All Practice Exams

100+ Free EX467 Practice Questions

Pass your Red Hat Certified Specialist in Managing Automation with Ansible Automation Platform (EX467) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
Not published Pass Rate
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

What is the recommended way to script repeated controller administrative actions (create projects, templates, credentials) from a CI pipeline?

A
B
C
D
to track
2026 Statistics

Key Facts: EX467 Exam

EX447

Predecessor (retired)

Red Hat

4 hours

Exam Duration

Red Hat 2026

$500

List Exam Fee (USD)

Red Hat 2026

Hands-on

Exam Format

Red Hat

AAP 2.x

Tested Platform

Red Hat objectives

3 years

Certification Validity

Red Hat policy

EX467 is a 4-hour performance-based Red Hat exam that replaces the retired EX447. Tasks are graded on a live Ansible Automation Platform 2.x environment and cover automation content, access, inventories and credentials, projects, workflows, jobs, programmatic interaction, and scaling. It counts toward Red Hat Certified Architect (RHCA).

Sample EX467 Practice Questions

Try these sample questions to test your EX467 exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which Ansible Automation Platform component is responsible for hosting and distributing certified Ansible Content Collections and execution environment images on-premises?
A.Automation controller
B.Private automation hub
C.Event-Driven Ansible controller
D.Receptor mesh
Explanation: Private automation hub is the AAP component used to host, sync, and distribute Ansible Content Collections and container-based execution environment images inside the customer's network. It can sync from console.redhat.com (cloud automation hub) and from Ansible Galaxy.
2Which CLI tool is used to build a custom execution environment container image from a definition file for use with Ansible Automation Platform?
A.ansible-navigator
B.ansible-builder
C.ansible-runner
D.awx-manage
Explanation: ansible-builder reads an execution-environment.yml definition file and produces a container image (with Podman or Docker) that bundles a base image, ansible-core, collections, system packages, and Python packages. The resulting image can be pushed to private automation hub.
3In an execution-environment.yml v3 definition, which top-level key is used to list RPM packages that should be installed inside the resulting image?
A.system_packages
B.dependencies.system
C.rpm_packages
D.additional_build_steps.system
Explanation: ansible-builder v3 schema places package lists under the dependencies key. RPM/system packages go under dependencies.system (which can reference a bindep.txt file or an inline list); Python deps go under dependencies.python; Galaxy collections under dependencies.galaxy.
4An administrator wants private automation hub to mirror a curated set of certified collections from console.redhat.com daily. Which hub object configures that mirror?
A.A namespace
B.A remote and a sync schedule on a repository
C.A signing service
D.A container registry credential
Explanation: In private automation hub, a remote stores the URL, requirements file, and authentication for an upstream source (e.g., console.redhat.com). The remote is attached to a repository (such as rh-certified) and a sync is run on demand or on a schedule to mirror selected collections.
5Which command publishes a locally built collection tarball (mycorp-utils-1.0.0.tar.gz) to a private automation hub namespace, using a token configured in ansible.cfg?
A.ansible-galaxy collection publish mycorp-utils-1.0.0.tar.gz
B.ansible-builder publish mycorp-utils-1.0.0.tar.gz
C.awx-manage upload_collection mycorp-utils-1.0.0.tar.gz
D.ansible-navigator collections push mycorp-utils-1.0.0.tar.gz
Explanation: ansible-galaxy collection publish uploads a built collection artifact to a Galaxy-compatible server such as private automation hub. The target server URL and token are read from ansible.cfg (galaxy_server_list section) or from --server/--token flags.
6Newly uploaded community collections in private automation hub are not visible to consumers until an action is taken. Which workflow is required by default?
A.The collection is automatically published when uploaded
B.An approval is required before the collection moves from staging to the published repository
C.The hub administrator must restart the pulp-worker service
D.The collection must be signed with a Sigstore key before it appears
Explanation: By default, private automation hub uses an approval workflow: uploaded collections land in the staging repository and require a user with the appropriate role to approve them, after which they are moved to the published (community or rh-certified) repository and become available to consumers.
7Which file inside private automation hub configuration controls the GPG-based signing of collections during the import/approval process?
A./etc/ansible/galaxy.cfg
B.A signing service object referencing a script and a GPG key
C./etc/pulp/sign-metadata.sh by hard-coded path
D.A controller credential of type 'GPG Public Key'
Explanation: Hub uses a Pulp signing service that references a shell script (typically sign-metadata.sh) plus a GPG key fingerprint. The signing service is then assigned to the repository so that collection metadata is signed during publish/approval.
8A job template references an execution environment that is hosted on private automation hub with authentication required. Which credential type must be attached to the EE so controller can pull the image?
A.Source Control
B.Container Registry
C.Vault
D.Galaxy/Automation Hub API Token
Explanation: Execution environments are container images, so controller pulls them via a container runtime. A Container Registry credential (URL, username, token/password, optional verify SSL) is associated with the EE object so the pull is authenticated against private automation hub's image registry.
9Which automation controller object lets you pin an execution environment image so all job templates in an organization use the same EE without specifying it on each template?
A.Set the image in the organization's Default Execution Environment field
B.Define a Smart Inventory with the EE pinned
C.Create an instance group named after the EE
D.Configure a credential of type 'Default EE'
Explanation: Each organization has a Default Execution Environment field. When a job template under that organization does not explicitly set an EE, controller falls back to the organization default (and finally to the global default EE configured in System settings).
10An EE built with ansible-builder must include the 'community.mysql' collection. Where in execution-environment.yml is this declared?
A.additional_build_steps.prepend
B.dependencies.galaxy with a requirements.yml file
C.images.base_image.options
D.build_arg_defaults.ANSIBLE_GALAXY_CLI_COLLECTION_OPTS
Explanation: Galaxy content (collections and roles) is declared under dependencies.galaxy. The simplest pattern is to point it at a requirements.yml file that lists collections such as community.mysql with optional version constraints; ansible-builder runs ansible-galaxy collection install during the build.

About the EX467 Exam

EX467 is the hands-on Red Hat Certified Specialist exam that replaces EX447. It validates the ability to use Red Hat Ansible Automation Platform 2.x to manage automation at scale across automation controller, private automation hub, automation mesh, and Event-Driven Ansible.

Questions

15 scored questions

Time Limit

4 hours

Passing Score

Red Hat does not publish a fixed numeric passing score for EX467

Exam Fee

$500 USD list (regional Parity Pricing applies) (Red Hat)

EX467 Exam Content Outline

~12%

Manage automation content

Upload collections and execution environment images to private automation hub; configure remotes, repositories, signing services, and approval workflows; build EE images with ansible-builder.

~12%

Manage access

Create organizations, teams, and users; assign RBAC roles (Admin, Auditor, Member, Use, Read, Execute); integrate LDAP, SAML, OIDC, Azure AD, and OAuth2 social providers.

~13%

Manage inventories and credentials

Build static, dynamic (cloud plugin), smart, and constructed inventories; configure machine, vault, network, source-control, container-registry, and Galaxy/Hub credentials with external secret lookups.

~13%

Manage controller projects

Connect Git-based projects, build and parameterize job templates, prompt-on-launch fields, attach EEs, and control launch RBAC.

~12%

Manage workflows

Author workflow templates with success, failure, always edges, approval nodes, convergence nodes, set_stats data passing, and webhook triggers.

~12%

Manage jobs

Build surveys, schedules, notifications (Slack, email, PagerDuty, webhooks), management jobs, ad-hoc commands, and job slicing.

~13%

Programmatic interaction

Drive controller via the REST API, OAuth2 tokens, awx CLI, awx.awx / ansible.controller collections, and Event-Driven Ansible rulebooks.

~13%

Maintain and scale

Install and extend automation mesh (control, hop, execution nodes, signed work), provision instance groups and container groups, back up and restore AAP with the installer, and troubleshoot capacity and jobs.

How to Pass the EX467 Exam

What You Need to Know

  • Passing score: Red Hat does not publish a fixed numeric passing score for EX467
  • Exam length: 15 questions
  • Time limit: 4 hours
  • Exam fee: $500 USD list (regional Parity Pricing applies)

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

EX467 Study Tips from Top Performers

1Practice end-to-end Configuration as Code with the awx.awx (or ansible.controller) collection: organizations, teams, credentials, projects, job templates, workflows, and schedules
2Build a custom execution environment with ansible-builder including Galaxy collections, Python packages, and bindep system packages
3Stand up a multi-node automation mesh with at least one hop node and verify it with receptorctl status
4Configure private automation hub with both rh-certified sync and a community remote, and exercise the approval and signing workflow
5Write at least one EDA rulebook with a webhook source that runs a controller job template via run_job_template

Frequently Asked Questions

Does EX467 replace EX447?

Yes. EX447 (Red Hat Certified Specialist in Advanced Automation: Ansible Best Practices) has been retired and is replaced by EX467, which targets Ansible Automation Platform 2.x rather than the older Ansible Tower / Ansible Engine model.

How long is the EX467 exam and what is its format?

EX467 is a 4-hour, hands-on, performance-based exam. Candidates complete real automation tasks against a live AAP environment; configurations must persist after reboot to count toward the score.

How much does EX467 cost?

The list price is $500 USD, but Red Hat applies regional Parity Pricing so the local price varies by country. The exam is also included with a Red Hat Learning Subscription that bundles courses and exam attempts.

What are the prerequisites for EX467?

Red Hat recommends a current RHCE plus completion of DO467/AU467 (Managing Enterprise Automation with Red Hat Ansible Automation Platform) or equivalent production experience administering AAP at scale.

What products are tested on EX467?

EX467 covers automation controller (formerly Ansible Tower), private automation hub, automation mesh (Receptor with control, hop, and execution nodes), execution environments, and Event-Driven Ansible (EDA) controller and rulebooks.

Does EX467 count toward RHCA?

Yes. Earning the Red Hat Certified Specialist in Managing Automation with Ansible Automation Platform credential through EX467 counts as one of the specialist exams required for Red Hat Certified Architect (RHCA).