


































































Study with the several resources on Docsity
Earn points by helping other students or get them with a premium plan
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
This exam evaluates the ability to install, configure, and manage Red Hat OpenStack Platform components. Topics include Keystone (identity), Glance (images), Nova (compute), Neutron (networking), and Cinder (block storage). Candidates must also understand OpenStack architecture, CLI administration, and troubleshooting. Targeted at system administrators transitioning to cloud infrastructure roles.
Typology: Exams
1 / 74
This page cannot be seen from the preview
Don't miss anything!



































































Question 1. Which core OpenStack service is responsible for managing compute resources such as virtual machines? A) Neutron B) Nova C) Glance D) Cinder Answer: B Explanation: Nova is the OpenStack component responsible for provisioning and managing compute instances (virtual machines). It handles the lifecycle and scheduling of compute resources. Question 2. What is the primary role of the Keystone service in OpenStack? A) Managing virtual machine images B) Providing identity, authentication, and authorization services C) Handling network traffic routing D) Managing block storage volumes Answer: B Explanation: Keystone provides identity services, including user authentication, token management, and role-based access control, essential for secure access to OpenStack services. Question 3. Which component of OpenStack is used for image management and supports formats like QCOW2 and RAW? A) Glance B) Nova C) Neutron D) Cinder Answer: A Explanation: Glance is the image service responsible for storing and retrieving virtual machine images, supporting various formats such as QCOW2, RAW, and ISO. Question 4. In a typical OpenStack deployment, what is the main purpose of a controller node?
A) To host user instances and perform compute tasks B) To manage the control plane services like Keystone, Glance, Nova API, and Horizon C) To store block storage volumes D) To run network forwarding services Answer: B Explanation: The controller node hosts the core control plane services that coordinate and manage the cloud environment, including identity, image, and orchestration services. Question 5. Which OpenStack component is responsible for networking capabilities such as creating networks, subnets, and routers? A) Nova B) Neutron C) Glance D) Cinder Answer: B Explanation: Neutron is the networking service that manages networks, subnets, routers, and other network resources within OpenStack. Question 6. What distinguishes a floating IP address from a fixed IP address in OpenStack? A) Floating IPs are static and assigned permanently to instances B) Floating IPs are dynamically allocated for external access and can be reassigned C) Fixed IPs are used only for internal communication within the cloud D) Floating IPs are only available for private networks Answer: B Explanation: Floating IPs are public IP addresses that can be associated or disassociated with instances dynamically, enabling external access, whereas fixed IPs are assigned to instances for internal network communication. Question 7. Which OpenStack service provides the dashboard graphical user interface? A) Horizon
D) By disabling automatic restarts of services Answer: B Explanation: High availability is achieved through redundancy, load balancing across multiple service instances, and automatic failover mechanisms to ensure continuous operation. Question 11. Which command is used to create a new project (tenant) in OpenStack? A) openstack project create B) openstack tenant create C) openstack project new D) openstack account create Answer: A Explanation: The command openstack project create is used to create a new project (also known as tenant), which isolates resources and users within OpenStack. Question 12. In OpenStack, what is a key purpose of the 'security groups' feature? A) To manage user authentication B) To control inbound and outbound network traffic for instances C) To organize images into categories D) To manage storage quotas Answer: B Explanation: Security groups act as virtual firewalls, defining ingress and egress rules to control network traffic to and from instances. Question 13. Which image format is most suitable for live migration and snapshots in OpenStack? A) RAW B) ISO C) QCOW D) VMDK Answer: C
Explanation: QCOW2 supports features such as snapshots and live migration, making it suitable for dynamic VM operations in OpenStack. Question 14. When creating a subnet in Neutron, which parameter defines the range of IP addresses assigned to hosts? A) Gateway IP B) CIDR block C) DHCP server IP D) Network mask Answer: B Explanation: The CIDR (Classless Inter-Domain Routing) block specifies the IP address range available for hosts within the subnet. Question 15. What is the purpose of a router in OpenStack Neutron? A) To connect different networks and enable routing between them and external networks B) To handle traffic encryption C) To store VM images D) To provide load balancing for instances Answer: A Explanation: Routers connect internal networks and facilitate routing traffic to external networks, enabling instances to communicate beyond their subnet. Question 16. In OpenStack, which command is used to assign a floating IP to an instance? A) openstack ip floating create B) openstack floating ip allocate C) openstack floating ip associate D) openstack ip assign floating Answer: C Explanation: The command openstack floating ip associate associates an existing floating IP with a specific instance.
B) openstack network add C) neutron net-create D) openstack network new Answer: A Explanation: openstack network create is used to create a new network in OpenStack, allowing tenants to define their own network topology. Question 21. How does OpenStack's architecture support multi-tenancy? A) By isolating resources via projects and domains, ensuring separate access and resource allocation for each tenant B) By sharing all resources openly among users C) By deploying multiple control planes for each tenant D) By limiting user access to a single network type Answer: A Explanation: OpenStack uses projects (tenants) and domains to isolate resources, providing secure multi-tenancy within the cloud environment. Question 22. Which of the following best describes Infrastructure-as-a-Service (IaaS)? A) Providing a platform for developing applications B) Delivering virtualized hardware resources such as compute, storage, and networking over the internet C) Offering ready-to-use software applications via subscription D) Hosting web applications on dedicated hardware Answer: B Explanation: IaaS provides virtualized hardware resources like compute, storage, and networking, allowing users to build and manage their own software environments. Question 23. What is a key benefit of resource pooling in cloud computing? A) It restricts access to resources B) It allows multiple users to share resources efficiently, improving utilization and flexibility
C) It guarantees dedicated hardware for each user D) It simplifies hardware maintenance by reducing hardware options Answer: B Explanation: Resource pooling aggregates resources, enabling multiple users to share them efficiently, leading to better utilization and scalability. Question 24. Which OpenStack component manages user roles and permissions? A) Neutron B) Keystone C) Glance D) Horizon Answer: B Explanation: Keystone handles identity, user management, roles, and permissions, controlling access to OpenStack services. Question 25. When configuring security groups, which rule type allows outbound traffic? A) Ingress rule B) Egress rule C) Forward rule D) Default rule Answer: B Explanation: Egress rules control outbound traffic from instances, whereas ingress rules manage inbound traffic. Question 26. Which command allows you to delete an image from Glance using OpenStack CLI? A) openstack image delete B) glance image remove C) openstack image remove D) glance image delete
Question 30. Which image property controls whether an image is visible to all projects or restricted? A) Name B) Disk format C) Visibility (public, private, shared) D) Metadata Answer: C Explanation: The visibility attribute determines if an image is public (accessible to all), private (restricted to owner), or shared (accessible to specific projects). Question 31. What is the primary function of the 'openstack server create' command? A) To create a new virtual machine instance B) To create a new network C) To provision block storage volumes D) To initialize a new user account Answer: A Explanation: The command openstack server create is used to launch a new VM instance in OpenStack. Question 32. In OpenStack, which component manages the orchestration of complex cloud application deployments? A) Heat B) Horizon C) Neutron D) Keystone Answer: A Explanation: Heat is the orchestration service that manages the deployment and coordination of complex applications via templates. Question 33. Which command is used to associate a floating IP with an instance? A) openstack floating ip associate
B) openstack ip assign floating C) openstack ip float assign D) openstack floating ip add Answer: A Explanation: openstack floating ip associate links a floating IP to an instance, enabling external access. Question 34. What is the main purpose of the 'glance image update' command? A) To modify properties of an existing image B) To upload a new image C) To delete an image D) To list images in Glance Answer: A Explanation: The command glance image-update allows changes to the properties or metadata of an existing image. Question 35. Which openstack CLI command is used to list all available flavors? A) openstack flavor list B) openstack flavors show C) openstack flavor show D) openstack flavor info Answer: A Explanation: openstack flavor list displays all configured instance flavors, which specify resource allocations. Question 36. How can an administrator create a new security group rule to allow SSH traffic? A) openstack security group rule create --protocol tcp --port 22 --direction ingress B) openstack security group rule add --protocol tcp --port 22 C) openstack security group rule allow --port 22 D) openstack security group create --allow SSH
Question 40. What is the function of the 'rebuild' operation on an instance? A) To update the instance's flavor B) To replace the current instance disk with a new image, preserving other settings C) To delete the instance D) To migrate the instance to another host Answer: B Explanation: Rebuilding an instance replaces its disk with a new image, useful for restoring or reconfiguring the VM. Question 41. In OpenStack, what is the purpose of the 'quota' system? A) To limit the amount of resources (compute, storage, network) a project can consume B) To control user authentication levels C) To restrict image sharing among projects D) To assign network bandwidth limits Answer: A Explanation: Quotas enforce resource limits per project, preventing overconsumption and ensuring fair resource distribution. Question 42. Which command creates a new volume from an existing volume snapshot? A) openstack volume create --snapshot-id B) openstack volume snapshot --create-from C) openstack volume clone D) openstack volume backup --create Answer: A Explanation: The command openstack volume create --snapshot-id creates a new volume using data from a snapshot. Question 43. Which OpenStack service manages the user interface for project administrators and end- users? A) Horizon
B) Keystone C) Neutron D) Glance Answer: A Explanation: Horizon provides a web-based GUI for managing OpenStack resources and user interactions. Question 44. Which command is used to delete a security group in OpenStack? A) openstack security group delete B) openstack security group remove C) openstack security delete D) openstack secgroup delete Answer: A Explanation: openstack security group delete removes a specified security group from OpenStack. Question 45. How are images configured to be visible only within a specific project? A) By setting their visibility to 'private' and sharing with selected projects B) By setting their visibility to 'public' C) By storing them in a dedicated image repository D) By encrypting the images Answer: A Explanation: Setting images as 'private' restricts access to the owner, but sharing with specific projects allows controlled access. Question 46. Which component is responsible for managing the orchestration of complex workloads in OpenStack? A) Heat B) Nova C) Glance
Explanation: openstack flavor list provides a list of all predefined resource templates for VM instances. Question 50. How does OpenStack achieve resource isolation among tenants? A) Using project (tenant) accounts and associated quotas B) By deploying separate hardware for each tenant C) By encrypting all data D) By limiting network access only to administrators Answer: A Explanation: Resource isolation is enforced through projects (tenants) and quotas, ensuring each tenant's resources are segregated. Question 51. Which command allows creating a new network router in OpenStack? A) openstack router create B) openstack network router-add C) neutron router-create D) openstack router new Answer: A Explanation: openstack router create is used to create a router that facilitates network traffic routing between subnets. Question 52. What is the significance of the 'admin' role in OpenStack? A) It grants full administrative privileges to manage resources and configurations B) It allows users to only view resources C) It restricts access to network configurations D) It is used only for billing purposes Answer: A Explanation: The 'admin' role provides full permissions for managing all aspects of the OpenStack environment.
Question 53. Which command is used to resize an instance to a different flavor? A) openstack server resize B) openstack instance change C) nova resize D) openstack instance update Answer: A Explanation: openstack server resize allows you to change the flavor of an existing instance, reallocating resources. Question 54. How are image sharing permissions managed in OpenStack? A) By setting the image visibility to 'shared' and assigning access to specific projects B) By encrypting images C) By storing images in a private repository only accessible by admin D) Sharing is not supported in OpenStack Answer: A Explanation: Sharing is managed by setting images to 'shared' and explicitly granting access to other projects. Question 55. Which component is responsible for managing user identity and access across OpenStack services? A) Keystone B) Nova C) Glance D) Neutron Answer: A Explanation: Keystone manages authentication, user accounts, roles, and permissions, central to multi- service security. Question 56. Which command is used to delete an existing volume in Cinder? A) openstack volume delete
Answer: A Explanation: The command permits ICMP traffic (used by ping) inbound for security group rules. Question 60. What is the purpose of 'glance image save'? A) To export an image to a file B) To upload an image to Glance C) To update image properties D) To delete an image Answer: A Explanation: glance image save exports the image data to a local file for backup or transfer purposes. Question 61. Which OpenStack component is responsible for providing the web-based dashboard? A) Horizon B) Keystone C) Nova D) Neutron Answer: A Explanation: Horizon is the GUI that allows users and administrators to manage resources via a web interface. Question 62. How can an administrator set a quota limit for the number of instances per project? A) Using 'openstack quota set' with the appropriate parameters B) Editing the nova.conf file directly C) Through Horizon only D) Quotas are set automatically and cannot be modified Answer: A Explanation: openstack quota set allows setting limits on resources like instances, cores, and volumes for projects.
Question 63. Which command is used to list all existing images in Glance? A) openstack image list B) glance images show C) openstack images show D) glance image list Answer: A Explanation: openstack image list displays all images stored in Glance. Question 64. Which storage backend is typically used for persistent block storage in OpenStack? A) Ceph B) NFS C) GlusterFS D) Cinder Answer: D Explanation: Cinder is the block storage service that can use backends like Ceph, LVM, or NFS for persistent storage. Question 65. Which command is used to associate a floating IP to a server? A) openstack floating ip associate B) openstack ip assign floating C) openstack ip float add D) openstack floating ip assign Answer: A Explanation: openstack floating ip associate links a floating IP to a specific server instance for external access. Question 66. Which OpenStack service handles the creation and management of network segments and routers? A) Neutron