PDF Version DemoWritten based on real exam questions by dedicated IT experts and certified trainers, the RedHat Red Hat Certified Specialist in Ansible Automation set at PassExamDumps keeps you close to the actual test — 42 practice questions for the EX407 exam.
RedHat EX407 Exam Overview:
| Certification Vendor: | Red Hat |
|---|---|
| Exam Name: | Red Hat Certified Specialist in Ansible Automation Exam |
| Exam Number: | EX407 |
| Passing Score: | 70% |
| Exam Duration: | 240 minutes |
| Available Languages: | English |
| Related Certifications: | Red Hat Certified Architect (RHCA) |
| Exam Price: | USD 400 |
| Certificate Validity Period: | 3 years |
| Exam Format: | Scenario-based tasks, Performance-based, Hands-on lab |
| Real Exam Qty: | Performance-based tasks (no fixed number) |
| Recommended Training: | DO407 - Automation with Ansible |
| Exam Registration: | Red Hat Exam Scheduler |
| Sample Questions: |  |
| Exam Way: | Onsite at testing center or remote proctored exam |
| Pre Condition: | No mandatory prerequisites; RHCSA certification or equivalent RHEL administration experience strongly recommended |
| Official Syllabus URL: | https://www.redhat.com/en/services/training/ex407-retired-red-hat-certified-specialist-in-ansible-automation-exam |
RedHat EX407 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Secure and Optimize Automation | 15% | - Manage parallel execution and task flow - Validate playbook functionality - Use Ansible Vault to protect sensitive data |
| Topic 2: Create and Manage Playbooks | 25% | - Implement variables, conditionals, and error handling - Configure system state: packages, services, files, storage, security - Use common Ansible modules |
| Topic 3: Work with Inventories | 10% | - Manage static inventory groups - Use and write dynamic inventory scripts - Validate inventory with ad-hoc commands |
| Topic 4: Install and Configure Ansible Control Node | 15% | - Install required Ansible packages - Create inventory and configuration files - Configure SSH access and privilege escalation |
| Topic 5: Use Templates and Roles | 20% | - Develop and use Ansible roles - Download roles from Ansible Galaxy - Create Jinja2 templates |
| Topic 6: Understand Core Ansible Components | 15% | - Modules, variables, facts, plays, playbooks - Inventories, static and dynamic - Ansible configuration files |
RedHat Red Hat Certified Specialist in Ansible Automation Exam FAQ — Reliable Answers
Yes — download the free RedHat Red Hat Certified Specialist in Ansible Automation demo and inspect the material before buying. Purchases include the right of free updating for 365 days, with latest versions emailed promptly upon release; renew afterward at 50% off.
USD 400 per attempt, 70% to pass. For busy professionals, one prepared attempt beats two rushed ones — work through the 42 practice questions for the EX407 exam at PassExamDumps first.
The RedHat Red Hat Certified Specialist in Ansible Automation blueprint covers 6 domains — including Install and Configure Ansible Control Node (15%), Work with Inventories (10%), Use Templates and Roles (20%). Budget your limited hours by weighting; the complete outline above lists every subtopic.
Through the vendor's official registration channels:
The RedHat Red Hat Certified Specialist in Ansible Automation is delivered Onsite at testing center or remote proctored exam — pick the arrangement that fits your calendar when booking.
The RedHat Red Hat Certified Specialist in Ansible Automation is RedHat's certification exam for Red Hat Certified Specialist in Ansible Automation, at the Specialist level. It's among the most authoritative credentials in the field — for those aiming at RedHat careers, it's the first step. Related credentials include Red Hat Certified Architect (RHCA).
Files arrive by automatic email within a minute of payment — unlimited devices, and 24/7 customer assisting if nothing shows up within 2 hours (check spam). Need an invoice? Email us your company name for a custom invoice made to your demand. If you fail the corresponding EX407 exam within 60 days of purchase, we process a full refund within 7 days — send a scanned enrollment slip plus the official Score Report PDF within 2 days of the exam. Excluded: exams within 3 days of purchase, candidate names that don't match the payer, and free or expired products. Alternatively, exchange for two equal-value products free.
No mandatory prerequisites; RHCSA certification or equivalent RHEL administration experience strongly recommended Vendors update eligibility rules over time, so verify the current requirements on the official page (official EX407 exam page) before registering.
Yes:
Official training teaches; practice proves. After any course, review with the 42 practice questions for the RedHat Red Hat Certified Specialist in Ansible Automation — answers expert-verified.
240 minutes for Performance-based tasks (no fixed number) questions. Time-pressed candidates should rehearse the clock: short timed sets on busy days, full simulations on free ones.
RedHat Red Hat Certified Specialist in Ansible Automation Sample Questions:
===================================================================================
control.realmX.example.com _ workstation.lab.example.com
node1.realmX.example.com _ servera.lab.example.com
node2.realmX.example.com _ serverb.lab.example.com
node3.realmX.example.com _ serverc.lab.example.com
node4.realmX.example.com _ serverd.lab.example.com
node5.realmX.example.com
- username:root, password:redhat
- username:admin, password:redhat
note1. don't change 'root' or 'admin' password.
note2. no need to create ssh-keygen for access, its pre-defined
note3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.
Rekey an existing Ansible vault as follows:
-----------------------------------------------
* Download Ansible vault from http:// classroom.example.com /secret.yml to /home/
admin/ansible/
* The current vault password is curabete
* The new vault password is newvare
* The vault remains in an encrypted state with the new password
Correct Answer:
Solution as:
# pwd
/home/admin/ansible/
# wget http://classroom.example.com/secret.yml
# chmod 0600 newpassword.txt
# ansible-vault rekey vault.yml --new-vault-password-file=newpassword.txt
Create a playbook /home/bob/ansible/timesync.yml that runs on hosts in the webservers host group and does the following:
* Uses the timesync RHEL system role.
* Sets the ntp server to 0.uk.pool.ntp.org
* Sets the timezone to UTC
Correct Answer:
Solution as:
Create a role called sample-apache and store it in /home/bob/ansible/roles. The role should
satisfy the following requirements:
*In the role, install and enable httpd. Also enable the firewall to allow http. Also run the template
*index.html.j2 and make sure this runs Create a template index.html.j2 that displays "Welcome to the server HOSTNAME"
In a play called apache.yml in /home/bob/ansible/ run the sample-apache role.
Correct Answer:
/home/sandy/ansible/apache.yml
/home/sandy/ansible/roles/sample-apache/tasks/main.yml
/home/sandy/ansible/roles/sample-apache/templates/index.html.j2
In /home/sandy/ansible/roles/sample-apache/handlers/main.yml
===================================================================================
control.realmX.example.com _ workstation.lab.example.com
node1.realmX.example.com _ servera.lab.example.com
node2.realmX.example.com _ serverb.lab.example.com
node3.realmX.example.com _ serverc.lab.example.com
node4.realmX.example.com _ serverd.lab.example.com
node5.realmX.example.com
- username:root, password:redhat
- username:admin, password:redhat
note1. don't change 'root' or 'admin' password.
note2. no need to create ssh-keygen for access, its pre-defined
note3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.
Create a role called apache in "/home/admin/ansible/roles" with the following
requirements:
--> The httpd package is installed, enabled on boot, and started.
--> The firewall is enabled and running with a rule to allow access to the web server.
--> template file index.html.j2 is used to create the file /var/www/html/index.html
with the output:
Welcome to HOSTNAME on IPADDRESS
--> Where HOSTNAME is the fqdn of the managed node and IPADDRESS is the IP-Address of
the managed node.
note: you have to create index.html.j2 file.
--> Create a playbook called httpd.yml that uses this role and the playbook runs on
hosts in the webservers host group.
Correct Answer:
Solution as:
----------
# pwd
/home/admin/ansible/roles/
# ansible-galaxy init apache
# vim apache/vars/main.yml
---
# vars file for apache
http_pkg: httpd
firewall_pkg: firewalld
http_srv: httpd
firewall_srv: firewalld
rule: http
webpage: /var/www/html/index.html
template: index.html.j2
:wq!
# vim apache/tasks/package.yml
---
- name: Installing packages
yum:
name:
- "{{http_pkg}}"
- "{{firewall_pkg}}"
state: latest
:wq!
# vim apache/tasks/service.yml
---
- name: start and enable http service
service:
name: "{{http_srv}}"
enabled: true
state: started
- name: start and enable firewall service
service:
name: "{{firewall_srv}}"
enabled: true
state: started
:wq!
# vim apache/tasks/firewall.yml
---
- name: Adding http service to firewall
firewalld:
service: "{{rule}}"
state: enabled
permanent: true
immediate: true
:wq!
# vim apache/tasks/webpage.yml
---
- name: creating template file
template:
src: "{{template}}"
dest: "{{webpage}}"
notify: restart_httpd
!wq
# vim apache/tasks/main.yml
# tasks file for apache
- import_tasks: package.yml
- import_tasks: service.yml
- import_tasks: firewall.yml
- import_tasks: webpage.yml
:wq!
# vim apache/templates/index.html.j2
Welcome to {{ ansible_facts.fqdn }} on {{ ansible_facts.default_ipv4.address }}
# vim apache/handlers/main.yml
---
# handlers file for apache
- name: restart_httpd
service:
name: httpd
state: restarted
:wq!
# cd ..
# pwd
/home/admin/ansible/
# vim httpd.yml
---
- name: Including apache role
hosts: webservers
pre_tasks:
- name: pretask message
debug:
msg: 'Ensure webserver configuration'
roles:
- ./roles/apache
post_tasks:
- name: Check webserver
uri:
url: "http://{{ ansible_facts.default_ipv4.address }}"
return_content: yes
status_code: 200
:wq!
# ansible-playbook httpd.yml --syntax-check
# ansible-playbook httpd.yml
# curl http://serverx
Create a file called mysecret.yml on the control host using ansible vault in home/bob/ansible. Set the password to 'notasafepass' and inside the file create a variable called dev_pass with the value of devops. Save the file. Then go back in the file and change dev_pass value to devops123. Then change the vault password of mysecret.yml to verysafepass
Reveal Solution Discussion 0Correct Answer:
ansible-vault create lock.yml
New Vault Password: reallysafepw
Confirm: reallysafepw
Viewing page 1 out of 9 pages.
Viewing questions 1-5 out of 42 questions.
Gustave 
Jack 
Truman 
Buck 
Paula 
Prescott 
Ira 
Griffith 
Ward 
Nicola 
Pamela 
Dwight 
Lisa 
Ronald 
Quinn 
Tabitha 
Maximilian 
Warner 
Channing 
Jeffrey 
Nick 
Heather 
Robin 
Virgil 
Genevieve 
Algernon 
Walker 
Reuben 
Levi 
