5. Describe Principles of Infrastructure as Code 200-901 Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which scenario best illustrates the use of a configuration management tool?

   • AUsing a monitoring dashboard to view CPU usage across a server fleet
   • BUsing a script to create a virtual network and subnets in a cloud provider
   • CUsing a command-line tool to manually edit a configuration file on one server
   • DUsing a tool to ensure that the web server package and its configuration file are present on all application servers
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A network team is adopting infrastructure as code. They currently have a monolithic repository containing all Ansible playbooks and configuration files. The team is growing, and multiple engineers are working on different parts of the network (e.g., routing, switching, security). They are experiencing frequent merge conflicts and accidental changes to unrelated configurations. Which approach best addresses these issues?

   • ASplit the repository into smaller repositories or use directories with clear ownership and enforce code reviews.
   • BUse a single branch and have the most senior engineer merge all changes.
   • CContinue using the monolithic repository but require all engineers to work on the same branch.
   • DStop using version control and use a shared drive to avoid merge conflicts.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A network team manages a fleet of 200 switches. They currently use a script that logs into each switch and executes a series of CLI commands in a fixed order to configure VLANs and interfaces. The team wants to adopt infrastructure as code to reduce configuration drift. They need a solution that describes the final VLAN and interface configuration for each switch and automatically corrects any drift on subsequent runs. Which approach best meets this requirement?

   • AWrite a declarative configuration file that specifies the desired VLAN and interface state, and use a tool that reconciles the actual state to match it.
   • BReplace the script with a larger imperative playbook that includes conditional logic to skip commands if the VLAN already exists.
   • CUse a provisioning tool like Terraform to push the configuration to the switches.
   • DKeep the existing script but store it in Git and run it on a schedule.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A large enterprise uses Chef to manage thousands of servers. A security audit requires that all servers have a specific security patch installed. The Chef cookbook already defines the package resource for the patch. However, during an emergency, a server administrator manually installs the patch on a few servers. On the next Chef client run, what will happen?

   • AChef will remove the patch because it was not installed through Chef.
   • BChef will reinstall the patch to ensure it was installed by Chef.
   • CChef will report an error because the patch was installed manually.
   • DChef will verify the patch is installed and take no further action.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An organization uses Ansible to manage network device configurations. They store all playbooks in a Git repository. A junior engineer modifies a playbook to change the NTP server on all routers. After running the playbook, the engineer notices that only routers that were out of compliance were updated. What principle is this behavior an example of?

   • AIdempotency
   • BVersion control
   • CImperative model
   • DProvisioning
   Reveal Solution Discussion Select an answer first