A company is building a new microservices platform. They need to provision the underlying Kubernetes cluster and the cloud resources (like load balancers and databases). They also need to deploy and configure the microservices themselves. The team is considering using Terraform for the infrastructure and Ansible for configuration management. Which statement best describes the most effective division of responsibility?

Use Ansible to provision the Kubernetes cluster and cloud resources, and use Terraform to configure the nodes and deploy the microservices.

Use Terraform for both provisioning and configuration, and do not use Ansible.

Use Terraform to provision the Kubernetes cluster and cloud resources, and use Ansible to configure the nodes and deploy the microservices.

Use Ansible for both provisioning and configuration, and do not use Terraform.

AWS CloudFormation is an example of which type of tool?

A configuration management tool for installing software on EC2 instances

An infrastructure as code service that provisions AWS resources using templates

A container orchestration platform for managing Kubernetes clusters

A monitoring tool that tracks AWS resource utilization

A multi-cloud company uses both AWS and Azure. They want to adopt Infrastructure as Code to provision resources in both clouds. They also want to use a single tool to manage the lifecycle of resources, including updates and deletions. They have a preference for a declarative approach. Which tool should they choose?

Azure Resource Manager (ARM) templates, because they are declarative and support Azure resources.

Terraform, because it supports multiple cloud providers and is declarative.

Ansible, because it can provision resources in both clouds using modules.

AWS CloudFormation, because it is declarative and supports AWS resources.

Which of the following is a typical task performed by a configuration management tool?

Scaling a containerized application based on CPU usage

Building a Docker image from a Dockerfile

Installing and configuring the Nginx web server on a Linux host

Creating a virtual network in a cloud provider

A team uses Chef to manage configuration on a fleet of servers. They have a policy that requires all servers to have a specific security package installed. However, they have found that some servers are missing the package because the Chef client run failed on those servers. They want to ensure that the package is installed on all servers and that any failures are reported. Which approach should they take?

Use Chef's 'enforce' mode to ensure the package is installed and configure the Chef client to report failures to a central server.

Use Chef's 'audit' mode to check for the package and report failures, but do not install it.

Use Chef's 'why-run' mode to see what would change, but do not apply changes.

Use a manual process to install the package on the servers that failed.

EC-CouncilDevSecOps Essentials

Domain 3Objective 5

Infrastructure as Code and Configuration Management Tools DSE Practice Questions (Page 6)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

8concepts

Questions 26–30

26expert · hard
A company is building a new microservices platform. They need to provision the underlying Kubernetes cluster and the cloud resources (like load balancers and databases). They also need to deploy and configure the microservices themselves. The team is considering using Terraform for the infrastructure and Ansible for configuration management. Which statement best describes the most effective division of responsibility?
Select an answer first
27foundation · easy
AWS CloudFormation is an example of which type of tool?
Select an answer first
28expert · medium
A multi-cloud company uses both AWS and Azure. They want to adopt Infrastructure as Code to provision resources in both clouds. They also want to use a single tool to manage the lifecycle of resources, including updates and deletions. They have a preference for a declarative approach. Which tool should they choose?
Select an answer first
29foundation · easy
Which of the following is a typical task performed by a configuration management tool?
Select an answer first
30expert · hard
A team uses Chef to manage configuration on a fleet of servers. They have a policy that requires all servers to have a specific security package installed. However, they have found that some servers are missing the package because the Chef client run failed on those servers. They want to ensure that the package is installed on all servers and that any failures are reported. Which approach should they take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Infrastructure as Code and Configuration Management Tools DSE Practice Questions (Page 6)

Questions 26–30

AWS CloudFormation is an example of which type of tool?

Which of the following is a typical task performed by a configuration management tool?

Keep studying — DevSecOps Toolchain