Covers Cypher, archives, tasks, and script and file templates, variable contexts, authentication, the CLI and API, option lists and request scripts, and multi-tier application blueprints.
12 free sample questions150 in the full practice test
Demonstrate knowledge of Cypher Archives Tasks Workflows Script templates File templates · Cypher secrets store
A DevOps engineer needs to pass a sensitive database password to a Bash script task during the Post-Provision phase of a workflow in HPE Morpheus. The password must not be visible in the Morpheus execution logs or stored in plain text on the appliance. Which approach is the most secure and adheres to best practices?
Answer and explanation
Correct answer: A
Using the variable interpolation allows Morpheus to securely retrieve the secret from the Cypher key/value store at execution time and inject it into the script without exposing it in the UI or persisting it to disk in plain text. Cypher is specifically designed for secure credential handling in automation.
Question 2
IntermediateMultiple answers
Demonstrate knowledge of Cypher Archives Tasks Workflows Script templates File templates · Cypher mounts and paths
When utilizing the HPE Morpheus Cypher service for secret management, which TWO of the following mount paths provide specialized built-in behaviors, such as automatic generation of values if they do not already exist? (Select TWO)
Answer and explanation
Correct answers: A, C
The password/ mount in Cypher is specialized. If a key is requested from this path that does not exist, Cypher will automatically generate a secure random password, store it, and return it. The uuid/ mount similarly auto-generates a UUID.
The uuid/ mount automatically generates a Universally Unique Identifier (UUID) if a key is requested that does not already exist, making it a specialized path.
You are configuring a Shell Task to download a proprietary binary from a Morpheus Archive bucket to a Linux VM during provisioning. The bucket is set to private. How can the task securely download the file without embedding static API credentials in the script?
Answer and explanation
Correct answer: B
The variable interpolation in Morpheus automatically generates a secure, temporary download link for files stored in Archives, allowing scripts (like wget or curl) to pull the file without needing embedded credentials.
A financial enterprise is modernizing a legacy monolithic application using HPE Morpheus. The current situation involves a 5GB proprietary installer binary that changes frequently and needs to be distributed to newly provisioned Linux VMs across multiple hybrid cloud environments.
Security constraints dictate that the binary cannot be hosted on public internet servers, and provisioning scripts cannot contain hardcoded credentials to access internal file shares.
Which of the following architectures represents the OPTIMAL use of Morpheus built-in capabilities to solve this distribution challenge?
Answer and explanation
Correct answer: C
This is the optimal solution. Morpheus Archives act as a secure, internal artifact repository. The variable generates a secure, temporary link at execution time, allowing a standard Shell Task to pull the large binary without hardcoding credentials.
flowchart LR
A[Morpheus Archives] -->|Generates Secure URL| B(Variable Interpolation)
B --> C[Shell Task Script]
C -->|curl / wget| D[Target Linux VM]
When configuring a Python Task in Morpheus, you have the option to set the 'Execution Target' to either 'Local' or 'Remote'. If you select 'Local' for a task attached to an Instance provisioning workflow, where does the script actually execute?
Answer and explanation
Correct answer: B
Setting the Execution Target to 'Local' means the task executes on the Morpheus appliance (or a Morpheus worker node) rather than on the remote workload being provisioned. This is useful for API calls, IPAM integrations, or DNS updates.
True or False: When executing an Ansible Playbook task in Morpheus against a remote instance, the Ansible control node software must be pre-installed on the target workload being provisioned.
Answer and explanation
Correct answer: B
False. Ansible is agentless. When Morpheus executes an Ansible playbook against a remote instance, the Ansible control node software runs on the Morpheus appliance (or designated Ansible integration server). The target instance only requires an SSH connection and Python (or WinRM for Windows), not the Ansible software itself.
Register free for 6 more questions
Or unlock all 150 HPE0-G05 questions with explanations, timed mode and flashcards.
