Integrating Configuration Orchestration DSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company uses SaltStack for configuration management and wants to integrate it with their SIEM to get real-time visibility into configuration changes. Which approach is most appropriate?

   • AUse a cron job to run 'salt-call state.apply' and send the output to the SIEM as log data.
   • BHave the SIEM periodically SSH into minions and run 'salt-call state.apply' to check for changes.
   • CConfigure SaltStack's event bus to forward events to the SIEM via a custom reactor or beacon.
   • DDisable SaltStack's event reporting and rely on the SIEM's agent to detect file changes.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company uses Ansible to manage configuration across servers. They need to store sensitive variables (e.g., API keys) securely and ensure they are not exposed in logs or version control. What is the best practice?

   • AUse Ansible Vault to encrypt sensitive variables and store the vault password in a secrets management tool like HashiCorp Vault.
   • BStore sensitive variables in plain text in a separate file that is not committed to version control.
   • CHardcode the secrets in the playbook and rely on the repository's private access controls.
   • DUse environment variables in the playbook, but do not encrypt them.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A startup is building a DevSecOps pipeline and wants to use configuration orchestration to manage both application configuration and infrastructure. They want to ensure that any change to configuration is automatically tested and deployed. Which tool combination is most aligned with this goal?

   • AUse a custom script to manage configuration and deploy it manually.
   • BUse only Ansible for both infrastructure and application configuration.
   • CUse only Terraform for both infrastructure and application configuration.
   • DUse Terraform for infrastructure provisioning and Ansible for application configuration, both integrated into a CI/CD pipeline.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company uses SaltStack for configuration orchestration and has a monitoring system that tracks the state of services. They want to automatically remediate any service failure, but they also want to ensure that the remediation does not mask a deeper issue that requires human investigation. What is the best way to achieve this?

   • AAutomatically run a Salt state to restart the service, but also create a high-priority alert for the team to investigate the root cause.
   • BOnly alert the team and do not automatically remediate.
   • CAutomatically restart the service and do not alert anyone, assuming the restart will fix the issue.
   • DRestart the service multiple times automatically before alerting.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How does configuration orchestration integrate with monitoring systems to provide feedback on configuration changes?

   • ABy sending configuration change events to the monitoring system for alerting and visualization
   • BBy replacing the monitoring system's data collection agents
   • CBy storing configuration data in the monitoring database
   • DBy directly modifying the monitoring system's alert rules
   Reveal Solution Discussion Select an answer first