An organization's security policy requires rotating the vault password for `router_secrets.yml` every 90 days. The current password is in `/etc/ansible/old_pass`, and the new password is in `/etc/ansible/new_pass`. Which command rotates the password without decrypting the file to disk?

`ansible-vault rekey --vault-password-file /etc/ansible/old_pass --new-vault-password-file /etc/ansible/new_pass router_secrets.yml`

`ansible-vault create --vault-password-file /etc/ansible/new_pass router_secrets.yml`

`ansible-vault decrypt --vault-password-file /etc/ansible/old_pass router_secrets.yml && ansible-vault encrypt --vault-password-file /etc/ansible/new_pass router_secrets.yml`

`ansible-vault edit --vault-password-file /etc/ansible/old_pass router_secrets.yml`

A configuration file `old_config.txt` was encrypted for a temporary migration project. The project is complete, and the file must be returned to plaintext for long-term archival. Which command permanently decrypts the file?

`ansible-vault decrypt old_config.txt`

`ansible-vault edit old_config.txt`

`ansible-vault view old_config.txt`

`ansible-vault rekey old_config.txt`

Which command changes the password used to encrypt an existing vault file?

ansible-vault encrypt secrets.yml

ansible-vault rekey secrets.yml

ansible-vault decrypt secrets.yml

Which command displays the contents of an encrypted file without permanently decrypting it?

ansible-vault decrypt secrets.yml

A network engineer needs to update the password for a Junos device stored in the encrypted file `device_passwords.yml`. The engineer wants to make the change directly in the encrypted file without creating a plaintext copy on disk. Which command should be used?

`ansible-vault edit device_passwords.yml`

`ansible-vault decrypt device_passwords.yml` then edit and re-encrypt

`ansible-vault rekey device_passwords.yml`

`ansible-vault view device_passwords.yml`

Juniper NetworksCertified Specialist, Automation and DevOps (JNCIS-DevOps)

Domain 3Objective 3

Vault JN0-423 Practice Questions (Page 1)

Part of the Ansible domain, which makes up ~23% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

Questions 1–5

1application · medium
An organization's security policy requires rotating the vault password for `router_secrets.yml` every 90 days. The current password is in `/etc/ansible/old_pass`, and the new password is in `/etc/ansible/new_pass`. Which command rotates the password without decrypting the file to disk?
Select an answer first
2application · easy
A configuration file `old_config.txt` was encrypted for a temporary migration project. The project is complete, and the file must be returned to plaintext for long-term archival. Which command permanently decrypts the file?
Select an answer first
3foundation · easy
Which command changes the password used to encrypt an existing vault file?
Select an answer first
4foundation · easy
Which command displays the contents of an encrypted file without permanently decrypting it?
Select an answer first
5application · medium
A network engineer needs to update the password for a Junos device stored in the encrypted file `device_passwords.yml`. The engineer wants to make the change directly in the encrypted file without creating a plaintext copy on disk. Which command should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-423

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-423” is a trademark of its owner, used for identification only.