Infrastructure as Code and Configuration Management Tools DSE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a key benefit of using Infrastructure as Code?

   • AIt eliminates the need for any cloud provider, as infrastructure is defined locally
   • BIt guarantees that no security vulnerabilities will ever exist in the infrastructure
   • CIt automatically fixes any configuration drift without human intervention
   • DIt allows infrastructure to be versioned, reviewed, and deployed consistently across environments
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is adopting a DevSecOps pipeline and wants to ensure that all infrastructure changes are reviewed for security compliance before they are deployed. They currently use Terraform to provision AWS resources. Which of the following is the most effective way to integrate security checks into their existing IaC workflow?

   • ARun a static analysis tool like Checkov or tfsec on the Terraform code in a CI pipeline stage before the plan is applied.
   • BConfigure Terraform to automatically apply changes and rely on AWS Config rules to remediate any non-compliant resources.
   • CManually review the Terraform plan output in a change advisory board meeting before applying it.
   • DUse a post-deployment vulnerability scanner on the running infrastructure to identify issues after they are live.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How can IaC and configuration management tools be integrated into a DevSecOps pipeline to enhance security?

   • ABy storing infrastructure code in a private repository without any review
   • BBy running security scans on the infrastructure code before deployment
   • CBy using configuration management to disable all security features for faster deployment
   • DBy replacing all manual security testing with automated deployment
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A DevOps team is building a CI/CD pipeline for a microservices application. They want to ensure that the infrastructure is provisioned consistently across environments and that security policies are applied automatically. They are considering using Terraform to provision the cloud resources and Ansible to configure the servers. Which pipeline design best integrates these tools for security and compliance?

   • ARun Ansible playbooks first to configure servers, then run Terraform to provision the infrastructure around them.
   • BRun Terraform apply manually after the pipeline, and use Ansible only for ad-hoc troubleshooting.
   • CRun Terraform plan and apply in the pipeline, then run Ansible playbooks to configure the servers, and include security scanning of the Terraform plan.
   • DUse Terraform only and skip Ansible, because Terraform can handle both provisioning and configuration.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the key difference between declarative and imperative approaches in IaC?

   • ADeclarative is used for configuration management, while imperative is used for infrastructure provisioning
   • BDeclarative requires a central server, while imperative does not
   • CDeclarative specifies the desired end state, while imperative specifies the exact steps to achieve that state
   • DDeclarative is always more secure than imperative
   Reveal Solution Discussion Select an answer first