Download PrepIQ OpenStack Certified OpenStack Administrator COA Ultimate Exam and more Exams Technology in PDF only on Docsity!
Administrator COA Ultimate Exam
Question 1. Which OpenStack CLI command lists all users in a domain? A) openstack user list --domain B) keystone user-list --domain-id C) openstack identity user list --domain D) nova user-list --all Answer: A Explanation: In the unified OpenStack client, openstack user list --domain displays users belonging to the specified domain. Question 2. In Keystone v3, what entity represents a logical grouping of resources that can be isolated from other groups? A) Project B) Domain C) Tenant D) Role Answer: B Explanation: A domain is the highest-level container in Keystone v3, used to isolate resources and users across different administrative boundaries. Question 3. Which command creates a new role named “network_admin” in Keystone? A) openstack role create network_admin B) keystone role-create --name network_admin C) openstack role add network_admin D) nova role-create network_admin Answer: A
Administrator COA Ultimate Exam
Explanation: The OpenStack CLI command openstack role create creates a new role. Question 4. How can you assign the role “member” to user “alice” on project “demo”? A) openstack role add --project demo --user alice member B) openstack role assign --project demo --user alice member C) keystone user-role-add --user alice --project demo --role member D) nova role assign member alice demo Answer: B Explanation: openstack role assign --project --user assigns a role to a user on a project. Question 5. Which file stores the Keystone service catalog configuration by default? A) /etc/keystone/keystone.conf B) /etc/keystone/catalog.conf C) /etc/keystone/default_catalog.json D) /var/lib/keystone/catalog.db Answer: A Explanation: The service catalog is defined in the [catalog] section of /etc/keystone/keystone.conf. Question 6. Which of the following verifies that the Identity service is operational? A) openstack service list --service identity B) openstack endpoint list --service identity C) openstack token issue --os-auth-url http://controller:5000/v D) keystone-manage db_sync
Administrator COA Ultimate Exam
D) openstack volume detach vol- Answer: D Explanation: openstack volume detach detaches a volume from any attached instance. Question 10. How can you import an existing public SSH key file “mykey.pub” into OpenStack as a keypair named “mykey”? A) openstack keypair create --public-key mykey.pub mykey B) openstack keypair import --name mykey --public-key mykey.pub C) openstack keypair add --name mykey --public-key mykey.pub D) nova keypair-import --name mykey --pub-key mykey.pub Answer: B Explanation: The openstack keypair import command registers an existing public key. Question 11. Which command associates a floating IP “203.0.113.10” to port “port- 1234 ”? A) openstack floating ip associate 203.0.113.10 port- B) openstack server add floating ip vm-01 203.0.113. C) openstack floating ip set --port port-1234 203.0.113. D) neutron floatingip-associate --floatingip-id 203.0.113.10 --port-id port- Answer: A Explanation: openstack floating ip associate links a floating IP to a port. Question 12. Which option displays the console log of an instance named “web01”? A) openstack console log show web B) openstack console log show --server web
Administrator COA Ultimate Exam
C) openstack server console log web D) openstack console log show web Answer: D Explanation: openstack console log show returns the latest console output. Question 13. What does the “snapshot” action on an instance produce? A) A new image that can be used to launch other instances B) A backup of the attached volumes only C) A copy of the instance’s RAM state D) A temporary clone that expires after 24 hours Answer: A Explanation: Snapshotting an instance creates an image of its root disk, usable for future boots. Question 14. Which command adds metadata key “env=prod” to instance “app01”? A) openstack server set --property env=prod app B) openstack server metadata set app01 env=prod C) openstack server set --metadata env=prod app D) nova metadata set app01 env=prod Answer: C Explanation: openstack server set --metadata updates instance metadata. Question 15. How do you list all available flavors? A) openstack flavor list B) nova flavor-list
Administrator COA Ultimate Exam
C) openstack compute service list --host controller --binary nova-compute D) openstack compute service list Answer: D Explanation: openstack compute service list shows all compute services across hosts, including their state. Question 19. In Neutron, what is the purpose of a provider network? A) To expose tenant networks directly to the physical infrastructure B) To provide DHCP services to tenant subnets C) To act as a floating IP pool for all tenants D) To enable VLAN trunking between compute nodes Answer: A Explanation: Provider networks map directly onto physical networks, allowing tenants to use existing infrastructure. Question 20. Which command creates a tenant network named “private- net” with a MTU of 1500? A) openstack network create --mtu 1500 private-net B) neutron net-create private-net --mtu 1500 C) openstack network create --provider:mtu 1500 private-net D) openstack network create private-net --mtu 1500 Answer: A Explanation: The --mtu option sets the Maximum Transmission Unit for the network at creation. Question 21. How can you limit a tenant to a maximum of 5 networks? A) openstack quota set --networks 5 B) openstack network quota set --limit 5
Administrator COA Ultimate Exam
C) openstack quota set --project --networks 5 D) openstack network set --quota 5 Answer: C Explanation: openstack quota set --project --networks 5 sets the network quota for the specified project. Question 22. Which command creates a router named “router- 1 ” in the default external network “public”? A) openstack router create --external-network public router- B) openstack router create --external-gateway public router- C) openstack router create router-1 --external-network public D) openstack router create router-1 --external-gateway public Answer: D Explanation: The --external-gateway flag attaches the router to the external (provider) network at creation. Question 23. To connect a router to a tenant subnet “private-subnet”, which command is used? A) openstack router add subnet router-1 private-subnet B) openstack router set --interface private-subnet router- C) openstack router add interface router-1 private-subnet D) openstack router interface add router-1 private-subnet Answer: C Explanation: openstack router add interface attaches the subnet to the router. Question 24. Which of the following checks the status of the L3 agent on a compute node? A) openstack network agent list --agent-type l3-router
Administrator COA Ultimate Exam
Question 27. In Cinder, which command creates a 100 GB volume named “data-vol” using the default volume type? A) openstack volume create --size 100 data-vol B) cinder create --size 100 data-vol C) openstack block storage volume create --size 100 data-vol D) openstack volume create data-vol --size 100 Answer: A Explanation: openstack volume create --size creates a new volume. Question 28. How can you display detailed information about volume “vol-002”? A) openstack volume show vol- B) cinder show vol- C) openstack block storage volume show vol- D) openstack volume get vol- Answer: A Explanation: openstack volume show provides the full details of a volume. Question 29. Which command lists all volume types available in the cloud? A) openstack volume type list B) cinder type-list C) openstack block storage type list D) openstack volume type show Answer: A Explanation: openstack volume type list displays the defined volume types.
Administrator COA Ultimate Exam
Question 30. What does a Cinder volume snapshot represent? A) A copy-on-write of the volume’s data at a point in time B) A backup stored in object storage automatically C) A temporary clone that lives only while the volume is attached D) A compressed archive of the volume’s metadata Answer: A Explanation: A snapshot captures the volume’s data at a specific moment, enabling later restoration. Question 31. Which command creates a backup of volume “vol- 003 ” with name “backup-vol- 003 ”? A) openstack backup create --volume vol-003 backup-vol- B) openstack volume backup create --volume vol-003 --name backup-vol- C) cinder backup-create --volume vol-003 --name backup-vol- D) openstack block storage backup create --volume vol-003 backup-vol- Answer: B Explanation: The openstack volume backup create command backs up a volume. Question 32. In Swift, which command creates a container called “logs”? A) swift post logs B) swift upload logs C) swift container create logs D) swift put logs Answer: A Explanation: swift post creates a new container.
Administrator COA Ultimate Exam
Explanation: Expiration policies trigger automatic deletion of objects after the defined time period. Question 36. Which command lists all images stored in Glance? A) openstack image list B) glance image-list C) openstack image show D) openstack image list --public Answer: A Explanation: openstack image list displays all images visible to the user. Question 37. How can you upload a new QCOW2 image named “centos7.qcow2” with public visibility? A) openstack image create --file centos7.qcow2 --disk-format qcow2 -- container-format bare --public centos B) glance image-create --name centos7 --disk-format qcow2 --container- format bare --visibility public --file centos7.qcow C) openstack image create --disk-format qcow2 --container-format bare -- public centos7.qcow D) openstack image create --file centos7.qcow2 --disk-format qcow2 -- visibility public centos Answer: D Explanation: openstack image create --file --disk-format qcow2 -- visibility public uploads the image with public visibility. Question 38. Which property of a Glance image determines whether it can be used to boot an instance? A) hw_disk_bus B) protected C) visibility
Administrator COA Ultimate Exam
D) container_format Answer: C Explanation: The visibility property (public, private, shared, community) controls who can see and use the image for booting. Question 39. What does the “openstack service list” command display? A) All available OpenStack services and their enabled/disabled status B) The endpoints for each service on the current region C) The list of services registered in the Keystone catalog D) The health check results for each service Answer: C Explanation: openstack service list shows services recorded in Keystone’s catalog. Question 40. Which command checks the health of the Nova API service on the controller node? A) systemctl status openstack-nova-api.service B) openstack compute service list --service nova-api C) openstack service status nova-api D) nova-manage service list Answer: A Explanation: The systemd unit openstack-nova-api.service indicates the running state of the Nova API. Question 41. How can you view the most recent log entries for the Neutron server? A) tail -f /var/log/neutron/server.log B) openstack network log tail --service neutron-server
Administrator COA Ultimate Exam
B) openstack client version C) openstack version show D) openstack --info Answer: A Explanation: openstack --version prints the client’s version number. Question 45. In Horizon, where can an administrator create a new domain? A) Identity → Projects → Create Domain B) Identity → Domains → Create Domain C) Admin → System → Domains → Add Domain D) Identity → Users → Create Domain Answer: B Explanation: The “Domains” tab under the Identity panel is where domains are managed. Question 46. Which Horizon panel allows you to view the console of a running instance? A) Compute → Instances → Console B) Project → Compute → Instances → Console C) Admin → Compute → Instances → Console D) Project → Compute → Instances → Access & Security Answer: B Explanation: In the Project dashboard, the Instances table includes a “Console” link. Question 47. How can an administrator enable a disabled user “bob” using the CLI?
Administrator COA Ultimate Exam
A) openstack user set --enable bob B) openstack user enable bob C) keystone user-enable --name bob D) openstack user set --disable false bob Answer: A Explanation: openstack user set --enable re-enables a disabled user. Question 48. Which command removes the role “member” from user “alice” on project “demo”? A) openstack role remove --project demo --user alice member B) openstack role revoke --project demo --user alice member C) openstack role delete --project demo --user alice member D) openstack role unassign --project demo --user alice member Answer: B Explanation: openstack role revoke removes a role assignment. Question 49. What is the effect of setting the “admin_state_up” attribute of a Neutron router to “false”? A) The router stops forwarding traffic but remains visible in the API. B) The router is deleted automatically. C) All attached subnets are detached. D) The router’s external gateway is removed. Answer: A Explanation: Setting admin_state_up to false disables forwarding while keeping the router object.
Administrator COA Ultimate Exam
Explanation: Swift allows any alphanumeric policy name; “gold”, “fast”, and “high-performance” are all permissible. Question 53. In Glance, which property indicates the minimum disk size required to boot from the image? A) min_disk B) disk_format C) size D) hw_disk_bus Answer: A Explanation: The min_disk property specifies the required root disk size in GB. Question 54. Which command lists all security groups for project “demo”? A) openstack security group list --project demo B) openstack security group list --project-id C) openstack security group list --os-project-name demo D) openstack security group list Answer: D Explanation: Security groups are scoped to the current project; the default list shows those for the active project. Question 55. How can an administrator view the current status of the OpenStack message queue (RabbitMQ) on the controller? A) rabbitmqctl status B) openstack message queue status C) rabbitmqctl list_queues D) openstack service list --service rabbitmq
Administrator COA Ultimate Exam
Answer: A Explanation: rabbitmqctl status reports the health and statistics of the RabbitMQ broker. Question 56. Which command displays the list of compute nodes that belong to the aggregate “highmem”? A) openstack aggregate show highmem --hosts B) openstack aggregate list --name highmem --detail C) openstack aggregate show highmem D) openstack compute aggregate show highmem Answer: C Explanation: openstack aggregate show displays the aggregate’s properties, including the host list. Question 57. What does the “–no-cache” option do when running an OpenStack CLI command? A) Prevents the client from storing the command output locally. B) Forces the client to query the API instead of using a cached token. C) Disables local DNS caching for the command. D) Clears the client’s credential cache before execution. Answer: B Explanation: --no-cache tells the client not to reuse a cached service catalog or token, ensuring a fresh API call. Question 58. Which of the following is the default port for the Keystone public API? A) 5000 B) 35357 C) 8774 D) 9696
