โ† All COA Flashcard Decks

Identity, Image, and Compute Management Flashcards

7 cards from real COA practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Identity, Image, and Compute Management flashcards as text
  1. Which Keystone token format is the default in OpenStack since the Ocata release and stores token data locally on the server using symmetric encryption?

    Answer: Fernet

    Fernet tokens are the default since Ocata; they are compact, encrypted with a rotating key, and require no persistence in the database.

  2. An OpenStack administrator needs to allow a specific project to use GPU resources in a particular server group. Which Keystone construct should be used to grant this targeted access?

    Answer: Role assignment on the project

    Role assignments on a project grant users or groups specific permissions scoped to that project, allowing fine-grained access control.

  3. A developer wants their application to authenticate against Keystone without using the user's password. Which Keystone feature should they use?

    Answer: Application credentials

    Application credentials allow applications to authenticate as a specific user without storing the user's password, with optional role and expiry restrictions.

  4. When running 'openstack image create', which disk format should be specified for an image that will be used with KVM-based hypervisors and supports copy-on-write functionality?

    Answer: qcow2

    qcow2 (QEMU Copy-On-Write v2) is the preferred format for KVM and supports snapshots, compression, and copy-on-write natively.

  5. What Glance image property must be set to 'bare' when the image file contains only the disk data with no container metadata?

    Answer: container_format

    The container_format property describes the file format of the container; 'bare' indicates no container or metadata envelope wraps the disk image.

  6. An administrator wants to share a private Glance image with a specific project without making it public. Which command achieves this?

    Answer: openstack image add project

    'openstack image add project' creates a member relationship between a shared image and a specific project, allowing that project to use it.

  7. Which Glance image status indicates the image data has been uploaded successfully and the image is ready for use by Nova to boot instances?

    Answer: active

    The 'active' status means Glance has fully received and stored the image data and the image is available for use.