Infrastructure as Code and Configuration Management Tools DSE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of Infrastructure as Code (IaC)?

   • ATo replace all configuration management tools with a single scripting language
   • BTo manage infrastructure through manual, step-by-step procedures documented in runbooks
   • CTo provision and manage infrastructure using machine-readable definition files instead of manual processes
   • DTo create infrastructure diagrams and documentation automatically from cloud provider APIs
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A startup is moving from manual server setup to code-defined infrastructure. They want to ensure that the same configuration is applied consistently across development, staging, and production environments, and they want to avoid configuration drift. The team is evaluating Terraform and Ansible. They need to define the desired end state of their infrastructure, not the step-by-step commands to achieve it. Which tool and approach should they choose?

   • AUse Ansible with imperative playbooks that specify the exact order of tasks to configure servers.
   • BUse Terraform with declarative configuration files that describe the desired infrastructure state.
   • CUse Ansible with ad-hoc commands to apply configuration changes manually as needed.
   • DUse Terraform with provisioners that run shell scripts to configure the OS after provisioning.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A large enterprise is adopting DevSecOps. They have a requirement that all infrastructure changes must be traceable to a specific change request and must be automatically scanned for security misconfigurations. They also need to ensure that the infrastructure is provisioned consistently across multiple cloud providers (AWS and Azure). Which combination of tools and practices best meets these requirements?

   • AUse Ansible to provision all resources in both clouds, and rely on manual code reviews for security.
   • BUse a custom Python script to call the AWS and Azure APIs, and store the script in a shared drive.
   • CUse AWS CloudFormation for AWS resources and Azure Resource Manager templates for Azure resources, and integrate them into a CI pipeline with a static scanner.
   • DUse Terraform with a multi-cloud provider setup, store the configuration in a version-controlled repository, and run a static analysis tool like Checkov in the CI pipeline.
   Reveal Solution Discussion Select an answer first
5. 14application · easy

   A company is moving its infrastructure to AWS and wants to use Infrastructure as Code. They have a strong preference for using AWS-native services and want to define their infrastructure in JSON or YAML templates. They also want to integrate with AWS Identity and Access Management (IAM) for fine-grained permissions on infrastructure changes. Which tool should they use?

   • ATerraform, because it supports AWS and many other providers.
   • BAWS CloudFormation, because it is AWS-native and uses templates in JSON or YAML.
   • CPuppet, because it can manage AWS resources through modules.
   • DAnsible, because it can manage AWS resources through modules.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which configuration management tool uses a pull-based model where agents on managed nodes periodically check in with a central server?

   • ATerraform
   • BPuppet
   • CAnsible
   • DCloudFormation
   Reveal Solution Discussion Select an answer first