COA Data Management & Integration 3

Question 1

An administrator wants to encrypt a Cinder volume at rest. What must be configured first?

Accepted Answer

A Barbican endpoint and a volume type with encryption metadata

Answer

Cinder volume encryption requires Barbican for key management and a volume type configured with the desired encryption provider and cipher.

Question 2

When migrating a Cinder volume from one backend to another using `cinder migrate`, which condition must be met?

Accepted Answer

The volume must be in 'available' status (not attached)

Answer

Cinder volume migration requires the volume to be in 'available' (detached) state so the data can be safely moved to the new backend.

Question 3

Which Swift mechanism enables automatic expiration and deletion of objects after a specified time?

Accepted Answer

Setting X-Delete-At or X-Delete-After headers processed by the object expirer daemon

Answer

Swift's object expirer daemon processes objects tagged with `X-Delete-At` (Unix timestamp) or `X-Delete-After` (seconds) headers, automatically deleting them at the specified time.

Question 4

In a Glance configuration using multiple stores, what does the `default_store` directive specify?

Accepted Answer

The store used for image uploads when no store is explicitly requested

Answer

`default_store` in Glance's configuration specifies which backend (e.g., rbd, file, swift) is used when an image is uploaded without an explicit store designation.

Question 5

A developer needs to give a time-limited URL for a private Swift object without exposing credentials. Which feature should they use?

Accepted Answer

TempURL

Answer

TempURL generates a time-limited, cryptographically signed URL that provides temporary access to a private Swift object without exposing account credentials.

(COA) Certified OpenStack Administrator Exam Practice Test

(COA) Certified OpenStack Administrator Exam Practice Test

COA Data Management & Integration 3