A team stores Junos device credentials in a playbook variable file. The team wants to commit the playbook to a shared Git repository while keeping the credentials secret. Which approach should be used?

Remove the credentials from the playbook and hardcode them in the inventory

Store the credentials in plaintext and restrict Git repository access

Encrypt the variable file with `ansible-vault encrypt` and provide the vault password at runtime

Use `ansible-vault view` in the playbook to read the credentials

A network engineer needs to quickly check whether the username in the encrypted file `device_login.yml` is `admin` without making any changes to the file. Which command should be used?

`ansible-vault edit device_login.yml`

`ansible-vault view device_login.yml`

`ansible-vault decrypt device_login.yml`

`ansible-vault rekey device_login.yml`

What is a common reason to use a vault password file instead of typing the password interactively?

To allow playbooks to run in automated environments without human interaction.

To encrypt the password file with a stronger algorithm.

To avoid having to remember the vault password.

To make the vault password visible in the playbook output.

After using ansible-vault view, what is the state of the encrypted file on disk?

The file is deleted after viewing.

The file is re-encrypted with a new password.

Juniper NetworksCertified Specialist, Automation and DevOps (JNCIS-DevOps)

Domain 3Objective 3

Vault JN0-423 Practice Questions (Page 3)

Part of the Ansible domain, which makes up ~23% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

Questions 11–15

11application · medium
A team stores Junos device credentials in a playbook variable file. The team wants to commit the playbook to a shared Git repository while keeping the credentials secret. Which approach should be used?
Select an answer first
12application · easy
A network engineer needs to quickly check whether the username in the encrypted file `device_login.yml` is `admin` without making any changes to the file. Which command should be used?
Select an answer first
13foundation · easy
What is a common reason to use a vault password file instead of typing the password interactively?
Select an answer first
14foundation · easy
Which option allows you to specify a file that contains the vault password so it can be read automatically during playbook execution?
Select an answer first
15foundation · easy
After using ansible-vault view, what is the state of the encrypted file on disk?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-423

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-423” is a trademark of its owner, used for identification only.