Download PrepIQ Certified OpenStack Professional Ultimate Exam and more Exams Technology in PDF only on Docsity!
Professional Ultimate Exam
Question 1. Which OpenStack service is responsible for managing virtual machine instances? A) Keystone B) Nova C) Neutron D) Cinder Answer: B Explanation: Nova is the compute service that handles the lifecycle of virtual machines, including provisioning, scheduling, and termination. Question 2. In OpenStack, which component provides identity, token, catalog, and policy services? A) Glance B) Swift C) Keystone D) Horizon Answer: C Explanation: Keystone is the central authentication and high-level authorization service, issuing tokens and maintaining the service catalog. Question 3. Which OpenStack service stores and serves virtual machine images? A) Cinder B) Glance C) Neutron D) Heat Answer: B Explanation: Glance is the image service that provides discovery, registration, and delivery of VM images. Question 4. Which networking service enables the creation of virtual networks, subnets, and routers? A) Nova B) Neutron
Professional Ultimate Exam
C) Cinder D) Trove Answer: B Explanation: Neutron provides “network-as-a-service,” allowing tenants to define L2/L3 networking resources. Question 5. What is the primary purpose of Cinder in OpenStack? A) Object storage B) Block storage for instances C) Image management D) Orchestration Answer: B Explanation: Cinder offers persistent block storage that can be attached to VM instances as virtual disks. Question 6. Which OpenStack project offers a web-based dashboard for users and administrators? A) Horizon B) Keystone C) Heat D) Swift Answer: A Explanation: Horizon is the official OpenStack dashboard that provides a graphical interface to interact with all services. Question 7. In a typical OpenStack deployment, which component stores object data such as static files and backups? A) Glance B) Cinder C) Swift D) Nova Answer: C
Professional Ultimate Exam
A) Block storage B) File sharing service (NFS, CIFS) C) DNS as a service D) Image service Answer: B Explanation: Manila provides shared file systems (e.g., NFS, CIFS) to instances, enabling multi-tenant file sharing. Question 12. Which OpenStack component handles DNS record management for cloud resources? A) Designate B) Neutron C) Keystone D) Glance Answer: A Explanation: Designate implements DNSaaS, allowing automated creation and management of DNS zones and records. Question 13. Which OpenStack project provides secret storage and key management? A) Barbican B) Keystone C) Swift D) Nova Answer: A Explanation: Barbican is the key manager service, storing secrets such as passwords, certificates, and encryption keys. Question 14. In OpenStack, what does the term “availability zone” refer to? A) A logical grouping of compute hosts for fault isolation B) A virtual network segment C) A storage pool for Cinder volumes D) A region’s authentication endpoint
Professional Ultimate Exam
Answer: A Explanation: Availability zones are distinct physical locations within a region, used to spread instances across failure domains. Question 15. Which OpenStack concept defines a geographical grouping of resources, each with its own identity service? A) Region B. Cell C) Domain D) Project Answer: A Explanation: A region is a discrete deployment of OpenStack services with its own endpoints, often used for multi-site clouds. Question 16. What is the purpose of “cells” in Nova architecture? A) To provide multi-tenant isolation B) To horizontally scale the compute service by partitioning hosts C) To manage block storage back-ends D) To handle image caching Answer: B Explanation: Cells divide the compute node pool into manageable groups, reducing scheduler load and improving scalability. Question 17. Which OpenStack component uses the “XenAPI” driver to manage XenServer hypervisors? A) Nova compute B) Neutron L3 agent C) Cinder volume driver D) Heat engine Answer: A Explanation: Nova’s XenAPI driver enables management of instances on XenServer hypervisors.
Professional Ultimate Exam
C) Keystone D) Nova Answer: B Explanation: Neutron’s DNSaaS plug-in integrates with Designate to provide internal DNS resolution for instances. Question 22. What is the default authentication token format used by Keystone after version 3? A) UUID B) PKI-signed token C) Fernet token D) SAML assertion Answer: C Explanation: Keystone v3 uses Fernet tokens (symmetric encryption) as the default, providing stateless authentication. Question 23. Which OpenStack service enables “bare-metal” provisioning of physical servers? A) Ironic B) Nova-baremetal driver C) Cinder LVM driver D) Heat Answer: A Explanation: Ironic is the bare-metal service that discovers, provisions, and manages physical machines as compute nodes. Question 24. In OpenStack, which component translates a user’s request to create a VM into a concrete host allocation? A) Scheduler (Nova scheduler) B) API server C) Conductor service D) Compute driver Answer: A
Professional Ultimate Exam
Explanation: The Nova scheduler selects the most appropriate compute host based on filters and weighing criteria. Question 25. Which file typically contains the OpenStack service endpoints and credentials for CLI usage? A) /etc/nova/nova.conf B) ~/.config/openstack/clouds.yaml C) /etc/keystone/keystone.conf D) /var/lib/glance/images/ Answer: B Explanation: clouds.yaml stores cloud definitions, endpoint URLs, and authentication details for the OpenStack client. Question 26. What is the purpose of the “flavor” concept in OpenStack? A) To define network security groups B) To specify the compute, memory, and storage resources of an instance C) To assign a role to a user D) To configure image metadata Answer: B Explanation: Flavors are predefined resource templates that dictate vCPU count, RAM, and root disk size for instances. Question 27. Which OpenStack service can be used to automatically create snapshots of Cinder volumes? A) Nova B) Cinder backup service C) Ceilometer D) Glance Answer: B Explanation: The Cinder backup service can schedule and store volume snapshots to external storage back-ends. Question 28. Which OpenStack component provides “security groups” to control inbound and outbound traffic?
Professional Ultimate Exam
D) Swift Answer: B Explanation: Zun provides container-as-a-service, allowing users to run Docker containers and manage their images. Question 32. Which OpenStack project provides a “shared file system” service built on top of existing storage back-ends? A) Manila B) Cinder C) Swift D) Nova Answer: A Explanation: Manila abstracts file-share protocols (NFS, CIFS) and can use back-ends like CephFS or NetApp. Question 33. What is the primary advantage of using “heat-engine” over manual CLI commands? A) Faster instance boot time B) Declarative infrastructure as code, enabling repeatable deployments C) Automatic load balancing D) Built-in image compression Answer: B Explanation: Heat-engine processes templates, allowing users to declare the desired state and have OpenStack provision resources automatically. Question 34. Which OpenStack service can be used to enforce role-based access control (RBAC) policies? A) Keystone B) Neutron C) Glance D) Cinder Answer: A Explanation: Keystone manages projects, users, and roles, and evaluates RBAC rules for API access.
Professional Ultimate Exam
Question 35. Which of the following is NOT a valid OpenStack networking mode? A) Provider (flat) network B) Overlay (VXLAN) network C) Direct (SR-IOV) network D) Peer-to-Peer (P2P) network Answer: D Explanation: OpenStack supports provider, overlay, and direct (SR-IOV) networking, but “Peer-to-Peer” is not a defined mode. Question 36. What does the “--os-auth-url” CLI parameter specify? A) The URL of the Image service API B) The authentication endpoint of Keystone C) The endpoint for the Compute API D) The location of the OpenStack configuration file Answer: B Explanation: --os-auth-url points the client to Keystone’s authentication URL to obtain a token. Question 37. Which OpenStack component is responsible for translating a volume request into a back-end specific operation? A) Cinder volume driver B) Nova scheduler C) Glance store driver D) Neutron L2 agent Answer: A Explanation: The Cinder volume driver abstracts the underlying storage system (e.g., LVM, Ceph, NFS) and executes the appropriate actions. Question 38. Which OpenStack service can be used to expose a VM’s console over VNC, SPICE, or RDP? A) Nova console proxy
Professional Ultimate Exam
Explanation: Ceilometer alarms can trigger Heat to adjust resources, enabling autoscaling of stacks based on metering metrics. Question 42. What is the purpose of the “gateway” attribute in a Neutron subnet? A) To define the default route for instances in that subnet B) To specify the DNS server address C) To enable DHCP services D) To set the VLAN ID Answer: A Explanation: The gateway IP acts as the default L3 hop for traffic leaving the subnet. Question 43. Which OpenStack service provides “image caching” on compute nodes to reduce image download latency? A) Glance cache daemon (glance-cache-manage) B) Nova image cache (nova-compute) C) Cinder volume cache D) Neutron L3 agent cache Answer: B Explanation: Nova compute includes an image cache that stores recently used images locally to speed up instance boot. Question 44. Which OpenStack feature allows a user to delegate a subset of their roles to another user? A) Trusts (Keystone trusts) B) Service catalogs C) Domain delegation D) Policy files Answer: A Explanation: Keystone trusts enable one user (trustor) to delegate limited rights to another (trustee) without sharing credentials.
Professional Ultimate Exam
Question 45. Which OpenStack deployment tool automates the installation of services using Ansible playbooks? A) Kolla-Ansible B) DevStack C) TripleO D) Juju Answer: A Explanation: Kolla-Ansible provides production-ready Ansible roles to deploy Docker-containerized OpenStack services. Question 46. In OpenStack, what does “high availability (HA) for Keystone” typically involve? A) Running multiple Keystone instances behind a load balancer with shared backend database B. Using a single Keystone node with increased resources C. Deploying Keystone in a Docker Swarm only D. Enabling the “ha_enabled” flag in nova.conf Answer: A Explanation: HA for Keystone requires at least two instances and a load balancer, plus a replicated database, to avoid a single point of failure. Question 47. Which OpenStack service can be used to provision a “virtual router” for tenant networking? A) Neutron L3 agent B) Nova scheduler C) Cinder volume service D) Heat orchestration Answer: A Explanation: The Neutron L3 agent provides virtual router functionality, enabling inter-subnet routing and external gateway access. Question 48. What is the function of the “metadata service” (config-drive) for an instance?
Professional Ultimate Exam
D) Swift Answer: A Explanation: Glance includes image conversion capabilities, allowing upload of images in one format and conversion to others on demand. Question 52. Which OpenStack component logs events to the “/var/log/nova/” directory on compute nodes?* A) Nova compute service B) Neutron L2 agent C) Cinder scheduler D) Heat engine Answer: A Explanation: The nova-compute daemon writes its logs to /var/log/nova/ on each compute host. Question 53. In OpenStack, what does the term “ephemeral disk” refer to? A) The temporary root disk that is lost when the instance is terminated B) A Cinder volume attached as a persistent disk C. A Swift object container D. A Glance image cache Answer: A Explanation: Ephemeral storage is the instance’s local disk that is not backed by block storage and disappears on termination. Question 54. Which OpenStack service is used to manage “QoS policies” for network traffic? A) Neutron QoS extension B) Nova bandwidth manager C) Cinder I/O throttling D) Heat resource policy Answer: A Explanation: Neutron’s QoS extension allows administrators to define bandwidth limits, DSCP markings, and other traffic policies.
Professional Ultimate Exam
Question 55. Which OpenStack component provides “service function chaining” (SFC) capabilities? A) Neutron SFC extension B) Nova compute C) Keystone policy engine D) Glance image pipeline Answer: A Explanation: The Neutron SFC extension enables chaining of virtual network functions (VNFs) in a defined order. Question 56. Which OpenStack deployment model uses “OpenStack on OpenStack” to manage the cloud itself? A) TripleO (OpenStack on OpenStack) B) DevStack C) Kolla-Ansible D) Packstack Answer: A Explanation: TripleO stands for “OpenStack on OpenStack”, using the OpenStack services (e.g., Ironic, Heat) to provision the control plane. Question 57. What is the default port for the Keystone public API? A) 5000 B) 35357 C) 8774 D) 9696 Answer: A Explanation: Keystone’s public (unversioned) API listens on port 5000; the admin API traditionally used 35357 (deprecated in newer releases). Question 58. Which OpenStack service can automatically generate “image catalogs” for public cloud images? A) Glance
Professional Ultimate Exam
Answer: A Explanation: Glance supports multiple back-ends (stores) such as file, swift, rbd, and http; “file” stores images on the local filesystem. Question 62. Which OpenStack component is responsible for “orchestrating” the creation of a load balancer as a service (LBaaS)? A) Octavia B) Neutron LBaaS v1 (deprecated) C) Nova scheduler D) Heat resource type OS::Octavia::LoadBalancer Answer: A Explanation: Octavia is the current OpenStack LBaaS implementation, providing load balancer provisioning and management. Question 63. In OpenStack, which configuration option defines the “default availability zone” for newly created instances? A) nova.conf: default_availability_zone B) neutron.conf: default_az C) keystone.conf: default_zone D) glance.conf: default_zone Answer: A Explanation: The default_availability_zone setting in nova.conf tells the scheduler which AZ to use when none is specified. Question 64. Which OpenStack service can be used to “tag” resources (e.g., servers, volumes) for easier identification? A) All core services support tags via the API (Nova, Cinder, Neutron, etc.) B) Only Keystone C) Only Glance D) Only Heat Answer: A Explanation: Tagging is a generic feature exposed across many services, allowing metadata key/value pairs on resources.
Professional Ultimate Exam
Question 65. Which OpenStack component provides the “config-drive” functionality by default? A) Nova (via the config-drive option) B) Neutron DHCP agent C) Cinder volume driver D) Glance image import Answer: A Explanation: Nova can generate a config-drive (ISO or vfat) that contains metadata and user-data for the instance. Question 66. Which OpenStack feature allows a user to “extend” a Cinder volume without downtime? A) Online volume extension (cinder extend) B) Snapshot-based cloning only C) Live migration of the volume D) None; volumes must be recreated Answer: A Explanation: Cinder supports online volume extension for many back-ends, allowing size increase while attached. Question 67. Which OpenStack service is responsible for “DNS-based service discovery” for containers managed by Magnum? A) Designate integration with Magnum B) Neutron DNSaaS only C) Heat DNS plugin D) Ironic DNS driver Answer: A Explanation: Magnum can integrate with Designate to provide DNS entries for container services, enabling discovery. Question 68. Which OpenStack component implements “rate limiting” to prevent API abuse? A) Keystone middleware (rate-limit) B) Nova scheduler filter
