rhcsa rhce exam questions Intermediate Practice Exam: Medium Difficulty 2025

You are troubleshooting an existing automation project. A playbook runs successfully, but you suspect it is using a different inventory source than intended because host group membership looks wrong. Which approach best verifies what inventory Ansible is actually using and what hosts are matched before running the playbook?

You must run a playbook against a subset of hosts whose names match web01-web20 in the inventory. You want to ensure only those hosts are targeted, even if the web group contains additional hosts. Which command-line option is the best fit?

Your control node can SSH to managed nodes using an admin account, but the exam environment requires privilege escalation for system changes. Some hosts require sudo with a password, others allow passwordless sudo. What is the best practice to handle this variability while keeping playbooks reusable?

You have a playbook that installs packages on RHEL managed nodes, but runs fail intermittently due to temporary repository issues. You need to make the installation step more resilient without masking persistent failures. Which task pattern is most appropriate?

A playbook configures a service and then updates a configuration file using a template. The service should restart only when the template changes. Which solution best achieves this behavior?

You want a playbook to set a different NTP server for hosts in the 'dev' and 'prod' groups while using the same role and tasks. Where should you define these values to follow best practices and keep the role reusable?

You are converting a monolithic playbook into a role named webserver. You need the role to install packages, deploy a template, and ensure the service is enabled and started. What is the most appropriate role structure to support idempotence and handler-based restarts?

A role should support both default behavior and site-specific overrides. The role currently defines variables in vars/main.yml, but users complain they cannot override them from inventory. What change best aligns with Ansible variable precedence best practices?

You must store database credentials securely for use by a role. The credentials should not appear in plaintext in the repository, but the playbook must still be able to decrypt them during execution. Which workflow is most appropriate?

Your team standardized on using Ansible Galaxy roles. You need to consume an internal role hosted in a Git repository at a specific tagged release and make installs repeatable across environments. What is the best solution?