Download Certified OpenStack Professional Certification Exam Preparation and more Exams Technology in PDF only on Docsity!
Preparation
Question 1. Which OpenStack service is primarily responsible for authentication and token issuance? A) Nova B) Neutron C) Keystone D) Glance Answer: C Explanation: Keystone acts as the identity service, handling user authentication, token generation, and service catalog management. Question 2. In OpenStack terminology, a “tenant” is now more commonly referred to as a: A) Project B) Domain C) User group D) Availability zone Answer: A Explanation: The term “tenant” was replaced by “project” to better reflect resource isolation and ownership. Question 3. Which of the following best describes a “Provider network” in Neutron? A) A network that is managed entirely by OpenStack without external integration B) A network that maps directly to a physical network owned by the operator C) A network that provides DHCP services to instances automatically D) A network used exclusively for tenant-to-tenant communication Answer: B
Preparation
Explanation: Provider networks are pre‑existing physical networks that OpenStack maps to, allowing instances to be placed directly onto them. Question 4. Which storage backend can Glance use to store image data? A) MySQL only B) Swift, Cinder, or local filesystem C) CephFS exclusively D) NFS only Answer: B Explanation: Glance supports multiple back‑ends, including object storage (Swift), block storage (Cinder), and the local filesystem. Question 5. What is the purpose of the “openrc” file in an OpenStack environment? A) It defines the OpenStack service catalog for Horizon B) It stores environment variables for CLI authentication C) It configures the RabbitMQ broker settings D) It contains the default flavor definitions Answer: B Explanation: Sourcing an openrc file sets OS_USERNAME, OS_PASSWORD, OS_PROJECT_NAME, and other variables needed for CLI authentication. Question 6. Which of the following is a core OpenStack project? A) Sahara B) Octavia C) Nova D) Designate
Preparation
D) ram Answer: D Explanation: The “ram” attribute specifies memory in MB for the flavor. Question 10. Which component acts as the message bus for inter‑service communication in OpenStack? A) MySQL B) RabbitMQ C) Redis D) Apache Kafka Answer: B Explanation: RabbitMQ (or sometimes Qpid) is the default message broker used for asynchronous communication between services. Question 11. In Neutron, what is the function of a security group? A) It provides DNS resolution for instances B) It defines firewall rules applied to port traffic C) It creates VLANs on the physical switch D) It assigns floating IP addresses automatically Answer: B Explanation: Security groups are stateful firewalls that control inbound and outbound traffic for instances. Question 12. Which command lists all available OpenStack services and their status? A) openstack service list --detail B) openstack endpoint list
Preparation
C) openstack compute service list D) openstack service list Answer: D Explanation: “openstack service list” displays the registered services and their enabled/disabled state. Question 13. What is the default visibility of an image uploaded to Glance if no visibility flag is set? A) public B) private C) shared D) internal Answer: B Explanation: Images are private by default, meaning only the owner can use them unless visibility is changed. Question 14. Which of the following is NOT a valid OpenStack service type? A) compute B) network C) storage D) orchestration Answer: C Explanation: “storage” is not a service type; block storage is “volumev2” (Cinder) and object storage is “object-store” (Swift). Question 15. In a multi‑domain Keystone deployment, what is the purpose of a domain?
Preparation
Question 18. Which of the following is a valid way to provide user data to an instance at launch? A) Using the “--metadata” flag only B) Using the “--user-data” option with a cloud‑init script C) Setting the “OS_USER_DATA” environment variable D) Adding a “user_data” key in the flavor definition Answer: B Explanation: The “--user-data” CLI option passes a cloud‑init script that runs on first boot. Question 19. In Swift, what does the “X‑Delete‑After” header control? A) The number of replicas for the object B) The expiration time (in seconds) after which the object is automatically deleted C) The maximum size of the object D) The storage policy to use for the object Answer: B Explanation: “X‑Delete‑After” specifies a TTL in seconds; Swift deletes the object once the time elapses. Question 20. Which Heat resource type is used to create a virtual machine instance? A) OS::Nova::Server B) OS::Neutron::Port C) OS::Cinder::Volume D) OS::Swift::Container Answer: A Explanation: OS::Nova::Server defines a compute instance in a Heat template.
Preparation
Question 21. Which command retrieves the console log of a Nova instance? A) openstack console log show B) openstack server console log C) nova console-log D) openstack console log get Answer: C Explanation: The legacy “nova console-log” command returns the serial console output. Question 22. What is the effect of setting “auto_allocate_floating_ip” to true in a project’s quota? A) Floating IPs are allocated automatically to each new instance B) The project cannot allocate any floating IPs manually C) Floating IPs are reserved for load balancers only D) It has no effect; the setting is deprecated Answer: A Explanation: When enabled, OpenStack automatically assigns a floating IP to each newly launched instance. Question 23. Which of the following best describes a “host aggregate” in Nova? A) A collection of compute hosts sharing common metadata for scheduling decisions B) A group of storage nodes for block storage replication C) A set of network bridges used by Neutron agents D) A logical grouping of images in Glance Answer: A
Preparation
Answer: A Explanation: Designate is the official DNSaaS project that integrates with Neutron and Nova. Question 27. When creating a Neutron router, which attribute connects it to an external network? A) external_gateway_info B) provider:network_type C) router:external D) gateway:external_network Answer: A Explanation: The “external_gateway_info” dictionary contains the ID of the external network to which the router’s gateway is attached. Question 28. Which of the following is a valid OpenStack image format supported by Glance? A) VMDK B) OVA C) QCOW D) VHDX Answer: C Explanation: QCOW2 is a native QEMU image format fully supported by Glance. VMDK and VHD are also supported, but the listed options only include QCOW2 as a correct answer. Question 29. In Cinder, what does a “volume type” primarily define? A) The size of the volume in GB B) The backend storage pool or QoS characteristics
Preparation
C) The encryption key for the volume D) The snapshot schedule for the volume Answer: B Explanation: Volume types map to specific back‑ends (e.g., SSD, HDD) and can carry QoS specs. Question 30. Which OpenStack service is responsible for managing floating IP pools? A) Nova B) Neutron C) Keystone D) Glance Answer: B Explanation: Neutron handles networking, including allocation and management of floating IP addresses. Question 31. Which of the following commands lists the available flavors in the environment? A) openstack flavor list B) nova flavor-show all C) openstack compute flavor list --all D) neutron flavor list Answer: A Explanation: “openstack flavor list” displays all defined flavors. Question 32. What does the “--no-admin-pass” option do when creating a new project in Keystone via CLI? A) It disables password authentication for the project’s users
Preparation
A) 5000
B) 8774
C) 9696
D) 9292
Answer: B Explanation: Nova’s public API listens on port 8774. Question 36. Which of the following best describes a “snapshot” in Cinder? A) A copy of an image stored in Glance B) A point‑in‑time copy of a volume that can be used to create new volumes C) A backup of the entire block‑storage backend D) A temporary export of a volume to Swift Answer: B Explanation: Cinder snapshots capture the state of a volume at a specific time and can be used for cloning. Question 37. When using the Horizon dashboard, which tab allows you to manage security groups? A) Network → Networks B) Compute → Instances C) Network → Security Groups D) Identity → Projects Answer: C Explanation: Security groups are managed under the Network section.
Preparation
Question 38. Which of the following is NOT a typical component of an OpenStack “message broker”? A) RabbitMQ B) Qpid C) ZeroMQ D) Kafka Answer: D Explanation: Kafka is not part of the default OpenStack messaging stack; RabbitMQ and Qpid are commonly used. Question 39. In Neutron, what does the “mtu” attribute of a network control? A) Maximum number of ports per network B) Maximum transmission unit size for packets C) Minimum bandwidth guarantee D) Number of subnets allowed Answer: B Explanation: MTU defines the largest packet size that can be transmitted without fragmentation. Question 40. Which command creates a new project (tenant) named “demo” in Keystone? A) openstack project create demo B) keystone tenant-create --name demo C) openstack project create --domain default demo D) openstack project add demo Answer: A Explanation: “openstack project create demo” creates a new project using the CLI.
Preparation
Question 44. Which OpenStack component can be used to automatically provision VLANs on a physical switch? A) Neutron ML2 plugin with the “linuxbridge” driver B) Neutron ML2 plugin with the “openvswitch” driver and a VLAN provider network C) Nova scheduler D) Cinder LVM driver Answer: B Explanation: The ML2 plugin with Open vSwitch can map provider networks to VLAN IDs on physical switches. Question 45. What is the effect of setting “quota:cores” for a project to 0? A) The project can create unlimited CPU cores B) The project cannot launch any instances requiring CPU cores C) The quota is ignored and defaults to the global setting D) It disables the project entirely Answer: B Explanation: A quota of 0 for cores prevents any instance that consumes CPU cores from being launched. Question 46. Which of the following is a valid method to import an image into Glance from a URL? A) openstack image create --file … B) glance image-create --location … C) openstack image import --uri … D) glance import --url …
Preparation
Answer: B Explanation: The “--location” option allows Glance to fetch an image directly from a remote URL. Question 47. In Neutron, what does the “router:external” attribute on a network indicate? A) The network is only for internal tenant traffic B) The network can be used as an external gateway for routers C) The network is a provider network of type VLAN D) The network is automatically assigned a floating IP pool Answer: B Explanation: “router:external” marks a network as usable for router external gateways. Question 48. Which command lists all snapshots for a given volume in Cinder? A) openstack volume snapshot list --volume B) cinder snapshot-list --volume-id C) openstack snapshot list --volume D) cinder volume-snapshot-list Answer: A Explanation: “openstack volume snapshot list --volume ” filters snapshots belonging to the specified volume. Question 49. Which of the following is NOT a typical use case for Heat orchestration? A) Deploying a multi‑node OpenStack environment B) Automating the creation of a web‑tier with load balancers C) Managing the lifecycle of virtual machines only (no networking) D) Scaling resources based on a template parameter
Preparation
C) To set the security groups for the server D) To allocate floating IPs automatically Answer: A Explanation: Instance metadata provides user‑defined key/value pairs accessible via the metadata service. Question 53. Which OpenStack service provides “autoscaling” capabilities based on Ceilometer alarms? A) Heat B) Senlin C) Mistral D) Magnum Answer: B Explanation: Senlin is the clustering service that can perform autoscaling actions in response to Ceilometer alarms. Question 54. In the context of OpenStack, what does “API version discovery” refer to? A) Querying the service catalog for the latest endpoint URLs B) Sending a GET request to the root URL to obtain supported API versions C) Running “openstack --version” on the client machine D) Checking the RabbitMQ version for compatibility Answer: B Explanation: API version discovery returns a list of supported versions for a service when accessing its root path. Question 55. Which of the following commands creates a new keypair named “mykey” and saves the private key to a file?
Preparation
A) openstack keypair create mykey > mykey.pem B) openstack keypair generate mykey --file mykey.pem C) nova keypair-add mykey --private-key mykey.pem D) openstack keypair add mykey - f mykey.pem Answer: A Explanation: “openstack keypair create mykey > mykey.pem” outputs the private key to the specified file. Question 56. When configuring a Neutron DHCP agent, which option determines the IP address range for a subnet? A) allocation_pool B) cidr C) gateway_ip D) dns_nameservers Answer: A Explanation: “allocation_pool” defines the start and end IP addresses that the DHCP server can assign. Question 57. Which OpenStack component is responsible for service registration and discovery? A) Keystone B) Horizon C) Glance D) Neutron Answer: A Explanation: Keystone’s service catalog provides registration and discovery for all OpenStack services.
