Identity, Image, and Compute Management Flashcards
7 cards from real COA practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Identity, Image, and Compute Management flashcards as text
An administrator needs to temporarily prevent new instances from being scheduled on a compute node without terminating running instances. Which Nova command should they use?
Answer: openstack compute service set --disable nova-compute
'openstack compute service set --disable' stops the scheduler from placing new instances on that host while leaving existing ones running.
Which Keystone policy file entry format uses Oslo policy rules and controls whether a specific API action is allowed for a given role?
Answer: YAML key-value pairs mapping API rules to role conditions
Keystone's policy.yaml (or policy.json) uses Oslo policy syntax with rules like 'rule:admin_required' to gate API operations by role.
A Glance image upload fails with an error indicating the image exceeds the allowed size. Which configuration parameter in glance-api.conf controls maximum image size?
Answer: image_size_cap
The 'image_size_cap' parameter in glance-api.conf sets the maximum size in bytes for any single image upload.
When performing a live migration of a Nova instance between compute hosts, which condition will cause the migration to FAIL if not met?
Answer: The instance must be using a shared storage backend accessible by both hosts
Live migration without shared storage requires block migration, which has limitations; standard live migration requires shared storage (NFS, Ceph) accessible by both hosts.
A Keystone domain administrator needs to create users only within their domain, not in other domains. Which built-in role should be assigned to them at the domain scope?
Answer: admin
Assigning the 'admin' role scoped to a specific domain gives that user administrative rights only within that domain, not globally.
An administrator wants to create a Nova instance snapshot that captures only the root disk state (not memory) of a running instance. Which command does this?
Answer: openstack server image create --name snap
'openstack server image create' creates a Glance image from the running instance's root disk, suitable for launching new instances later.
In OpenStack, which service is responsible for tracking resource inventory (CPUs, RAM, disk) on compute nodes and used by Nova's scheduler for placement decisions?
Answer: Placement API
The Placement API (originally part of Nova, now a standalone service) maintains resource provider inventories and allocations used by the scheduler.