5. Describe Principles of Infrastructure as Code 200-901 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary role of configuration management tools such as Ansible, Puppet, and Chef?

   • ATo monitor network traffic and generate performance reports
   • BTo automate the installation, configuration, and management of software on existing systems
   • CTo create and delete cloud resources like virtual machines and networks
   • DTo provide a graphical interface for manually configuring network devices
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A network team uses Git to manage their Ansible playbooks. They have a 'main' branch that is deployed to production. A developer accidentally commits a syntax error to the 'main' branch. The error is not caught until the playbook runs in production and fails. What should the team implement to prevent this in the future?

   • AUse a pre-commit hook to run the playbook against production.
   • BDisable direct pushes to the 'main' branch and require all changes to go through pull requests.
   • CRequire all developers to test playbooks locally before committing.
   • DAdd a CI pipeline that runs 'ansible-playbook --syntax-check' on every pull request before merging.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A network team uses Git to manage Ansible playbooks. They want to ensure that the playbooks are tested in a staging environment before being deployed to production. Which Git workflow best supports this requirement?

   • ACreate a new branch for each change and merge it directly to production without testing.
   • BUse a 'staging' branch for testing and merge it into the 'production' branch only after tests pass.
   • CCommit directly to the 'production' branch and run tests after deployment.
   • DUse a single branch and rely on manual testing before pushing changes.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   An engineer uses Ansible to manage network device configurations. The playbook contains a task that ensures a specific NTP server is configured on all routers. The engineer runs the playbook twice in a row. On the second run, Ansible reports 'ok' instead of 'changed' for that task. What does this outcome demonstrate?

   • AThe playbook is not idempotent because it did not make any changes on the second run.
   • BThe playbook is idempotent because the second run did not alter the device state.
   • CThe playbook is declarative because it describes the desired NTP configuration.
   • DThe playbook failed on the first run and skipped the task on the second run.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company uses Terraform to manage its AWS infrastructure. They have a production environment and a staging environment. The staging environment is used for testing changes. An engineer modifies the Terraform configuration to add a new security group rule. The engineer runs 'terraform plan' in the staging environment and sees the change. However, when the engineer runs 'terraform plan' in the production environment, the change is not shown. What is the most likely reason?

   • AThe production environment has a different version of the Terraform configuration.
   • BThe engineer ran 'terraform plan' in the wrong directory.
   • CThe production environment uses a different Terraform state file that has not been updated with the new configuration.
   • DThe production environment does not have the security group that the rule is being added to.
   Reveal Solution Discussion Select an answer first