COA Architecture and Services 3

Question 1

What does the OpenStack Heat service use to describe infrastructure as code?

Accepted Answer

HOT (Heat Orchestration Templates)

Answer

Heat uses its own Heat Orchestration Template (HOT) format in YAML to describe cloud infrastructure as code.

Question 2

Which component handles the OpenStack Identity service's token validation in a Fernet token setup?

Accepted Answer

Symmetric keys distributed across Keystone nodes

Answer

Fernet tokens are validated using symmetric cryptographic keys that are distributed and rotated across all Keystone nodes without requiring a token database.

Question 3

In OpenStack Neutron, what is an 'external network' used for?

Accepted Answer

Providing floating IPs and routing to the internet

Answer

External networks in Neutron represent the upstream network (internet-facing) from which floating IPs are allocated for external connectivity.

Question 4

What is the function of the Glance registry service?

Accepted Answer

Provides a metadata catalog for images (deprecated in newer releases)

Answer

The Glance registry was a separate service for storing image metadata, though it was deprecated and its functionality merged into glance-api in newer releases.

Question 5

Which OpenStack service provides key management and secrets storage?

Accepted Answer

Barbican

Answer

Barbican is the OpenStack Key Manager service that securely stores and manages secrets, keys, and certificates.

(COA) Certified OpenStack Administrator Exam Practice Test

(COA) Certified OpenStack Administrator Exam Practice Test

COA Architecture and Services 3