4.13 Describe the Principles of Infrastructure as Code 350-201 Practice Questions (Page 7)

Questions 31–32

1. 31foundation · easy

   Which statement best describes the purpose of Infrastructure as Code?

   • ATo replace all configuration management tools with a single universal scripting language
   • BTo define infrastructure in code so it can be versioned, reviewed, and deployed automatically
   • CTo eliminate the need for any human involvement in IT operations
   • DTo provide a real-time dashboard for monitoring network performance
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security team is implementing IaC to manage firewalls. They want to ensure that any manual change to a firewall is automatically reverted to the desired state. However, they also need to allow temporary changes during incident response. What is the best approach?

   • AUse immutable infrastructure and replace firewalls for any change, including temporary ones.
   • BAllow manual changes but log them and require that they be reverted within 24 hours.
   • CConfigure the IaC tool to automatically remediate any drift, and use a separate process to approve and document temporary changes.
   • DDisable automatic remediation and rely on manual audits to detect drift.
   Reveal Solution Discussion Select an answer first