4.13 Describe the Principles of Infrastructure as Code 350-201 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security engineer is writing an IaC module to configure access control lists (ACLs) on multiple firewalls. The module will be run repeatedly as part of a CI/CD pipeline. Which property is essential to ensure that running the module multiple times does not produce unintended changes?

   • AIdempotency
   • BVersion pinning
   • CImperative sequencing
   • DParallelism
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   An IaC tool is being used to manage a large number of network devices. The team notices that the tool sometimes fails to apply the desired state because of transient network issues. What is the best way to ensure the desired state is eventually achieved?

   • AManually apply the configuration when the tool fails.
   • BIgnore the failures and assume the next run will succeed.
   • CConfigure the tool to retry failed operations automatically.
   • DUse a different tool that is guaranteed to succeed.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is considering moving from mutable to immutable infrastructure for its network devices. They are concerned about the operational overhead of replacing devices. Which factor is most important to evaluate?

   • AThe compatibility of existing monitoring tools with immutable devices.
   • BThe ability to apply security patches without downtime.
   • CThe cost of storing configuration files in version control.
   • DThe time and resources required to provision and decommission devices.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An organization wants to manage its network device configurations with IaC. They need a solution that automatically corrects any configuration that drifts from the intended state. Which approach best meets this requirement?

   • ADeclarative configuration files that specify the desired end state, applied by an IaC tool that reconciles the current state.
   • BA backup and restore solution that reverts device configurations to a known good state.
   • CImperative scripts that run in a specific order to configure devices.
   • DA set of manual runbooks that operators follow to reconfigure devices.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security team is evaluating whether to adopt immutable infrastructure for their network devices. They want to reduce the risk of configuration drift and ensure that every device is in a known state. What is a key trade-off they should consider?

   • AImmutable infrastructure is only suitable for cloud environments, not on-premises devices.
   • BImmutable infrastructure requires more storage and compute resources because new devices are deployed instead of updating existing ones.
   • CImmutable infrastructure eliminates the need for version control.
   • DImmutable infrastructure makes it harder to apply security patches because devices must be replaced.
   Reveal Solution Discussion Select an answer first