Sample Questions

EXIN Foundation
Certificate in Open
Stack Software
Edition May 2015

Content

Introduction
Sample questions
Answer key
Evaluation

3
4
8
16

Copyright 2015 EXIN

All rights reserved. No part of this publication may be published, reproduced, copied or stored in a
data processing system or circulated in any form by print, photo print, microfilm or any other
means without written permission by EXIN. The OpenStack Word Mark and OpenStack Logo
are either registered trademarks/service marks or trademarks/service marks of the OpenStack
Foundation, in the United States and other countries and are used with the OpenStack
Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack
Foundation, or the OpenStack community.

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

Introduction
These are 20 sample multiple-choice questions for the exam EXIN Foundation
Certificate in OpenStack Software (FOSS.EN) Version Juno.
Each question has a number of possible answers, of which only one is the
correct answer.
The maximum number of points that can be obtained for this Sample Exam
is 20. If you obtain 13 points or more you have passed this sample.
The time allowed is for this sample is 30 minutes.

Good luck!

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

Sample questions
1 / 20
Through which component is identity management served?
A.
B.
C.

Neutron, for this module takes care of managing networks and IP addresses.
Keystone, for this module provides a user directory mapped to services they can
access.
Trove, for this module is the home of the provisioning of database engines.

2 / 20
What is the role of the OpenStack Foundation?
A. The OpenStack Foundation wants to commercialise the OpenStack licensing
model.
B. The OpenStack Foundation wants to help achieve the OpenStack mission
providing shared resources.
C. The OpenStack Foundation wants to make sure IaaS is developed under local
legislations.
D. The OpenStack Foundation wants to promote private modular cloud and hybrid
Cloud computing.
3 / 20
What Nova component receives http requests, converts commands and communicates
with other components?
A.
B.
C.
D.

Nova-compute
Nova-consoleauth
Nova-api
Nova-novncproxy

4 / 20
What command should be used in order to create an instance?
A.
B.
C.
D.

glance image-list
nova boot
service nova start
service nova status

5 / 20
What is a function of the Nova service?
A.
B.
C.
D.

It provides creation of new flavors.

It starts and manages instances.
It supports creating boot storage volumes.
It provides data reporting to a variety of consumers.

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

6 / 20
What functionality of Glance enables virtual machines to be backed up quickly?
A.
B.
C.
D.

The distribution of bootable disk images

The metadata definitions catalogue
The storage and cataloguing of snapshots
The storage of bootable disk images

7 / 20
What element of the Swift architecture is responsible for managing the mapping of
user created folders within the Object store service?
A. Proxy server
B. Container server
C. Account server
D. Object server
8 / 20
What is a use case for Object storage?
A. Workloads requiring long-term persistence of data.
B. File sharing of information and quick accessibility.
C. Situations where the data frequently changes.
D. To use as primary storage for a database or file system.
9 / 20
Which component of Cinder selects the optimal block storage provider node on which
to create a volume?
A.
B.
C.
D.

cinder-api
cinder-backup
cinder-volume
cinder-scheduler

10 / 20
What does Cinder use the volume type for?
A.
B.
C.
D.

Configuring the block storage to use the message broker

Creating the database tables for the block storage service
Determining which type of backend to use
Registering the block storage with the identity service

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

11 / 20
What is a Ring?
A.

A set of physical storage devices that are isolated from storage devices in other
zones
B. A mapping of account, container and object names to the physical location on disk
of those entities
C. A part of the cluster that is usually located remotely from the data center
12 / 20
Which component of Manila is responsible for the creation of file system shares?
A. File Shares Service
B. Filter Scheduler
C. Reference Provider
13 / 20
Keystone plays an important role in the authorization of OpenStack service requests.
Which data item is used between OpenStack components to authenticate and
authorize these requests?
A. Tenant token
B. Temporary token
C. Login and key
D. Login and password
14 / 20
What is the relationship between users and tenants?
A.
B.
C.
D.

A tenant can be an operator for all users.

A user aggregates the number of resources in each service
Tenants can be added to any role in a user
Users are bound to a tenant by assigning them a role on that tenant

15 / 20
Which types of private information can Barbican handle?
A.
B.
C.
D.

Asymmetric keys only

Symmetric keys only
Symmetric keys and asymmetric keys
Symmetric keys, asymmetric keys and raw secrets

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

16 / 20
Neutron provides several networking functionalities. Which of these was already
available as part of Nova Networking?
A. SDN
B. Tunneling
C. API extensions for OpenStack networking
D. IP Address Management (IPAM)
17 / 20
Which of the following Tenant Operations can be executed by a Tenant User?
A. Creating Instances.
B. Managing tenant access and security.
C. Managing compute and storage resources.
D. Managing Network Resources.
18 / 20
Which command creates a new Heat stack?
A.
B.
C.
D.

$ heat stack-create new_stack --template-file --parameters

$ heat stack-update mystack --template-file --parameters
$ heat stack-show new_stack
$ heat template-validate --template-file

19 / 20
What action is required to run Horizon?
A. Modify the ceilometer.conf.
B. Specify the host for your OpenStack Identity Service endpoint.
C. Configure kernel networking parameters.
D. Ensure that the controller node has at least several gigabytes of space available in
/var/lib/glance/images/
20 / 20
What API provides Zaqar?
A.
B.
C.
D.

Amazon EC2 API

OpenStack Compute API
RESTful API
special Admin API for privileged users to perform administrative actions

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

Answer key
1 / 20
Through which component is identity management served?
A.
B.
C.

Neutron, for this module takes care of managing networks and IP addresses.
Keystone, for this module provides a user directory mapped to services they can
access.
Trove, for this module is the home of the provisioning of database engines.

A. Incorrect. Identity management is served through Keystone.

B. Correct. See h6c68s.b.01_stu page 2-29.
C. Incorrect. Identity management is served through Keystone.
2 / 20
What is the role of the OpenStack Foundation?
A. The OpenStack Foundation wants to commercialise the OpenStack licensing
model.
B. The OpenStack Foundation wants to help achieve the OpenStack mission
providing shared resources.
C. The OpenStack Foundation wants to make sure IaaS is developed under local
legislations.
D. The OpenStack Foundation wants to promote private modular cloud and hybrid
Cloud computing.
A. Incorrect. OpenStack has nothing to do with commercialisation of the model
B. Correct. This is the only correct answer. See slide deck 2015_01_06_M02:
Introduction to Open Stack, Slide 10.
C. Incorrect. There is no link between local legislations and the development of IaaS
as part of the role of the OpenStack Foundation
D. Incorrect. Cloud computing is the model used for OpenStack. It is not the role of the
foundation itself

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

3 / 20
What Nova component receives http requests, converts commands and communicates
with other components?
A.
B.
C.
D.

Nova-compute
Nova-consoleauth
Nova-api
Nova-novncproxy

A. Incorrect. Nova-Compute manages the communications with the Hypervisor and

Virtual Machines.
B. Incorrect. Nova-consoleaouth authorizes console access based on user/project/role.
C. Correct. Nova-AP receives http requests, converts commands and communicates
with other components via the queue or http (in the case of object store). It Accepts
and responds to end user compute API calls. See h6c68s.b.01_stu page 128 Nova
Architecture Section 4-8.
D. Incorrect. Nova-novncproxy provides a proxy for accessing instances through vnc
connections.
4 / 20
What command should be used in order to create an instance?
A.
B.
C.
D.

glance image-list
nova boot
service nova start
service nova status

A. Incorrect. This command is used to list available images to boot.

B. Correct. Nova OpenStack Compute Service. Module 4. Page 4-21. The nova boot
command is used to create the instance. The whole command sentence is the
following: nova boot <ServerName> -- image "<image id>" --flavor <flavor value>. The
two primary parameters in the command can be determined through the use of the
glance image-list and nova flavor-list
C. Incorrect. This command is used to bring up the service.
D. Incorrect. This command is used to check if the service is started.

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

5 / 20
What is a function of the Nova service?
A.
B.
C.
D.

It provides creation of new flavors.

It starts and manages instances.
It supports creating boot storage volumes.
It provides data reporting to a variety of consumers.

A. Incorrect. This is a function of Horizon.

B. Correct. This is a function of Nova. See h6c68s.b.01_stu chapter4, page 4.4.
C. Incorrect. This is a function of Cinder.
D. Incorrect. This is a function of Ceilometer.
6 / 20
What functionality of Glance enables virtual machines to be backed up quickly?
A.
B.
C.
D.

The distribution of bootable disk images

The metadata definitions catalogue
The storage and cataloguing of snapshots
The storage of bootable disk images

A. Incorrect. This functionality is not specific for backing up virtual machines

B. Incorrect. This functionality is not specific for backing up virtual machines
C. Correct. See lit h6c68s.c.00_stu 5-4
D. Incorrect. This functionality is not specific for backing up virtual machines
7 / 20
What element of the Swift architecture is responsible for managing the mapping of
user created folders within the Object store service?
A. Proxy server
B. Container server
C. Account server
D. Object server
A. Incorrect. Proxy server accepts incoming requests via the OpenStack Object API or
just raw HTTP.
B. Correct. Container servers manage a mapping of containers (i.e folders) within the
object store service. See h6c68s.b.01_stu page 343.
C. Incorrect. Account servers manage accounts defined with the object storage
service.
D. Incorrect. Object servers manage actual objects (i.e. files) on the storage nodes.

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

10

8 / 20
What is a use case for Object storage?
A. Workloads requiring long-term persistence of data.
B. File sharing of information and quick accessibility.
C. Situations where the data frequently changes.
D. To use as primary storage for a database or file system.
A. Incorrect. This is a use case for block storage.
B. Correct. This is a use case for object storage. See h6c68s.b.01_stu page 338.
C. Incorrect. This is a use case for block storage.
D. Incorrect. This is a use case for block storage.
9 / 20
Which component of Cinder selects the optimal block storage provider node on which
to create a volume?
A.
B.
C.
D.

cinder-api
cinder-backup
cinder-volume
cinder-scheduler

A. Incorrect. This component accepts API requests and routes them to cinder-volume
for action
B. Incorrect. This component routes information between the block storage service
process and the database that stores the volume states
C. Incorrect. This component responds to R/W requests to the object storage
database.
D. Correct. See lit h6c68s.c.00_stu 8-9
10 / 20
What does Cinder use the volume type for?
A.
B.
C.
D.

Configuring the block storage to use the message broker

Creating the database tables for the block storage service
Determining which type of backend to use
Registering the block storage with the identity service

A. Incorrect. This is a step in the installation process of Cinder.

B. Incorrect. This is a step in the installation process of Cinder.
C. Correct. See lit h6c68s.c.00_stu 8-16.
D. Incorrect. This is a step in the installation process of Cinder.

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

11

11 / 20
What is a Ring?
A. A set of physical storage devices that are isolated from storage devices in other
zones
B. A mapping of account, container and object names to the physical location on disk
of those entities
C. A part of the cluster that is usually located remotely from the data center
A. Incorrect. This is a zone.
B. Correct. This is a ring. See h6c68s.b.01_stu page 350.
C. Incorrect. This is a region.
12 / 20
Which component of Manila is responsible for the creation of file system shares?
A. File Shares Service
B. Filter Scheduler
C. Reference Provider
A. Correct. See https://wiki.openstack.org/wiki/Manila/design
B. Incorrect. The filter scheduler is used for filtering backends based on predefined
parameters
C. Incorrect. The reference provider is a driver for shared file systems
13 / 20
Keystone plays an important role in the authorization of OpenStack service requests.
Which data item is used between OpenStack components to authenticate and
authorize these requests?
A. Tenant token
B. Temporary token
C. Login and key
D. Login and password
A. Correct. The tenant token is created by Keystone and checked when service
requests are made with it. See h6c68s.b.01_stu pag 3-12.
B. Incorrect. The temporary token is only used to fetch the tenant list for a user.
C. Incorrect. Login and key may only be used for initial authentication to Keystone.
D. Incorrect. Login and password may only be used for initial authentication to
Keystone.

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

12

14 / 20
What is the relationship between users and tenants?
A.
B.
C.
D.

A tenant can be an operator for all users.

A user aggregates the number of resources in each service
Tenants can be added to any role in a user
Users are bound to a tenant by assigning them a role on that tenant

A. Incorrect. A user can be an operator for all tenants.

B. Incorrect. Incorrect. A tenant aggregates the number of resources in each service
C. Incorrect. Users can be added to any role either globally or in a tenant.
D. Correct. See lit. h6c68s.c.00_stu 3-17
15 / 20
Which types of private information can Barbican handle?
A.
B.
C.
D.

Asymmetric keys only

Symmetric keys only
Symmetric keys and asymmetric keys
Symmetric keys, asymmetric keys and raw secrets

A. Incorrect. Barbican also handles symmetric keys and raw secrets

B. Incorrect. Barbican also handles asymmetric keys and raw secrets
C. Incorrect. Barbican also handles raw secrets
D. Correct. See Lit. A 14-18 and Barbican getting started guide:
https://github.com/cloudkeep/barbican/wiki/Barbican-Getting-Started-Guide
16 / 20
Neutron provides several networking functionalities. Which of these was already
available as part of Nova Networking?
A. SDN
B. Tunneling
C. API extensions for OpenStack networking
D. IP Address Management (IPAM)
A. Incorrect. SDN functionality was added in Neutron.
B. Incorrect. Tunneling functionality was added in Neutron.
C. Incorrect. API extensions were added in Neutron.
D. Correct. IPAM was available before Neutron as it was part of Nova Networking. See
h6c68s.b.01_stu, page 7-11/12.

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

13

17 / 20
Which of the following Tenant Operations can be executed by a Tenant User?
A. Creating Instances.
B. Managing tenant access and security.
C. Managing compute and storage resources.
D. Managing Network Resources.
A. Correct. See h6c68s.b.01_stu, page 228 (6-18).
B. Incorrect. Only for Tenant Admins.
C. Incorrect. Only for Tenant Admins.
D. Incorrect. Only for Tenant Admins.
18 / 20
Which command creates a new Heat stack?
A.
B.
C.
D.

$ heat stack-create new_stack --template-file --parameters

$ heat stack-update mystack --template-file --parameters
$ heat stack-show new_stack
$ heat template-validate --template-file

A. Correct: To create a new stack from the CLI, you can use the stack-create
command h6c68s.c.00_stu.part2 11-20
B. Incorrect: updates an existing stack from a modified template file.
http://docs.openstack.org/user-guide/content/heat-stack-create.html
C. Incorrect: displays the stack status and details through the CLI.
h6c68s.c.00_stu.part2 11-21
D. Incorrect: You can use the template-validate command to validate a template file
without creating a stack from it. http://docs.openstack.org/user-guide/content/heatstack-create.html
19 / 20
What action is required to run Horizon?
A. Modify the ceilometer.conf.
B. Specify the host for your OpenStack Identity Service endpoint.
C. Configure kernel networking parameters.
D. Ensure that the controller node has at least several gigabytes of space available in
/var/lib/glance/images/
A. Incorrect. That is necessary for Ceilometer. See:
http://docs.openstack.org/juno/config-reference/content/section_ceilometer.conf.html
B. Correct. See h6c68s.b.01_stu module 6 and
http://docs.openstack.org/developer/horizon/topics/deployment.html
C. Incorrect. That's for preconfiguring Neutron. See:
http://docs.openstack.org/juno/install-guide/install/apt/content/neutron-computenode.html
D. Incorrect. Incorrect. That's for adding the Image Service. See:
http://docs.openstack.org/juno/install-guide/install/apt/content/ch_glance.html

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

14

20 / 20
What API provides Zaqar?
A.
B.
C.
D.

Amazon EC2 API

OpenStack Compute API
RESTful API
special Admin API for privileged users to perform administrative actions

A. Incorrect: That is nova-api (It supports the OpenStack Compute API, Amazon EC2
API, and a special Admin API for privileged users to perform administrative actions)
B. Incorrect: That is nova-api (It supports the OpenStack Compute API, Amazon EC2
API, and a special Admin API for privileged users to perform administrative actions)
C. Correct: The service features a fully RESTful API that developers can use to send
messages between various components of their Software-as-a-Service (SaaS) and
mobile applications h6c68s.c.00_stu.part2 14-12.
D. Incorrect: That is nova-api (It supports the OpenStack Compute API, Amazon EC2
API, and a special Admin API for privileged users to perform administrative actions)

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

15

Evaluation
The table below shows the correct answers to the questions in this set of sample
questions.
Order

Answer

Specification

What is OpenStack

What is OpenStack

Compute

Compute

Compute

Storage

Storage

Storage

Storage

10

Storage

11

Storage

12

Storage

13

Identity Management

14

Identity Management

15

Identity Management

16

Networking

17

Support Services

18

Support Services

19

Support Services

20

Support Services

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

16

Sample questions EXIN Foundation Certificate in

Open Stack Software [FOSS.EN]

17

Contact EXIN
www.exin.com