VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Red Hat Certified Specialist in Cloud Infrastructure exam Free Sample Questions

Description

Covers Red Hat OpenStack control plane and security management, user and project security, image and instance deployment, Ceph storage, Open Virtual Networking, and compute node operations.

12 free sample questions162 in the full practice test

Try simulator

EX210 Sample Questions

  1. Question 1

    Intermediate

    Manage Infrastructure Security · Manage file-based component security with AIDE

    You are the Senior Cloud Architect for a financial institution running Red Hat OpenStack Platform 16.1. A recent security audit requires strict file integrity monitoring on all control plane nodes. You have configured AIDE (Advanced Intrusion Detection Environment) to monitor the /etc directory. After applying a scheduled configuration change to nova.conf via Ansible, the nightly AIDE report flags a violation.

    Which sequence of commands must be executed to acknowledge this legitimate change and prevent future false positives?

    Answer and explanation

    Correct answer: B

    To accept a legitimate change, the AIDE database must be updated. The aide --update command generates a new database file (aide.db.new.gz) that incorporates the current state of the filesystem. This new database must then replace the existing baseline database (aide.db.gz) to prevent the change from being flagged in future checks.

  2. Question 2

    Advanced

    Manage Networking · Configure Open Virtual Networking (OVN) services

    A cloud administrator is managing a Red Hat OpenStack Platform environment using the OVN (Open Virtual Network) mechanism driver. Tenants are reporting intermittent connectivity issues between instances on different compute nodes. The administrator decides to use ovn-trace to debug the logical packet flow.

    Which piece of information is strictly required to initiate a trace for a packet originating from a specific VM instance?

    Answer and explanation

    Correct answer: A

    The ovn-trace command simulates packet processing within the OVN logical network. It requires the name of the logical datapath (usually the logical switch name) and the flow parameters (such as source MAC, destination MAC, IP addresses) to trace the pipeline execution. While port IDs can be helpful, the datapath context is essential.

  3. Question 3

    Intermediate

    Manage Application Deployment Resources · Create images and flavors

    You are configuring a new flavor in Nova to support high-performance database workloads that require dedicated physical CPU cores to avoid context switching overhead. The compute nodes are configured with CPU pinning enabled.

    Which specific key-value pair must be added to the flavor's extra specs to enforce this requirement?

    Answer and explanation

    Correct answer: B

    The hw:cpu_policy=dedicated extra spec tells the Nova scheduler and compute driver to pin the instance's vCPUs to specific physical CPU cores (pCPUs) on the host. This ensures exclusive access to those cores, eliminating contention and reducing latency for performance-sensitive workloads.

  4. Question 4

    Intermediate

    Manage the Red Hat OpenStack Platform Control Plane · Start and stop an overcloud

    During a scheduled maintenance window, you need to stop the OpenStack control plane services running on a specific controller node (controller-0) to replace a faulty memory module. The environment uses Red Hat OpenStack Platform 16.1 with containerized services managed by Pacemaker.

    Which command sequence correctly puts the node into standby mode to safely migrate resources away before shutdown?

    Answer and explanation

    Correct answer: C

    The pcs node standby controller-0 command tells the Pacemaker cluster manager to move all active resources off the specified node to other available nodes in the cluster. This is the correct, safe way to drain a node before maintenance. Stopping the cluster service directly might cause unexpected failover behavior or resource fencing.

  5. Question 5

    Advanced

    Manage Storage in Red Hat OpenStack Platform · Manage a Ceph storage cluster

    You are managing a Red Hat Ceph Storage cluster integrated with OpenStack. You observe that one OSD (osd.5) has failed physically and cannot be recovered. You have replaced the disk and need to re-add it to the cluster with the same ID to maintain the CRUSH map structure.

    Which procedure correctly handles the removal of the old OSD from the CRUSH map and authentication keys before adding the new one?

    Answer and explanation

    Correct answer: D

    This sequence completely cleans up the old OSD traces: 1) Marks it 'out' to trigger rebalancing (if not already done). 2) Removes it from the CRUSH map so data isn't routed there. 3) Deletes its authentication key. 4) Removes the OSD ID itself. This clean slate allows the new disk to be provisioned, potentially reusing ID 5 if specified during creation.

  6. Question 6

    Intermediate

    Manage User Security · Manage an integrated IdM back-end configuration

    A cloud architect is designing a Keystone integration with an external corporate LDAP directory (Red Hat IdM). The requirement is that users from the 'Engineering' group in LDAP should be mapped to the 'Member' role in the 'Engineering' project in OpenStack, while users from 'Finance' should only access the 'Finance' project.

    Which Keystone configuration concept is best suited to implement this granular, domain-specific access control?

    Answer and explanation

    Correct answer: A

    By enabling domain_specific_drivers_enabled and configuring domain_config_dir, you can create separate configuration files (e.g., keystone.Engineering.conf) for each domain. This allows you to define specific LDAP filters, user trees, and group mappings for each domain independently, ensuring that the Engineering domain only queries and authenticates users relevant to that department.

Register free for 6 more questions

Or unlock all 162 EX210 questions with explanations, timed mode and flashcards.

Related practice tests

All Red Hat practice exams