Infrastructure as Code (IaC) Security ECDE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · medium

   In the context of IaC security, why is it important to treat infrastructure definitions as code?

   • ABecause it guarantees that no security vulnerabilities will exist in the infrastructure.
   • BBecause it automatically encrypts all data at rest and in transit.
   • CBecause it allows infrastructure changes to be peer-reviewed, versioned, and audited like application code.
   • DBecause code can be executed faster than manual configuration.
   Reveal Solution Discussion Select an answer first
2. 7foundation · medium

   Which of the following is a typical IaC misconfiguration that could lead to a security breach?

   • AHardcoding database passwords in the IaC template
   • BUsing variables to parameterize resource names
   • CDefining network security groups with specific port rules
   • DUsing a separate module for each environment
   Reveal Solution Discussion Select an answer first
4. 8foundation · medium

   Which of the following is a common Infrastructure as Code (IaC) tool that uses a declarative language and is cloud-agnostic?

   • ATerraform
   • BAnsible
   • CChef
   • DCloudFormation
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to improve the security of its containerized workloads by ensuring that containers are built once and deployed identically across environments. They also want to avoid configuration drift. Which approach should they adopt?

   • AUse the latest tag for the image and pull it fresh in each environment.
   • BBuild a container image with a specific tag, scan it for vulnerabilities, and deploy that exact image to all environments without modifying it.
   • CDeploy containers and then use configuration management tools to update them in place.
   • DBuild a new image for each environment with environment-specific configurations baked in.
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   What is a security benefit of using immutable infrastructure in IaC-based deployments?

   • AIt automatically encrypts all data on the infrastructure.
   • BIt eliminates the need for security patching.
   • CIt reduces the attack surface by preventing unauthorized changes to running systems.
   • DIt ensures that all infrastructure is deployed in a private network.
   Reveal Solution Discussion Select an answer first