5. Describe Principles of Infrastructure as Code 200-901 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company wants to deploy a new web server in AWS. They need to define the EC2 instance, security group, and VPC subnet as code so that the exact same environment can be recreated in a different AWS region. The team also wants to review all infrastructure changes through a pull request before they are applied. Which tool and workflow best satisfy these requirements?

   • AUse Terraform with the AWS provider, and store the configuration in Git with a branch-based pull request workflow.
   • BUse Ansible playbooks to create the EC2 instance and security group, and store the playbooks in a shared network folder.
   • CUse AWS CloudFormation templates stored in Git, and apply them directly from the master branch after a pull request is merged.
   • DUse a Python script with the AWS SDK to create the resources, and store the script in Git.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A team manages network device configurations. They want to define the final configuration state (e.g., 'VLAN 10 exists on interfaces Gi1/0/1-2') and have the tool determine the necessary steps to achieve that state. Which approach should they use?

   • AImperative scripts that run commands in a fixed order
   • BDeclarative configuration files that describe the desired state
   • CA backup script that saves running configs
   • DManual CLI commands executed by an engineer
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of infrastructure provisioning tools like Terraform and AWS CloudFormation?

   • ATo install and configure software on already-running servers
   • BTo monitor the performance of applications and trigger alerts
   • CTo define and deploy infrastructure resources such as networks, VMs, and storage in a repeatable way
   • DTo provide a web-based console for manually creating cloud resources
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What does idempotency mean in the context of infrastructure as code?

   • AThe configuration can only be applied once and then must be rewritten
   • BApplying the same configuration multiple times produces the same result without unintended changes
   • CEach application of the configuration creates additional resources
   • DThe configuration is written in a declarative language rather than an imperative one
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A network engineer is troubleshooting an Ansible playbook that is supposed to configure NTP servers on routers. The playbook runs successfully, but on the second run, it reports 'changed' again, indicating that the configuration is not idempotent. The engineer suspects the issue is with how the task checks the current state. Which change would most likely make the playbook idempotent?

   • AUse a different configuration management tool
   • BUse a shell command to always apply the configuration
   • CRemove the check for existing configuration
   • DUse a module that compares the current configuration to the desired state and only applies changes if different
   Reveal Solution Discussion Select an answer first