Cloud Automation GCLD Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How do configuration management tools help maintain cloud environments?

   • ABy providing a graphical interface for all cloud operations
   • BBy manually documenting all changes made by administrators
   • CBy automatically scaling resources based on demand
   • DBy enforcing a desired state and correcting drift from that state
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A cloud administrator wants to automate routine maintenance tasks in Azure, such as shutting down idle VMs after business hours and starting them in the morning. They want a solution that requires minimal coding and can be scheduled. Which Azure service is most appropriate?

   • AAzure Scheduler (deprecated) to run scripts.
   • BAzure Logic Apps with a recurrence trigger and HTTP actions to call Azure REST API.
   • CAzure Functions with a timer trigger and the Azure SDK.
   • DAzure Automation with runbooks and schedules.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company wants to implement a CI/CD pipeline for a critical application. The security team requires that all secrets (e.g., API keys) be stored securely and not appear in logs or source code. The development team wants to automate deployments as much as possible. Which approach best meets both requirements?

   • AEmbed secrets in the pipeline configuration file and rely on access controls.
   • BHave developers manually enter secrets during each deployment.
   • CStore secrets in the source code repository and use them directly in the pipeline.
   • DUse a secrets management service (e.g., AWS Secrets Manager) and reference secrets in the pipeline using secure variables.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A cloud administrator frequently creates and deletes temporary test environments. The administrator wants to reduce the time spent on repetitive tasks and ensure that each environment is created with the same configuration. What is the most effective approach?

   • AUse the cloud provider's web console to manually create resources each time.
   • BCreate a new script for each environment to handle unique requirements.
   • CCreate a detailed runbook that the administrator follows each time.
   • DUse a configuration management tool like Ansible to define the environment and apply it on demand.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization uses AWS CloudFormation to deploy infrastructure. The security team wants to ensure that all S3 buckets created by the templates are encrypted by default. What is the most effective way to enforce this requirement?

   • AEnable S3 default encryption in the AWS account settings.
   • BCreate a Lambda function that runs every hour to find and fix unencrypted buckets.
   • CUse an AWS Config rule to detect unencrypted buckets after they are created.
   • DAdd an S3 bucket encryption configuration to every bucket resource in the CloudFormation templates.
   Reveal Solution Discussion Select an answer first