EX210 Red Hat Certified Specialist in Cloud Infrastructure exam Practice Questions
Prepare for EX210 with more than an answer.
- Exam fee
- $500 USD
- Time limit
- 240 minutes
- Passing score
- 210 out of 300 (70%) (scale 0-300)
- Level
- Specialist
- Valid for
- 3 years
Domains covered on the exam 10
- Manage the Red Hat OpenStack Platform Control Plane10%
- Manage Infrastructure Security5%
- Manage User Security15%
- Manage Application Deployment Resources10%
- Manage Storage in Red Hat OpenStack Platform15%
- Manage Networking8%
- Manage Compute Node Operations12%
- Monitor Operations5%
- Automate Cloud Application Deployment12%
- Troubleshoot Operations8%
- 1
A user reports that they are unable to create a new instance because they have exceeded their project's quota, even though they deleted several instances yesterday. You suspect that the deleted instances are still in a
SOFT_DELETEDstate.Which configuration parameter in
nova.confcontrols how long deleted instances remain in this state before being permanently removed?Show answer details
Correct answer: D
The
reclaim_instance_intervaloption innova.confspecifies the number of seconds to wait before permanently removing an instance that has been soft-deleted. Until this interval passes, the instance resources (and quota usage) may not be fully released. - 2
You are deploying a new OpenStack environment using Red Hat OpenStack Platform Director. You want to ensure that the Identity service (Keystone) rotates its Fernet tokens automatically to maintain security.
What is the recommended method to manage Fernet key rotation in a production TripleO deployment?
Show answer details
Correct answer: C
In a TripleO/Director managed environment, manual cron jobs on nodes are discouraged as they are not persistent across updates. The correct approach is to define the
KeystoneCronJobFernetRotateparameter in the TripleO Heat templates. This ensures the cron job is correctly configured and maintained by the deployment logic across all controller nodes. - 3
Which TWO of the following statements regarding the creation of a Red Hat OpenStack Platform shared provider network are true? (Select TWO)
Show answer details
Correct answer: A, C
To make a provider network available to all tenants (projects) for attaching instances, the
--shareflag is required during creation. Without this, the network is restricted to the admin project.Provider networks map to physical network infrastructure (like VLANs) and are shared across tenants. Only administrators have the privilege to define these physical mappings and mark the network as shared.
- 4
You are the Senior Cloud Architect for a financial institution running Red Hat OpenStack Platform 16.1. A recent security audit requires strict file integrity monitoring on all control plane nodes. You have configured AIDE (Advanced Intrusion Detection Environment) to monitor the
/etcdirectory. After applying a scheduled configuration change tonova.confvia Ansible, the nightly AIDE report flags a violation.Which sequence of commands must be executed to acknowledge this legitimate change and prevent future false positives?
Show answer details
Correct answer: B
To accept a legitimate change, the AIDE database must be updated. The
aide --updatecommand generates a new database file (aide.db.new.gz) that incorporates the current state of the filesystem. This new database must then replace the existing baseline database (aide.db.gz) to prevent the change from being flagged in future checks. - 5
A cloud administrator is managing a Red Hat OpenStack Platform environment using the OVN (Open Virtual Network) mechanism driver. Tenants are reporting intermittent connectivity issues between instances on different compute nodes. The administrator decides to use
ovn-traceto debug the logical packet flow.Which piece of information is strictly required to initiate a trace for a packet originating from a specific VM instance?
Show answer details
Correct answer: A
The
ovn-tracecommand simulates packet processing within the OVN logical network. It requires the name of the logical datapath (usually the logical switch name) and the flow parameters (such as source MAC, destination MAC, IP addresses) to trace the pipeline execution. While port IDs can be helpful, the datapath context is essential. - 6
You are configuring a new flavor in Nova to support high-performance database workloads that require dedicated physical CPU cores to avoid context switching overhead. The compute nodes are configured with CPU pinning enabled.
Which specific key-value pair must be added to the flavor's extra specs to enforce this requirement?
Show answer details
Correct answer: B
The
hw:cpu_policy=dedicatedextra spec tells the Nova scheduler and compute driver to pin the instance's vCPUs to specific physical CPU cores (pCPUs) on the host. This ensures exclusive access to those cores, eliminating contention and reducing latency for performance-sensitive workloads.
