LFS252 OpenStack Administration Fundamentals Practice Exam, Exams of Technology

A detailed exam covering OpenStack architecture, identity management (Keystone), compute services (Nova), image services (Glance), networking (Neutron), block storage (Cinder), and dashboard management (Horizon). Candidates manage tenants, configure security groups, deploy VMs, troubleshoot service failures, and analyze logs for multi-service orchestration issues.

Typology: Exams

2025/2026

Available from 01/11/2026

shilpi-jain-1
shilpi-jain-1 🇮🇳

4.2

(5)

29K documents

1 / 88

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
LFS252 OpenStack Administration
Fundamentals Practice Exam
**Question 1.** Which OpenStack service provides identity, token, and catalog services?
A) Nova
B) Glance
C) Keystone
D) Horizon
Answer: C
Explanation: Keystone is the central identity service that authenticates users, issues tokens, and
provides a service catalog.
**Question 2.** In OpenStack, which component stores and serves virtual machine images?
A) Cinder
B) Glance
C) Swift
D) Neutron
Answer: B
Explanation: Glance is the Image service responsible for discovery, registration, and retrieval of
VM images.
**Question 3.** Which OpenStack service is responsible for block storage provisioning?
A) Swift
B) Cinder
C) Nova
D) Heat
Answer: B
Explanation: Cinder provides persistent block storage devices to instances, analogous to virtual
disks.
pf3
pf4
pf5
pf8
pf9
pfa
pfd
pfe
pff
pf12
pf13
pf14
pf15
pf16
pf17
pf18
pf19
pf1a
pf1b
pf1c
pf1d
pf1e
pf1f
pf20
pf21
pf22
pf23
pf24
pf25
pf26
pf27
pf28
pf29
pf2a
pf2b
pf2c
pf2d
pf2e
pf2f
pf30
pf31
pf32
pf33
pf34
pf35
pf36
pf37
pf38
pf39
pf3a
pf3b
pf3c
pf3d
pf3e
pf3f
pf40
pf41
pf42
pf43
pf44
pf45
pf46
pf47
pf48
pf49
pf4a
pf4b
pf4c
pf4d
pf4e
pf4f
pf50
pf51
pf52
pf53
pf54
pf55
pf56
pf57
pf58

Partial preview of the text

Download LFS252 OpenStack Administration Fundamentals Practice Exam and more Exams Technology in PDF only on Docsity!

Fundamentals Practice Exam

Question 1. Which OpenStack service provides identity, token, and catalog services? A) Nova B) Glance C) Keystone D) Horizon Answer: C Explanation: Keystone is the central identity service that authenticates users, issues tokens, and provides a service catalog. Question 2. In OpenStack, which component stores and serves virtual machine images? A) Cinder B) Glance C) Swift D) Neutron Answer: B Explanation: Glance is the Image service responsible for discovery, registration, and retrieval of VM images. Question 3. Which OpenStack service is responsible for block storage provisioning? A) Swift B) Cinder C) Nova D) Heat Answer: B Explanation: Cinder provides persistent block storage devices to instances, analogous to virtual disks.

Fundamentals Practice Exam

Question 4. Which service implements the orchestration of composite cloud applications using templates? A) Heat B) Neutron C) Keystone D) Ceilometer Answer: A Explanation: Heat reads template files (HOT or HOT) to create stacks of resources such as instances, networks, and volumes. Question 5. Which OpenStack component provides a web‑based graphical interface? A) Horizon B) Nova‑api C) Glance‑api D) Cinder‑api Answer: A Explanation: Horizon is the dashboard that allows administrators and users to interact with OpenStack services via a web UI. Question 6. Which of the following is NOT a typical cloud deployment model? A) Private cloud B) Public cloud C) Hybrid cloud D) Distributed cloud Answer: D

Fundamentals Practice Exam

D) Network CIDR Answer: B Explanation: A project is a logical grouping for resources; you must supply a name and optionally a description. Question 10. Which command lists all available flavors in the OpenStack CLI? A) openstack flavor list B) nova flavor-list C) glance flavor-list D) neutron flavor-list Answer: A Explanation: The unified openstack client uses openstack flavor list to display flavor information. Question 11. In Neutron, what does the “router” service provide? A) Compute scheduling B) L2 switching only C) L3 routing between networks D) Object storage replication Answer: C Explanation: Neutron routers enable Layer‑3 routing, connecting private tenant networks to external networks. Question 12. Which of the following is a valid image container format for Glance? A) raw B) qcow

Fundamentals Practice Exam

C) vmdk D) All of the above Answer: D Explanation: Glance supports multiple container formats including raw, qcow2, and vmdk. Question 13. Which OpenStack service is primarily used for telemetry and metering? A) Ceilometer B) Heat C) Swift D) Cinder Answer: A Explanation: Ceilometer collects measurements of resource usage for billing, benchmarking, and scaling. Question 14. What is the default port for the Keystone public API? A) 5000 B) 8774 C) 9696 D) 35357 Answer: A Explanation: Keystone’s public endpoint listens on port 5000 (admin endpoint traditionally on 35357). Question 15. Which of the following can be used as a backend for Cinder? A) LVM

Fundamentals Practice Exam

A) OS::Nova::Server B) OS::Neutron::Port C) OS::Cinder::Volume D) OS::Swift::Container Answer: A Explanation: OS::Nova::Server defines a compute instance in a Heat template. Question 19. Which command retrieves the console log of a Nova instance? A) openstack console log show B) nova get-vnc-console C) nova console-log D) neutron console-log Answer: C Explanation: nova console-log <instance> returns the serial console output of the instance. Question 20. Which of the following is a prerequisite service for a functional OpenStack deployment? A) NTP B) DNSSEC C) LDAP only D) DHCP server only Answer: A Explanation: Accurate time synchronization via NTP is essential for token validation and service coordination.

Fundamentals Practice Exam

Question 21. In Keystone, which role is typically assigned to administrators to manage all projects? A) member B) reader C) admin D) service Answer: C Explanation: The admin role grants full administrative privileges across the cloud. Question 22. Which Neutron extension allows IPv6 address allocation? A) router‑gateway‑ipv B) address‑scope C) subnet‑ipv6‑ra‑mode D) provider‑network Answer: C Explanation: subnet-ipv6-ra-mode defines the IPv6 router advertisement mode for a subnet. Question 23. When using the OpenStack CLI, which environment variable holds the authentication token? A) OS_PASSWORD B) OS_AUTH_URL C) OS_TOKEN D) OS_USERNAME Answer: C Explanation: OS_TOKEN can be set to a pre‑generated token for authentication; however, normally the CLI obtains a token automatically.

Fundamentals Practice Exam

Explanation: The neutron-dhcp-agent provides DHCP for tenant networks on compute nodes. Question 27. Which command creates a new volume in Cinder via the CLI? A) openstack volume create 10 --size 10 B) cinder create --size 10 myvol C) nova volume-create 10 myvol D) glance volume-create 10 myvol Answer: A Explanation: The unified openstack client uses openstack volume create specifying size and name. Question 28. Which of the following is a valid Glance image property used for scheduling? A) hw_cpu_policy B) os_distro C) hw_firmware_type D) All of the above Answer: D Explanation: Image properties such as hw_cpu_policy, os_distro, and hw_firmware_type can influence Nova scheduling decisions. Question 29. In a typical OpenStack reference architecture, which node runs the RabbitMQ service? A) Controller node B) Compute node C) Storage node D) Network node

Fundamentals Practice Exam

Answer: A Explanation: The controller node hosts central services including the message broker (RabbitMQ). Question 30. Which OpenStack service provides auto‑scaling based on Ceilometer alarms? A) Heat B) Nova C) Cinder D) Swift Answer: A Explanation: Heat can define autoscaling resources that react to Ceilometer alarm thresholds. Question 31. Which of the following is the default security group rule in OpenStack? A) Allow all inbound traffic B) Allow SSH (port 22) inbound from 0.0.0.0/ C) Deny all inbound traffic D) Allow ICMP inbound only Answer: C Explanation: By default, a newly created security group denies all inbound traffic; outbound is allowed. Question 32. Which command lists all floating IPs in the cloud? A) openstack floating ip list B) neutron floatingip-list C) nova floating-ip-list

Fundamentals Practice Exam

C) Use the glance image-member-add command D) Both A and C Answer: D Explanation: Images can be shared by setting visibility to public or by adding specific members via glance image-member-add. Question 36. Which of the following networking back‑ends provides hardware‑offloaded virtual NICs? A) Open vSwitch (OVS) without DPDK B) Linux Bridge C) OVS with DPDK D) Linux VLAN Answer: C Explanation: OVS with DPDK enables fast packet processing by bypassing the kernel network stack. Question 37. In a multi‑region OpenStack deployment, which service provides a unified catalog across regions? A) Keystone B) Glance C) Neutron D) Heat Answer: A Explanation: Keystone can be configured for multi‑region support, offering a unified service catalog per region.

Fundamentals Practice Exam

Question 38. Which of the following is NOT a typical use case for Swift? A) Storing VM images for boot B) Object backup for applications C) Persistent block storage for databases D) Static website hosting Answer: C Explanation: Swift offers object storage; persistent block storage is the domain of Cinder. Question 39. What does the --key-name option specify when launching a Nova instance? A) The name of the flavor to use B) The name of the security group C) The SSH keypair to inject into the instance D) The name of the image to launch Answer: C Explanation: --key-name tells Nova which public key to place in the instance for SSH access. Question 40. Which OpenStack component provides a REST API for provisioning networks? A) Nova API B) Neutron API C) Cinder API D) Glance API Answer: B Explanation: Neutron offers a RESTful API for creating networks, subnets, routers, and ports.

Fundamentals Practice Exam

Question 44. Which of the following is a valid way to enable live migration of instances? A) Set live_migration_enabled = True in nova.conf on compute nodes B) Use nova migrate command only C) Set block_migration = False in nova.conf D) Disable shared storage Answer: A Explanation: Enabling live_migration_enabled allows instances to be migrated without downtime, assuming shared storage and proper networking. Question 45. Which OpenStack service can be used to enforce quotas on object storage containers? A) Keystone B) Swift C) Cinder D) Heat Answer: B Explanation: Swift supports per‑account quotas that limit total bytes and number of objects. Question 46. Which of the following is the correct order of steps to boot a VM from an image stored in Glance? A) Create flavor → Create keypair → Launch instance → Attach volume B) Upload image → Create flavor → Launch instance → Assign floating IP C) Create network → Upload image → Create flavor → Launch instance D) Create network → Create keypair → Upload image → Delete flavor Answer: C

Fundamentals Practice Exam

Explanation: A network must exist for the instance’s NIC, then the image is uploaded, a flavor defined, and finally the instance is launched. Question 47. In a typical OpenStack deployment, which service runs on the “controller” node to provide the dashboard? A) nova-api B) horizon C) neutron-server D) cinder-api Answer: B Explanation: The Horizon dashboard process runs on the controller node, providing the web UI. Question 48. Which of the following is a valid Swift storage policy that enables erasure coding? A) ECPolicy-2x B) ReplicationPolicy-3x C) ErasureCodingPolicy-1x D) None of the above Answer: A Explanation: Swift’s erasure coding policies are named like ECPolicy-2x3 indicating data and parity fragments. Question 49. Which command shows the list of available OpenStack services registered in Keystone? A) openstack service list B) keystone service-list

Fundamentals Practice Exam

A) rabbit_userid B) rabbit_password C) rabbit_virtual_host D) rabbit_heartbeat_timeout_threshold Answer: B Explanation: rabbit_password sets the shared secret used by services to authenticate with RabbitMQ. Question 53. In Neutron, which attribute defines the MTU size for a network? A) mtu B) max_transmission_unit C) vlan_id D) segmentation_id Answer: A Explanation: The mtu attribute sets the maximum transmission unit for the network. Question 54. Which of the following is NOT a valid OpenStack command‑line client? A) openstack B) nova C) glanceclient D) neutron Answer: C Explanation: The official CLI for Glance is glance (or via the unified openstack client); there is no glanceclient executable.

Fundamentals Practice Exam

Question 55. Which of the following storage back‑ends can be used for both Cinder and Swift in an integrated deployment? A) NFS B) Ceph RBD C) LVM D) GlusterFS Answer: B Explanation: Ceph provides RBD for block storage (Cinder) and RGW for object storage (Swift). Question 56. Which OpenStack service is responsible for providing “flavors” to users? A) Nova B) Glance C) Keystone D) Heat Answer: A Explanation: Nova defines and manages flavors, which are instance type specifications. Question 57. Which of the following is the correct syntax to create a new Keystone project using the CLI? A) openstack project create --domain default myproject B) keystone project-create myproject --domain default C) nova project-create myproject D) neutron project-create myproject Answer: A Explanation: The openstack project create command with --domain specifies the domain for the new project.