What is the primary purpose of Ansible Vault?

To encrypt sensitive data, such as passwords and API keys, so it can be stored safely in playbooks or variable files.

To authenticate users who run Ansible playbooks.

To compress playbook files so they transfer faster over the network.

To provide a secure method for transferring playbooks to remote hosts.

When you run ansible-vault create, what does Ansible prompt you for before opening the editor?

A password to encrypt the file.

The name of the file to create.

The encryption algorithm to use.

A junior engineer needs to inspect the contents of an encrypted file `junos_creds.yml` to verify a username, but must not permanently decrypt the file. The engineer has the vault password. Which command should be used?

`ansible-vault view junos_creds.yml`

`ansible-vault edit junos_creds.yml`

`ansible-vault decrypt junos_creds.yml`

What information does ansible-vault rekey require from you?

The current password and the new password.

The file name and the new password.

The encryption algorithm and the new password.

A team wants to store Junos device credentials in a playbook that is shared via a public Git repository. The credentials must not be visible to anyone who clones the repository. Which approach should be used?

Store the credentials in a separate plaintext file outside the repository

Encrypt the credentials with `ansible-vault encrypt` and provide the vault password at runtime

Use `ansible-vault view` in the playbook to read the credentials

Store the credentials in plaintext and rely on Git's private repository setting

Juniper NetworksCertified Specialist, Automation and DevOps (JNCIS-DevOps)

Domain 3Objective 3

Vault JN0-423 Practice Questions (Page 4)

Part of the Ansible domain, which makes up ~23% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

Questions 16–20

16foundation · easy
What is the primary purpose of Ansible Vault?
Select an answer first
17foundation · easy
When you run ansible-vault create, what does Ansible prompt you for before opening the editor?
Select an answer first
18application · easy
A junior engineer needs to inspect the contents of an encrypted file `junos_creds.yml` to verify a username, but must not permanently decrypt the file. The engineer has the vault password. Which command should be used?
Select an answer first
19foundation · easy
What information does ansible-vault rekey require from you?
Select an answer first
20application · medium
A team wants to store Junos device credentials in a playbook that is shared via a public Git repository. The credentials must not be visible to anyone who clones the repository. Which approach should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-423

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-423” is a trademark of its owner, used for identification only.