4.13 Describe the Principles of Infrastructure as Code 350-201 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a typical step in an Infrastructure as Code workflow?

   • AAuthoring the infrastructure code, then testing it, and finally deploying it
   • BManually configuring each server and then documenting the changes
   • CDeploying directly to production without any review or testing
   • DUsing a spreadsheet to track infrastructure changes
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security team uses IaC to manage firewall rules. They have a compliance requirement that any change to a firewall rule must be approved by a security officer. They also want to automatically remediate drift. How can they achieve both?

   • AUse a change management system that integrates with the IaC tool, requiring approval before any change is applied.
   • BDisable automatic remediation and require manual approval for every change.
   • CUse immutable infrastructure so that drift cannot occur.
   • DAutomatically remediate drift without approval, but log all changes for later review.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of Infrastructure as Code (IaC)?

   • ATo automatically patch operating systems and applications on a scheduled basis
   • BTo manage infrastructure through manual, step-by-step procedures documented in runbooks
   • CTo provision and manage infrastructure using machine-readable definition files instead of manual processes
   • DTo provide a graphical interface for configuring network devices in real time
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A large enterprise is adopting IaC for its network infrastructure. They have multiple teams that manage different parts of the network, and they need to ensure that changes are tested in a realistic environment before production. However, they have limited resources and cannot maintain a full production replica. What is the most effective approach?

   • ADeploy all changes directly to production and rely on rollback if issues occur.
   • BUse a configuration management tool that automatically applies changes to production without testing.
   • CCreate a separate staging environment for each team to avoid conflicts.
   • DUse a shared staging environment that mirrors production as closely as possible, and run automated tests before each deployment.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company uses IaC to manage its network devices. They have experienced configuration drift because engineers sometimes make manual changes for quick fixes. Which combination of practices would most effectively prevent and remediate drift?

   • ADisable direct administrative access to the devices.
   • BUse a configuration backup tool and restore from backup when drift is detected.
   • CIncrease the frequency of manual audits of device configurations.
   • DEnforce a policy that all changes go through IaC, and run a periodic drift detection and remediation job.
   Reveal Solution Discussion Select an answer first