Integrating Configuration Orchestration DSE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company uses Chef for configuration management and wants to integrate it with their existing monitoring system (Prometheus) to get real-time feedback on configuration changes. They also need to ensure that secrets used in Chef recipes are not exposed. Which approach best meets these requirements?

   • AUse Chef's reporting API to send events to Prometheus, but store secrets in plaintext in the recipes.
   • BUse a separate monitoring agent to detect configuration changes and rely on manual secret management.
   • CUse Chef handlers to send run events to a Prometheus push gateway, and use Chef Vault to encrypt secrets.
   • DUse a cron job to run 'chef-client' and write the output to a file that Prometheus node exporter reads.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   How does configuration orchestration contribute to the feedback loop in a DevSecOps environment?

   • ABy providing real-time visibility into configuration changes and their impact on security and compliance
   • BBy automatically fixing all configuration issues without human intervention
   • CBy replacing the need for monitoring systems entirely
   • DBy generating weekly reports for management review
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company uses Ansible for configuration management and has a monitoring system that sends alerts when a server's CPU usage is high. They want to automatically scale out by adding a new server using Ansible, but they also want to avoid unnecessary scaling due to transient spikes. What is the best approach?

   • AUse a monitoring alert that triggers an Ansible playbook to provision a new server, but only if the high CPU condition persists for a defined duration (e.g., 10 minutes).
   • BUse a scheduled Ansible playbook that checks CPU usage every hour and scales if needed.
   • CTrigger an Ansible playbook immediately on any CPU alert.
   • DManually review CPU alerts and run Ansible to add servers when needed.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which of the following is a common configuration orchestration tool used in DevSecOps pipelines?

   • AGitLab
   • BJenkins
   • CAnsible
   • DPrometheus
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company uses Terraform to manage infrastructure and wants to ensure that any manual change to a resource (e.g., a security group rule) is automatically reverted to the desired state. Which approach is most appropriate?

   • AUse Terraform's 'drift detection' feature in a CI pipeline that runs 'terraform plan' and applies the plan if changes are detected.
   • BSet up a cloud event trigger that reverts any change to the resource using a custom script.
   • CUse a configuration management tool like Ansible to modify the same resources, but only run it manually.
   • DDisable the ability to make manual changes through the cloud console using IAM policies.
   Reveal Solution Discussion Select an answer first