Implementing Infrastructure as Code (IaC) DSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security team wants to enforce compliance policies on infrastructure as code before deployment. They use Terraform and want to automatically check that all S3 buckets are private. Which tool or practice should they integrate into their CI/CD pipeline?

   • AUse manual code reviews to check for private buckets
   • BUse AWS Config rules to check bucket policies after deployment
   • CUse Terraform validate to check the syntax of the code
   • DUse a policy-as-code tool like OPA (Open Policy Agent) to evaluate Terraform plans
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A team uses Terraform to manage a large infrastructure. They want to implement a monitoring solution that can detect security anomalies, such as a security group being opened to the world. They also want to be able to trace the change back to the person who made it. Which combination of tools should they use?

   • AUse a scheduled terraform plan and alert on any changes
   • BUse Terraform import to track changes
   • CUse a policy-as-code tool like OPA to check for open security groups and use Terraform state versioning to track changes
   • DUse AWS CloudTrail to log API calls and use a manual review process
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a key benefit of integrating Infrastructure as Code (IaC) into a CI/CD pipeline?

   • AIt guarantees that no security vulnerabilities exist in the infrastructure
   • BIt removes the need for monitoring after deployment
   • CIt eliminates the need for version control on infrastructure code
   • DIt enables automated and consistent infrastructure deployments
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company wants to implement a GitOps workflow for their Kubernetes infrastructure. They want to use a tool that automatically syncs the cluster state with the desired state defined in a Git repository. Which tool should they choose?

   • AAnsible
   • BTerraform
   • CHelm
   • DArgo CD
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A developer accidentally committed a Terraform state file containing plaintext secrets to a Git repository. The team needs to remediate this immediately. Which action should be taken FIRST?

   • AUse `git filter-branch` to remove the file from history.
   • BRotate all secrets that were in the state file.
   • CDelete the file from the repository and force-push the history.
   • DChange the repository visibility to private.
   Reveal Solution Discussion Select an answer first