5.0 AI, Network Operations and Management
Ansible & Configuration Management Practice Questions
Updated for CCNA v2.0
Inventories, playbooks, and the cisco.ios modules used to execute commands on network devices.
CCNA v2.0 objective 5.5 · objective map
Author-reviewed by LabFabric · 25 September 2026 · Report a content issue
One solved question, so you can see how these are marked
Which statement about Ansible is correct?
It is agentless and pushes tasks to devices from a control node, commonly over SSH
Ansible needs no agent on the managed device. The control node connects to it, typically over SSH for network devices, runs the requested modules, and collects the results. Puppet and Chef are the tools usually associated with agents that pull configuration.
Every question in the set below is marked like this. The answers stay hidden until you pick one.
Find related practice in the CCNA pathAll 8 Ansible & Configuration Management questions in this set
Answers and explanations appear when you work through the set above.
In Ansible, which file lists the devices and groups that playbooks will target?
- The inventory
- The playbook
- The template
- The handler
In what format are Ansible playbooks written?
- YAML
- XML only
- Compiled binary
- Cisco IOS CLI syntax
Which Ansible module from the cisco.ios collection sends configuration commands to an IOS device?
- ios_config
- ios_command
- ios_facts
- ios_ping
An engineer needs a playbook to run 'show ip interface brief' on a group of routers and capture the output. Which module is the best fit?
- ios_command
- ios_config
- ios_vlans
- copy
Which command runs a playbook named site.yml against the devices in an inventory file named hosts?
- ansible-playbook -i hosts site.yml
- ansible-inventory hosts site.yml
- ansible-galaxy run site.yml
- ansible-vault -i hosts site.yml
What does it mean when an Ansible task is idempotent?
- Running it repeatedly leaves the device in the same desired state, changing nothing once the state is already correct
- It always reloads the device after running
- It can only be run once per day
- It ignores the current configuration and overwrites everything
Which Ansible feature is intended to keep passwords and other secrets encrypted in the files stored with a project?
- Ansible Vault
- Inventory groups
- Handlers
- Facts
In an Ansible inventory for IOS devices, which variable setting selects the connection plugin that sends CLI commands over SSH?
- ansible_connection=ansible.netcommon.network_cli
- ansible_connection=local_console
- ansible_network_os=ssh
- ansible_become=snmp