COA Identity, Image, and Compute Management 2

Question 1

Which Keystone token format is the default in OpenStack since the Ocata release and stores token data locally on the server using symmetric encryption?

Accepted Answer

Fernet

Answer

Fernet tokens are the default since Ocata; they are compact, encrypted with a rotating key, and require no persistence in the database.

Question 2

An OpenStack administrator needs to allow a specific project to use GPU resources in a particular server group. Which Keystone construct should be used to grant this targeted access?

Accepted Answer

Role assignment on the project

Answer

Role assignments on a project grant users or groups specific permissions scoped to that project, allowing fine-grained access control.

Question 3

A developer wants their application to authenticate against Keystone without using the user's password. Which Keystone feature should they use?

Accepted Answer

Application credentials

Answer

Application credentials allow applications to authenticate as a specific user without storing the user's password, with optional role and expiry restrictions.

Question 4

When running 'openstack image create', which disk format should be specified for an image that will be used with KVM-based hypervisors and supports copy-on-write functionality?

Accepted Answer

qcow2

Answer

qcow2 (QEMU Copy-On-Write v2) is the preferred format for KVM and supports snapshots, compression, and copy-on-write natively.

Question 5

What Glance image property must be set to 'bare' when the image file contains only the disk data with no container metadata?

Accepted Answer

container_format

Answer

The container_format property describes the file format of the container; 'bare' indicates no container or metadata envelope wraps the disk image.

(COA) Certified OpenStack Administrator Exam Practice Test

(COA) Certified OpenStack Administrator Exam Practice Test

COA Identity, Image, and Compute Management 2