View all questions & answers for the NSE 7 - Public Cloud Security 7.6.4 Architect Exam Materials exam


Question 65 Discussion

You are using Ansible to modify the configuration of several FortiGate VMs. What is the minimum number of files you need to create, and in which file should you configure the target FortiGate IP addresses? (Choose one answer)

  • A. One playbook file for each target and the required tasks, and one inventory file.
  • B. One .yaml file with the targets IP addresses, and one playbook file with the tasks.
  • C. One text file for all target devices, and one playbook file.
  • D. One inventory file for each target device, and one playbook file.
Correct Answer: C

Brave-Dump Clients Votes

C 100%

Comments



Mr_Fortitito 2025-09-07 10:11:11

Selected Answers: C


study guide page 76-77-78
• Playbooks: You write playbooks in YAML, and they contain a series of tasks that Ansible performs on the managed nodes. Playbooks define the desired state of the system, including configurations, installations, updates, and more.
• Inventory: The inventory is a file that defines the list of managed nodes. It specifies information such as hostnames, IP addresses, connection details, and group memberships.

The documentation shows that a basic Ansible workflow consists of:

One inventory file (which is a text file) that lists all the systems you want to manage with Ansible. The example shows: "the target is the FortiGate device with the IP address 10.0.206.131" and mentions "you can add additional parameters for each target host."

One playbook file that contains all the tasks you want to execute on the managed nodes. The documentation states: "you create and edit the file that will act as the playbook. This is the YAML format file that contains all the tasks you want to execute on the managed nodes."

alex silva 2025-09-13 15:48:54

Selected Answers: C


The key to answer C, I think, is in "one for All targets." Option "D" mentions an inventory file, as seen in the guide, but it specifies one for each target. This would be counterproductive. The purpose of the inventory file is to group multiple devices so you can manage them with a single playbook. Using a separate inventory file for each device would negate this advantage.

Answer 'C'