5. Describe Principles of Infrastructure as Code 200-901 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a key practice when using version control for infrastructure code?

   • AStoring configuration files in a shared network drive without versioning
   • BKeeping configuration files in a Git repository with meaningful commit messages and branch-based workflows
   • CStoring configuration files only on the local machine of the administrator
   • DEmailing configuration files to team members for review
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which example best represents a declarative approach to infrastructure automation?

   • AA set of manual instructions that an engineer follows step by step
   • BA configuration file that states 'there should be three web servers with the latest OS patch'
   • CA script that runs commands in order to create a VM, then installs software, then configures services
   • DA Python script that uses loops and conditionals to configure each server individually
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A large enterprise uses Ansible to manage thousands of network devices. They store playbooks in Git and use a CI/CD pipeline. Recently, a change to a playbook caused a network outage because the playbook was not idempotent and re-applied a configuration that disrupted traffic. The team wants to prevent this in the future. Which combination of practices would best address the issue?

   • ARun playbooks directly in production without review
   • BUse a provisioning tool instead of Ansible
   • CImplement mandatory peer review for all playbook changes and add automated testing in a staging environment
   • DOnly use imperative scripts
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An organization uses Puppet to manage the configuration of its Linux servers. The Puppet code defines that the 'ntpd' service should be running and enabled. An administrator manually stops the service on one server to test a maintenance procedure. What happens on the next Puppet agent run?

   • APuppet disables the service because it detects a conflict.
   • BPuppet reports an error because the service was not stopped through Puppet.
   • CPuppet does nothing because the service was stopped manually.
   • DPuppet restarts the service because the desired state is 'running'.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A DevOps team is implementing an IaC workflow for a new microservices application. They want to validate Terraform configuration changes before merging them into the main branch. Which step should be part of their workflow?

   • ARun 'terraform plan' in a CI pipeline on every pull request.
   • BRun 'terraform apply' directly on the main branch after every commit.
   • CManually review the Terraform files without running any commands.
   • DRun 'terraform destroy' on the staging environment to test the configuration.
   Reveal Solution Discussion Select an answer first