rhcsa rhce exam questions Practice Exam 2025: Latest Questions

You are preparing a control node to manage a new set of Linux servers via Ansible. Company policy requires strict host key checking, and you must avoid interactive prompts during playbook runs. Which approach best meets this requirement?

A playbook must install the httpd package and ensure the service is enabled and started. Which module is the best practice choice to manage the service state?

You want a task to run only on hosts that are members of the 'db' group, without duplicating the play for other hosts. Which statement is the correct, idiomatic way to do this inside a play targeting 'all'?

You need to reuse a common set of tasks (installing a package list and deploying a templated config) across multiple playbooks, and you want variables and defaults to be organized predictably. What is the recommended solution?

A playbook run fails with: "ERROR! Attempting to decrypt but no vault secrets found". The playbook contains vars_files pointing to an encrypted file. Which action correctly resolves the issue without editing the playbook?

You are tasked with installing a role from Ansible Galaxy for use in your project. The environment has no internet access from the control node at execution time. What is the best practice approach to ensure consistent role installation?

You have a play that configures a web service. If the configuration file changes, you must restart the service; otherwise, you must not restart it. Which design best satisfies idempotency and minimizes disruption?

A role should allow operators to override the listening port of a service, but the role must have a safe default port. Where should the role author define the default so it can be overridden with higher precedence variables (for example group_vars/host_vars)?

You maintain a project with site.yml that applies several roles. You must run only the database hardening steps during a maintenance window without executing the rest of the configuration. The hardening tasks are inside the db role. What is the most appropriate way to enable selective execution?

A team wants to commit an encrypted file containing multiple secrets, but different environments (dev/prod) must use different vault passwords without modifying the playbook. What is the best practice implementation?

You are creating an inventory that must assign different SSH users per host. Which inventory approach is most appropriate and maintainable?

A playbook should skip configuring a service when the host is a container and proceed otherwise. Which fact is most appropriate to use in a conditional?

You need to run a role only on hosts in group 'db', but the role is included from a play that targets 'all'. What is the recommended way to apply the role conditionally?

Your playbook uses a template to render /etc/myapp.conf. When the template changes, the myapp service must restart, but it must not restart on every run. Which solution best meets this requirement?

A play fails with an "UNREACHABLE" error due to an SSH host key mismatch after a server was rebuilt. You want a playbook-based remediation that updates the controller's known_hosts entry safely for affected hosts. What is the best approach?

You store a vaulted variable file containing database credentials. A teammate reports that Ansible is prompting for the vault password multiple times during a single run. Which configuration best avoids repeated prompts while keeping secrets protected?

You want to share a reusable role internally. The role has role dependencies and requires specific variables. Which Ansible Galaxy metadata element is primarily used to declare role dependencies?

A role sets a default variable myapp_port: 8080. A consuming playbook sets myapp_port: 9090 in group_vars/all.yml, but the role still uses 8080. Which is the most likely cause?

You need to run a task only once to generate a cluster join token and then distribute it to all other hosts in the play. Which design is most correct and idiomatic in Ansible?

A playbook includes a role from a collection (e.g., vendor.platform.myrole). On a fresh control node, the run fails because the collection is missing. You must ensure consistent, repeatable installation of required collections for the project. What is the best solution?

You are troubleshooting an Ansible run that intermittently fails during fact gathering on a subset of managed nodes. The nodes are reachable over SSH, but you suspect the remote temporary directory is mounted with restrictive options and causes module execution failures. Which configuration change is the best practice to make module execution more reliable on those hosts without changing playbooks?

A playbook includes tasks that should run only once, on the control node, to generate a report file (CSV) that aggregates data collected from all managed nodes. The report generation should not run on every host. Which approach best matches this requirement?

You need to create a role that manages a service configuration file. The configuration should be replaced only when its content changes, and the service must restart only when the file changes. Which role pattern is the recommended solution?

Your organization requires that a vaulted secret (an API token) be stored in a single encrypted file, but different environments (dev, qa, prod) must use different tokens without modifying the role code. What is the most maintainable approach using Ansible Vault?

You are building an automation stack where multiple playbooks must share a consistent set of community roles and collections. The environment is disconnected (no internet access) and you must ensure repeatable installs across control nodes. Which design best satisfies these constraints?