certified-specialist-ansible-automation

Red Hat Certified Specialist in Ansible Automation

DevOps

This validates your ability to use Ansible to automate configuration management, deploy applications, and orchestrate workflows. It's based on a hands-on, performance-based exam (EX407 or the newer EX294).

Sign up free — practice 5 questions on this cert without a card.

Ansible AutomationRed Hat RHCEPerformance-Based240 min exam15-20 tasks210/300 to pass~$500 USD

Difficulty

Challenging

Avg study time

120-200h

6-10 weeks typical

Pass rate

~50-60%

First attempt (estimated)

Market demand

High

Top Linux automation certification

Exam Domain Breakdown

Ansible Installation & Configuration15%
Ad-Hoc Commands & Modules10%
Playbook Development25%
Variables, Facts & Templates15%
Roles & Collections15%
Ansible Vault & Security10%
System Administration Tasks10%

Difficulty by Topic

Ansible installation & control node setup
Install Ansible, configure ansible.cfg (remote_user, privilege_escalation, inventory path, roles_path), set up SSH key-based authentication to managed hosts
Inventory management
Static and dynamic inventories, host groups, nested groups, host variables, group variables, inventory plugins, patterns for targeting hosts
Ad-hoc commands & common modules
Running ad-hoc commands with ansible, using modules like dnf, service, copy, file, user, command, shell, setup for quick system tasks
Playbook structure & execution
YAML syntax, plays and tasks, handlers and notify, tags, error handling (ignore_errors, block/rescue/always), serial and throttle, check mode
Variables, facts & registered variables
Variable precedence, host_vars/group_vars, set_fact, ansible_facts, custom facts (*.fact files in /etc/ansible/facts.d), register and debug
Jinja2 templates & filters
Template module, Jinja2 syntax ({{ }}, {% %}), conditionals and loops in templates, default/mandatory filters, lookup plugins
Conditionals, loops & handlers
when conditionals, loop and with_items, notify/handlers, changed_when/failed_when, combining conditions with and/or
Roles & Ansible Galaxy
Role directory structure (tasks, handlers, templates, files, vars, defaults, meta), creating roles with ansible-galaxy init, using roles from Galaxy, requirements.yml
Content Collections
Installing collections from Ansible Galaxy and Automation Hub, using FQCNs (fully qualified collection names), requirements.yml for collections
Ansible Vault for secrets management
Encrypting files and variables with ansible-vault (create, edit, encrypt, decrypt, rekey), vault password files, encrypting individual variables with encrypt_string
RHEL System Roles
Using system roles for SELinux, timesync, network, firewall, storage, and other standardized configurations on RHEL managed hosts
System administration automation
Managing packages (dnf), services (systemd), firewall rules (firewalld), users/groups, file permissions, cron jobs, storage (LVM, filesystems), and persistent mounts via playbooks

Exam Tips

1

This is a 100% performance-based exam — there are no multiple-choice questions. You must write and run Ansible playbooks on live RHEL systems to complete each task. Practice by doing, not just reading.

2

Time management is critical. You have 4 hours for 15-20 tasks. Set up your ansible.cfg and inventory correctly first, as every subsequent task depends on a working control node configuration.

3

Master the ansible-doc command. You cannot access the internet during the exam, but you can use ansible-doc to look up module parameters, examples, and return values. Practice using it instead of web documentation.

4

Know how to create roles from scratch. Understand the directory structure (tasks/, handlers/, templates/, files/, vars/, defaults/, meta/) and how to wire a role into a playbook. Ansible Galaxy's init command helps, but you must know what goes where.

5

Ansible Vault questions are almost guaranteed. Practice encrypting files and individual variables, running playbooks with --ask-vault-pass and --vault-password-file, and rekeying encrypted content.

6

RHEL System Roles are a key topic. Know how to install them (rhel-system-roles package), find available roles, and use them for tasks like configuring SELinux booleans, timesync, networking, and storage.

7

Pay close attention to idempotency. Your playbooks should produce the same result whether run once or ten times. Avoid using command/shell modules when a dedicated module exists (e.g., use dnf instead of shell: yum install).

8

Always test your work before moving on. Run your playbooks and verify the result on the managed hosts. A playbook that runs without errors but doesn't achieve the desired state scores zero points for that task.

Study Resources

Who It's Best Suited For

Linux system administrators

Sysadmins managing RHEL environments who want to automate routine tasks like user management, package installation, service configuration, and system hardening at scale.

DevOps and infrastructure engineers

Engineers responsible for configuration management and infrastructure automation who need to prove proficiency with Ansible as a key tool in their workflow.

RHCSA-certified professionals advancing their career

RHCSA holders looking to earn the next-level Red Hat credential. RHCSA is a prerequisite — EX294 builds on that foundation with automation expertise.

Cloud and platform engineers

Professionals working with hybrid or multi-cloud environments who use Ansible to manage configuration across on-premises and cloud infrastructure.

IT professionals transitioning to automation roles

Those moving from manual administration to automation-first practices. RHCE validates hands-on ability to automate with Ansible, not just theoretical knowledge.

Certification Path

RHCSA (EX200)
RHCE (EX294)
RHCA (Specialist Exams)