What happens if you run a playbook that references a vault-encrypted variable without providing the vault password?

The playbook prompts for the password automatically.

The playbook runs with the encrypted value as a literal string.

The playbook runs, but the variable is empty.

The playbook fails with an error indicating the vault password is required.

Which command encrypts an existing plaintext file so that its contents are no longer readable without a password?

ansible-vault encrypt secrets.yml

ansible-vault create secrets.yml

ansible-vault rekey secrets.yml

A cron job runs an Ansible playbook every night to back up Junos device configurations. The playbook references a vault-encrypted file containing device credentials. The job must run without human interaction. Which configuration supplies the vault password to the playbook?

Use `--vault-password-file /path/to/password_file` in the cron job command

Use `ansible-vault view` in the cron job to decrypt the file

Store the vault password in the playbook's `vars` section

Use `--ask-vault-pass` in the cron job command

Which command permanently removes encryption from a vault-encrypted file?

ansible-vault rekey secrets.yml

ansible-vault decrypt secrets.yml

What happens to the original plaintext file when you run ansible-vault encrypt on it?

The file is kept as plaintext, and a separate encrypted copy is created.

The original file is deleted and a new encrypted file is created with a .vault extension.

The file is moved to a backup directory before encryption.

The file is replaced by its encrypted content, and the plaintext is no longer available.

Juniper NetworksCertified Specialist, Automation and DevOps (JNCIS-DevOps)

Domain 3Objective 3

Vault JN0-423 Practice Questions (Page 6)

Part of the Ansible domain, which makes up ~23% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

10concepts

Questions 26–30

26foundation · easy
What happens if you run a playbook that references a vault-encrypted variable without providing the vault password?
Select an answer first
27foundation · easy
Which command encrypts an existing plaintext file so that its contents are no longer readable without a password?
Select an answer first
28application · medium
A cron job runs an Ansible playbook every night to back up Junos device configurations. The playbook references a vault-encrypted file containing device credentials. The job must run without human interaction. Which configuration supplies the vault password to the playbook?
Select an answer first
29foundation · easy
Which command permanently removes encryption from a vault-encrypted file?
Select an answer first
30foundation · easy
What happens to the original plaintext file when you run ansible-vault encrypt on it?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-423

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-423” is a trademark of its owner, used for identification only.