Quiz: roles

One correct answer

It was decided to put the vault password file into ~/ansible-lab, next to the playbooks, so as not to hand it to colleagues separately. What is wrong with that?

• A Nothing, as long as the file has mode 600.
• B Ansible will not find the password in the project directory.
• C ansible-vault will refuse to encrypt files in a directory with the password.
• D Whoever gets a copy of the project gets both the password and the encrypted file — and reads the secret.