OpenStack Vskills 5 — Questions and Answers
Question 1: Which OpenStack service is used to manage TLS certificates and secrets?
- Keystone
- Octavia
- Barbican (Correct answer)
- Castellan
Correct answer: Barbican
Barbican is the OpenStack Key Manager service, providing secure storage and management of secrets, certificates, and encryption keys.
Question 2: In Neutron's ML2 plugin architecture, what is the role of a 'mechanism driver'?
- Authenticating tenant API requests
- Binding logical network resources to physical network infrastructure (Correct answer)
- Routing traffic between tenant routers
- Enforcing security group rules at the hypervisor
Correct answer: Binding logical network resources to physical network infrastructure
Mechanism drivers in ML2 translate Neutron's logical network model into actual network configurations on physical or virtual infrastructure.
Question 3: What is the function of OpenStack Octavia?
- Bare-metal orchestration
- Load Balancing as a Service (LBaaS) (Correct answer)
- Container lifecycle management
- DNS record management
Correct answer: Load Balancing as a Service (LBaaS)
Octavia is OpenStack's Load Balancing as a Service (LBaaS) implementation, managing load balancers via dedicated Amphora instances.
Question 4: Which OpenStack project provides a container orchestration engine service?
- Zun
- Magnum (Correct answer)
- Murano
- Solum
Correct answer: Magnum
Magnum is the OpenStack Container Infrastructure Management Service that provisions Kubernetes, Docker Swarm, and other COE clusters.
Question 5: What happens when the Nova scheduler cannot find a valid host for an instance?
- The instance is placed in ERROR state (Correct answer)
- The instance is queued until a host becomes available
- Nova automatically provisions a new compute node
- The request is rejected and logged to Swift
Correct answer: The instance is placed in ERROR state
When no suitable compute host is found after applying all filters, Nova transitions the instance to an ERROR state with a 'No valid host' message.
Question 6: In OpenStack's RBAC model, what does a 'role assignment' bind together?
- A user, a role, and a project/domain scope (Correct answer)
- A policy rule and an API endpoint
- A service account and a Keystone token
- A tenant network and a security group
Correct answer: A user, a role, and a project/domain scope
A role assignment in Keystone links a user (or group) to a role within the scope of a specific project or domain.
Question 7: Which tool is commonly used to deploy OpenStack in a production environment using an opinionated automation framework?
- DevStack
- Packstack
- OpenStack-Ansible (Correct answer)
- MicroStack
Correct answer: OpenStack-Ansible
OpenStack-Ansible (OSA) is a production-grade deployment framework using Ansible playbooks and roles for full OpenStack installations.
OpenStack Vskills 5
Which OpenStack service is used to manage TLS certificates and secrets?