and configure it with two different Source Control Credentials, one for the `develop` branch and one for the `main` branch.
C.In a single Job Template, use the `ansible.builtin.command` module to sequentially run `git pull origin develop` and `git pull origin main`.
D.Create two separate Job Templates, one for deploying the `develop` branch and another for the `main` branch, and instruct users to run them manually in order.

정답:

Question No : 7

A playbook needs to apply a configuration to a list of VLAN IDs. The initial list is provided as a string from an external system.
"vlan_string": "10,20,30, 40 ,50"
The `ios_vlans` module requires a list of integers, not a string.
Which sequence of filters will correctly transform `vlan_string` into the required format `[10, 20, 30, 40, 50]`?

A.`{{ vlan_string | split(',') | map('trim') | map('int') | list }}`
B.`{{ vlan_string | to_yaml | map('int') }}`
C.`{{ vlan_string | split(',') | list }}`
D.`{{ vlan_string | split(' ') | map('int') | list }}`

정답:

Question No : 8

An automation team manages their Ansible playbooks in a central Git repository. To maintain code quality and prevent errors in the production environment, they want to enforce a policy where all changes are reviewed by a peer before being integrated into the `main` branch.
Which of the following Git practices should the team adopt to enforce this policy effectively? (Select all that apply.)

A.All engineers should commit their changes directly to the `main` branch.
B.Changes should be submitted for review and merging through pull requests (or merge requests).
C.The team should use `git rebase` instead of `git merge` for all updates.
D.The `main` branch should be protected to prevent direct pushes.
E.Engineers should work on new features or fixes in separate branches (feature branches).

정답:

Question No : 9

An automation engineer attempts to push their local commits to a shared remote repository using `git push`. The command fails with the following output.
To https://github.com/example/network-playbooks.git
! [rejected] main -> main (fetch first)
error: failed to push some refs to 'https://github.com/example/network-playbooks.git'
hint: Updates were rejected because the remote contains work that you do
hint: not have locally. This is usually caused by another repository pushing
hint: to the same ref. You may want to first integrate the remote changes
hint: (e.g., 'git pull ...') before pushing again.
What is the most likely cause of this error, and what is the correct command to resolve it before attempting to push again? (Choose 2.)

A.The engineer should use `git commit -a` to add all changes before pushing.
B.The engineer does not have the correct permissions to push to the repository.
C.The engineer's local repository is ahead of the remote repository.
D.The engineer should use `git pull` to fetch and merge the remote changes.
E.The remote repository has new commits that the engineer has not yet downloaded to their local repository.

정답:

Question No : 10

In the context of Ansible network automation, what are "facts"?

A.Live operational state and configuration data retrieved directly from a network device at runtime.
B.The tasks defined within an Ansible role.
C.User-provided information collected through playbook surveys.
D.Statically defined variables located in `host_vars` or `group_vars` files.

정답:

Question No : 11

What is the primary advantage of using a Source Code Management (SCM) system like Git to manage playbooks within Ansible Automation Controller?

A.It automatically encrypts all variables within the playbooks.
B.It guarantees that the playbooks will run successfully in any execution environment.
C.It automatically pushes the execution results of the playbook to the Git repository.
D.It provides version control, collaboration, and a history of changes for the playbooks.

정답:

Question No : 12

An automation engineer needs to start working with an Ansible project that is managed in a central Git repository. This is their first time working with this project on their local control node.
Which Git command is the essential first step to create a local working copy of the remote repository?

A.`git commit`
B.`git clone <repository_url>`
C.`git pull`
D.`git init`

정답:

Question No : 13

A job launch in Automation Controller fails immediately with an "Authentication failed" error when trying to connect to a Juniper router. The administrator verifies that the Job Template is correctly configured with an Inventory and a Project. They also check the assigned credential and see that it is of type "Source Control" and contains the SSH key for their GitLab repository.
What is the cause of this job failure?

A.The Inventory does not have the correct `ansible_network_os` variable set for the Juniper router.
B.The "Source Control" credential does not have a password, only an SSH key.
C.The Juniper router's SSH host key is not in the `known_hosts` file of the execution environment.
D.The job is trying to use the "Source Control" credential to log into the Juniper router.

정답:

Question No : 14

A playbook task needs to provide a default value for a variable if it is not defined in the inventory. The task should configure an NTP server using the `ntp_peer` variable, but if `ntp_peer` is not defined for a host, it should use the IP address `10.1.1.254`.
Which Jinja2 expression correctly implements this logic?

A.`{{ ntp_peer or 10.1.1.254 }}`
B.`{{ ntp_peer ? '10.1.1.254' }}`
C.`{{ ntp_peer | default('10.1.1.254') }}`
D.`{{ ntp_peer if ntp_peer is defined else '10.1.1.254' }}`

정답:

Question No : 15

An administrator is creating a Job Template in Automation Controller to run a playbook against a set of Arista switches. The playbook requires SSH access with a specific username and password to configure the switches.
Which credential type must be created and associated with the Job Template for the playbook to authenticate successfully to the Arista switches?

A.Vault
B.Ansible Galaxy
C.Machine
D.Source Control

정답:

RedHat EX457 시험