Integrating Configuration Orchestration DSE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company uses Chef to manage configuration and has a monitoring system that detects when a critical service is down. They want to automatically remediate the issue by running a Chef recipe that restarts the service, but they are concerned about a potential 'flapping' scenario where the service keeps crashing and restarting. What is the best way to handle this?

   • ADisable monitoring alerts for that service to avoid triggering remediation.
   • BLet Chef restart the service as many times as needed until it stays up.
   • CUse a manual process to restart the service after monitoring alerts.
   • DImplement a circuit breaker in the monitoring-to-Chef integration that stops remediation after a certain number of attempts within a time window.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does configuration orchestration enable automated remediation of configuration drift?

   • ABy continuously comparing actual system state to the desired state and reapplying the desired configuration when drift is detected
   • BBy rolling back the entire system to a previous snapshot
   • CBy preventing any configuration changes from being made
   • DBy alerting administrators to manually fix any configuration differences
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A DevOps team uses Terraform to manage infrastructure across multiple cloud providers. They want to enforce a policy that all storage buckets must be private, but they also have a legacy application that requires a public bucket for a short period. How should they handle this exception without weakening the overall policy?

   • AUse a policy-as-code tool that allows exceptions with a time-limited approval and audit trail.
   • BManually create the public bucket in the cloud console and do not manage it with Terraform.
   • CCreate a separate Terraform configuration for the legacy application that bypasses the policy.
   • DModify the policy to allow public buckets for all resources.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What type of feedback does a monitoring system provide to configuration orchestration?

   • ACompilation errors from the build process
   • BSource code review comments from developers
   • CRuntime performance metrics that indicate whether configuration changes improved system behavior
   • DSecurity scan results from vulnerability scanners
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security team wants to enforce compliance checks before configuration changes are applied to production servers. They use Ansible for configuration management and have a set of CIS benchmark checks. What is the most effective way to integrate compliance checks into the orchestration process?

   • ARun Ansible playbooks that include compliance check tasks and fail the playbook if any check fails, preventing the configuration change from being applied.
   • BRun compliance checks separately after the configuration change is applied and alert the security team if any fail.
   • CRequire manual approval from the security team before any configuration change is applied.
   • DUse a monitoring tool to periodically scan the servers for compliance and report violations.
   Reveal Solution Discussion Select an answer first