Ccna certification Practice Tests

388

 

Appendix 

■

  Answers to Practice Test Questions

 86.  A.  Once you have completed a Cookbook for Chef, you will upload the Cookbook to 

the Bookshelf located on the Chef Server. This will allow the Chef Server to execute the 

configuration management contained within the Cookbook. The Chef Workstation is 

where you manage the Chef Server. The Chef Node is the computer that is controlled by 

the Chef Server. The Chef Node has the Chef-Client installed, which calls back to the 

Chef Server for configuration management instructions.

 87.  A.  Ansible Tower is a paid version of Ansible supported by Red Hat that adds central 

management. Ansible Tower also allows for role-based access control (RBAC) for the 

execution of Playbooks. The addition of RBAC adds greater security to Ansible while 

allowing users a specific role to administer their responsibilities inside of Ansible. All of 

the other options are incorrect.

 88.  A.   The Ansible configuration management utility allows for easy configuration of Cisco 

network devices because it has many modules dedicated to Cisco IOS. Ansible also does 

not require the installation of an agent, which Puppet and Chef require. Python can be 

used for configuration management, but it will not allow for periodic checks to make sure 

that the configuration does not drift.

 89.  C.  The Knife utility is a command-line interface (CLI) that allows for the management 

of Chef. The storage of the Bookshelf is contained on the Chef Server. The configuration 

of Chef is also contained on the Chef Server. The Client-side agent has two parts: Ohai, 

which checks the current system state of the Chef Node, and the Chef Agent, which talks 

directly to the Chef Server for execution tasks.

 90.  C.  Configuration management uses Infrastructure as Code (IaC) to prevent drift with 

the applied theory of Idempotence. Idempotence states that only required changes will be 

applied to servers that fall outside of the desired system state. Infrastructure as a Service 

(IaaS) is a cloud model that defines components that can be purchased for a period, such 

as virtual router, switches, and virtual machines (VMs), just to name a few. Configuration 

management can install the Network Time Protocol (NTP) so time does not drift, but 

NTP will not prevent configuration drift. Configuration management software does 

not always require per-host licensing. Most configuration management utilities offer a 

community edition that is free; if you want enterprise features, you can then purchase 

licensing from the parent company.

 91.  C.  Ansible is the easiest configuration management utility to set up as well as use. Chef 

and Puppet are a bit more involved to set up because they require clients to be installed on 

the hosts being managed. Cisco DNA Center is not a configuration management utility 

outside of Cisco devices; therefore, option D is an invalid answer.

 92.  C.  Ansible is installed with a number of modules compiled already. However, if you want 

to make custom modules, they must be created in JSON format. All of the other options 

are incorrect.

 93.  D.  JavaScript Object Notation (JSON) always starts with a curly bracket, sometimes 

called a brace. If the file starts with three dashes, the file is most likely YAML. A square 

bracket is found inside of JSON files when more than one key-value pair exists. A double 

quote is often found at the beginning of each line in a comma-separated values (CSV) file.

---

Chapter 7: Practice Exam 1