Integrating Configuration Orchestration DSE Practice Questions (Page 9)

Questions 41–42

1. 41foundation · easy

   In a DevSecOps pipeline, where is a configuration orchestration tool typically integrated to enforce security baselines?

   • ADuring the planning stage to define project requirements
   • BDuring the deployment stage to configure target environments
   • CDuring the build stage to compile the application
   • DDuring the monitoring stage to collect application logs
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A large enterprise uses a mix of Terraform for infrastructure and Ansible for configuration. They have a compliance requirement that any change to a production security group must be approved by the security team. They also want to detect and remediate drift automatically. How should they design the pipeline to balance compliance and automation?

   • AUse a CI pipeline that runs 'terraform plan' and 'ansible-playbook --check' to detect drift, then requires a security team approval before applying changes to production.
   • BUse separate pipelines for infrastructure and configuration, with no approval for either.
   • CHave the security team manually review all changes after they are applied.
   • DAutomatically apply all changes to production without approval to ensure rapid remediation.
   Reveal Solution Discussion Select an answer first