Implementing Infrastructure as Code (IaC) DSE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which tool is specifically designed to manage infrastructure across multiple cloud providers using a declarative configuration language?

   • ACloudFormation
   • BTerraform
   • CPuppet
   • DAnsible
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which scenario is the best fit for using AWS CloudFormation?

   • AManaging infrastructure exclusively within the AWS ecosystem
   • BManaging resources across AWS, Azure, and Google Cloud
   • CManaging a hybrid infrastructure spanning AWS and on-premises servers
   • DConfiguring software on existing virtual machines
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A team uses Terraform to manage its infrastructure. They notice that some resources have been manually changed in the cloud console, causing the actual state to differ from the Terraform configuration. What should they implement to detect and address this drift?

   • ARecreate all resources from scratch every time
   • BDisable the cloud console to prevent manual changes
   • CUse terraform refresh to update the state file and ignore the changes
   • DRun terraform plan regularly and use a CI job to compare the plan output with the desired state
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is adopting IaC and wants to ensure that secrets (e.g., database passwords, API keys) are not stored in plaintext in Terraform configuration files. They also want to integrate secret scanning into their CI/CD pipeline. Which approach is the most secure and practical?

   • AUse Terraform's `sensitive` parameter to mark variables as sensitive.
   • BUse a secrets management tool like HashiCorp Vault and reference secrets in Terraform using data sources; integrate a secret scanner like TruffleHog into the pipeline.
   • CStore secrets in environment variables in the CI/CD system and reference them in Terraform.
   • DEncrypt the Terraform configuration files with GPG and store the key in the repository.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is adopting IaC to improve security and consistency. They want to ensure that all infrastructure changes are reviewed, tested, and deployed in a consistent manner. They also want to avoid configuration drift. Which approach best meets these goals?

   • AUse a manual process where developers run terraform apply locally
   • BUse a CI/CD pipeline that runs terraform plan, security scans, and requires approval before applying
   • CUse a single tool like Terraform Cloud without any pipeline integration
   • DUse a scheduled job that runs terraform apply every night
   Reveal Solution Discussion Select an answer first