Last Updated: Oct 14, 2026
No. of Questions: 42 Questions & Answers with Testing Engine
Download Limit: Unlimited
Our professional & latest exam products of BraindumpQuiz EX407 exam quiz braindumps can simulate the real exam scene so that you know the exam type deeper. Then repeated practices make you skilled and well-prepare when you take part in the real exam of BraindumpQuiz EX407. Our three versions of EX407 quiz torrent materials make everyone choose what studying ways they like.
BraindumpQuiz has an unprecedented 99.6% first time pass rate among our customers.
We're so confident of our products that we provide no hassle product exchange.
Why wait to start studying? The moment your order is complete, your EX407 practice questions land in your inbox within one minute. That is RedHat Red Hat Certified Specialist in Ansible Automation questions, ready when you are.
| Certification Vendor: | Red Hat |
|---|---|
| Exam Name: | Red Hat Certified Specialist in Ansible Automation Exam |
| Exam Number: | EX407 |
| Certificate Validity Period: | 3 years |
| Exam Duration: | 240 minutes |
| Exam Price: | USD 400 |
| Exam Format: | Hands-on lab, Scenario-based tasks, Performance-based |
| Related Certifications: | Red Hat Certified Architect (RHCA) |
| Passing Score: | 70% |
| Available Languages: | English |
| Real Exam Qty: | Performance-based tasks (no fixed number) |
| Recommended Training: | DO407 - Automation with Ansible |
| Exam Registration: | Red Hat Exam Scheduler |
| Sample Questions: | DOWNLOAD DEMO |
| Exam Way: | Onsite at testing center or remote proctored exam |
| Pre Condition: | No mandatory prerequisites; RHCSA certification or equivalent RHEL administration experience strongly recommended |
| Official Syllabus URL: | https://www.redhat.com/en/services/training/ex407-retired-red-hat-certified-specialist-in-ansible-automation-exam |
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Work with Inventories | 10% | - Manage static inventory groups - Validate inventory with ad-hoc commands - Use and write dynamic inventory scripts |
| Topic 2: Install and Configure Ansible Control Node | 15% | - Configure SSH access and privilege escalation - Install required Ansible packages - Create inventory and configuration files |
| Topic 3: Use Templates and Roles | 20% | - Download roles from Ansible Galaxy - Develop and use Ansible roles - Create Jinja2 templates |
| Topic 4: Secure and Optimize Automation | 15% | - Manage parallel execution and task flow - Validate playbook functionality - Use Ansible Vault to protect sensitive data |
| Topic 5: Create and Manage Playbooks | 25% | - Implement variables, conditionals, and error handling - Use common Ansible modules - Configure system state: packages, services, files, storage, security |
| Topic 6: Understand Core Ansible Components | 15% | - Modules, variables, facts, plays, playbooks - Ansible configuration files - Inventories, static and dynamic |
The EX407 exam, officially titled Red Hat Certified Specialist in Ansible Automation Exam, is the qualifying test for the Red Hat Certified Specialist in Ansible Automation certification from Red Hat, a credential at the Specialist level. Passing it proves you have the skills employers look for in certified professionals, and it can also support progress toward related credentials such as Red Hat Certified Architect (RHCA).
The RedHat Red Hat Certified Specialist in Ansible Automation exam gives you 240 minutes to work through Performance-based tasks (no fixed number) questions. That is a steady pace with little room for second-guessing, so train yourself to read each question once, flag the difficult ones, and keep moving. Before exam day, sit at least two full timed sessions in the BraindumpQuiz test engine — when the clock feels familiar, it stops being a threat.
You need 70% to pass, and the official registration fee is USD 400. Fall short and you pay that fee in full again for every retake, which makes solid preparation the cheaper option by far. Work through the BraindumpQuiz practice questions until you score comfortably above the passing mark, then book your seat.
No mandatory prerequisites; RHCSA certification or equivalent RHEL administration experience strongly recommended Eligibility rules can change over time, so before you register, confirm the latest requirements on the official exam page: Red Hat EX407 exam overview.
You can book your EX407 exam through any of these official registration channels:
The exam is delivered as Onsite at testing center or remote proctored exam, so you can pick the option that fits your schedule when you book.
Red Hat recommends the following training for RedHat Red Hat Certified Specialist in Ansible Automation candidates:
Pair that training with the 42 practice questions from BraindumpQuiz and you can check your readiness topic by topic before exam day.
Yes. BraindumpQuiz offers a free PDF demo for the RedHat Red Hat Certified Specialist in Ansible Automation exam so you can judge the quality of our questions and answers before paying anything. Every purchase also comes with 365 days of free updates, and once that period expires you can extend your update service at a 50% discount.
Your purchase is protected by a 100% money-back guarantee. If you sit the corresponding EX407 exam within 60 days of buying and do not pass, send us a scan of your exam enrollment slip together with your official Score Report (PDF) within 2 days of the exam date — the candidate name must match the payer's name — and we will process your full refund within 7 days. Please note that exams taken within 3 days of purchase, materials downloaded without ever sitting the exam, free products, and expired orders are not covered. If you would rather not have a refund, you can exchange your order for two exam products of equal value, free of charge, and keep the update service on your original purchase.
Delivery is instant: your files are emailed to you within one minute of payment and can also be downloaded directly, with no limit on the number of computers you install them on. If nothing has arrived within 2 hours, contact our customer service team and we will sort it out.
The RedHat Red Hat Certified Specialist in Ansible Automation syllabus is organized into 6 domains. The main areas include Secure and Optimize Automation (15%), Install and Configure Ansible Control Node (15%), and Create and Manage Playbooks (25%). Scroll up to the Exam Topics section above for the complete, current outline before you plan your study schedule.
===================================================================================
control.realmX.example.com _ workstation.lab.example.com
node1.realmX.example.com _ servera.lab.example.com
node2.realmX.example.com _ serverb.lab.example.com
node3.realmX.example.com _ serverc.lab.example.com
node4.realmX.example.com _ serverd.lab.example.com
node5.realmX.example.com
- username:root, password:redhat
- username:admin, password:redhat
note1. don't change 'root' or 'admin' password.
note2. no need to create ssh-keygen for access, its pre-defined
note3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.
Create an Ansible vault to store user passwords as follows:
* The name of the vault is valut.yml
* The vault contains two variables as follows:
- dev_pass with value wakennym
- mgr_pass with value rocky
* The password to encrypt and decrypt the vault is atenorth
* The password is stored in the file /home/admin/ansible/password.txt
Correct Answer:
Solution as:
# pwd
/home/admin/ansible
# echo "atenorth" >password.txt
# chmod 0600 password.txt
# ansible-vault create vault.yml --vault-password-file=password.txt
---
- dev_pass: wakennym
- mgr_pass: rocky
:wq
# cat vault.yml
$ANSIBLE_VAULT;1.1;AES256
36383862376164316436353665343765643331393433373564613762666531313034336438353662
3464346331346461306337633632393563643531376139610a343531326130663266613533633562
38623439316631306463623761343939373263333134353264333834353264343934373765643737
3535303630626666370a643663366634383863393338616661666632353139306436316430616334
65386134393363643133363738656130636532346431376265613066326162643437643064313863
6633333537303334333437646163343666666132316639376531
# ansible-vault view vault.yml
password:******
---
- dev_pass: wakennym
- mgr_pass: rocky
Create a playbook called regulartasks.yml which has the system that append the date to /root/datefile every day at noon. Name is job 'datejob'
Reveal Solution Discussion 0Correct Answer:
Solution as:
Create a jinja template in /home/sandy/ansible/ and name it hosts.j2. Edit this file so it looks like the one below. The order of the nodes doesn't matter. Then create a playbook in /home/sandy/ansible called hosts.yml and install the template on dev node at /root/myhosts
Correct Answer:
Solution as:
===================================================================================
control.realmX.example.com _ workstation.lab.example.com
node1.realmX.example.com _ servera.lab.example.com
node2.realmX.example.com _ serverb.lab.example.com
node3.realmX.example.com _ serverc.lab.example.com
node4.realmX.example.com _ serverd.lab.example.com
node5.realmX.example.com
- username:root, password:redhat
- username:admin, password:redhat
note1. don't change 'root' or 'admin' password.
note2. no need to create ssh-keygen for access, its pre-defined
note3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.
Create a role called apache in "/home/admin/ansible/roles" with the following
requirements:
--> The httpd package is installed, enabled on boot, and started.
--> The firewall is enabled and running with a rule to allow access to the web server.
--> template file index.html.j2 is used to create the file /var/www/html/index.html
with the output:
Welcome to HOSTNAME on IPADDRESS
--> Where HOSTNAME is the fqdn of the managed node and IPADDRESS is the IP-Address of
the managed node.
note: you have to create index.html.j2 file.
--> Create a playbook called httpd.yml that uses this role and the playbook runs on
hosts in the webservers host group.
Correct Answer:
Solution as:
----------
# pwd
/home/admin/ansible/roles/
# ansible-galaxy init apache
# vim apache/vars/main.yml
---
# vars file for apache
http_pkg: httpd
firewall_pkg: firewalld
http_srv: httpd
firewall_srv: firewalld
rule: http
webpage: /var/www/html/index.html
template: index.html.j2
:wq!
# vim apache/tasks/package.yml
---
- name: Installing packages
yum:
name:
- "{{http_pkg}}"
- "{{firewall_pkg}}"
state: latest
:wq!
# vim apache/tasks/service.yml
---
- name: start and enable http service
service:
name: "{{http_srv}}"
enabled: true
state: started
- name: start and enable firewall service
service:
name: "{{firewall_srv}}"
enabled: true
state: started
:wq!
# vim apache/tasks/firewall.yml
---
- name: Adding http service to firewall
firewalld:
service: "{{rule}}"
state: enabled
permanent: true
immediate: true
:wq!
# vim apache/tasks/webpage.yml
---
- name: creating template file
template:
src: "{{template}}"
dest: "{{webpage}}"
notify: restart_httpd
!wq
# vim apache/tasks/main.yml
# tasks file for apache
- import_tasks: package.yml
- import_tasks: service.yml
- import_tasks: firewall.yml
- import_tasks: webpage.yml
:wq!
# vim apache/templates/index.html.j2
Welcome to {{ ansible_facts.fqdn }} on {{ ansible_facts.default_ipv4.address }}
# vim apache/handlers/main.yml
---
# handlers file for apache
- name: restart_httpd
service:
name: httpd
state: restarted
:wq!
# cd ..
# pwd
/home/admin/ansible/
# vim httpd.yml
---
- name: Including apache role
hosts: webservers
pre_tasks:
- name: pretask message
debug:
msg: 'Ensure webserver configuration'
roles:
- ./roles/apache
post_tasks:
- name: Check webserver
uri:
url: "http://{{ ansible_facts.default_ipv4.address }}"
return_content: yes
status_code: 200
:wq!
# ansible-playbook httpd.yml --syntax-check
# ansible-playbook httpd.yml
# curl http://serverx
===================================================================================
control.realmX.example.com _ workstation.lab.example.com
node1.realmX.example.com _ servera.lab.example.com
node2.realmX.example.com _ serverb.lab.example.com
node3.realmX.example.com _ serverc.lab.example.com
node4.realmX.example.com _ serverd.lab.example.com
node5.realmX.example.com
- username:root, password:redhat
- username:admin, password:redhat
note1. don't change 'root' or 'admin' password.
note2. no need to create ssh-keygen for access, its pre-defined
note3. SELinux is in enforcing mode and firewalld is disabled/stop on whole managed hosts.
Modify file content.
------------------------
Create a playbook called /home/admin/ansible/modify.yml as follows:
* The playbook runs on all inventory hosts
* The playbook replaces the contents of /etc/issue with a single line of text as
follows:
--> On hosts in the dev host group, the line reads: "Development"
--> On hosts in the test host group, the line reads: "Test"
--> On hosts in the prod host group, the line reads: "Production"
Correct Answer:
Solution as:
# pwd
/home/admin/ansible
# vim modify.yml
---
- name:
hosts: all
tasks:
- name:
copy:
content: "Development"
dest: /etc/issue
when: inventory_hostname in groups['dev']
- name:
copy:
content: "Test"
dest: /etc/issue
when: inventory_hostname in groups['test']
- name:
copy:
content: "Production"
dest: /etc/issue
when: inventory_hostname in groups['prod']
:wq
# ansible-playbook modify.yml --syntax-check
# ansible-playbook modify.yml
Viewing page 1 out of 9 pages.
Viewing questions 1-5 out of 42 questions.
Over 59429+ Satisfied Customers

Monroe
Quincy
Theobald
Yehudi
Blanche
Eartha
BraindumpQuiz is the world's largest certification preparation company with 99.6% Pass Rate History from 59429+ Satisfied Customers in 148 Countries.