Cloud Automation GCLD Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the purpose of continuous integration (CI) in a CI/CD pipeline?

   • ATo automatically build and test code changes as they are committed
   • BTo manage cloud infrastructure provisioning only
   • CTo monitor application performance in production
   • DTo manually deploy code to production after every commit
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security team wants to automate the response to a specific type of security alert in AWS. When an alert is triggered, they need to automatically isolate the affected EC2 instance by changing its security group and then notify the on-call engineer. Which combination of AWS services can achieve this?

   • AAmazon GuardDuty to directly modify the security group and use Amazon SES to notify the engineer.
   • BAWS Config to detect the alert and AWS Systems Manager to change the security group and send an email.
   • CAWS Step Functions to wait for the alert and then manually change the security group via the console.
   • DAmazon CloudWatch Events (or EventBridge) to trigger an AWS Lambda function that modifies the security group and sends an SNS notification.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to enforce that all S3 buckets in their AWS account have encryption enabled. They want to automatically remediate any bucket that is created without encryption. Which AWS service can enforce this policy and automatically remediate non-compliant resources?

   • AAWS Config with a managed rule and automatic remediation action.
   • BAWS CloudTrail to log bucket creation events.
   • CAWS Trusted Advisor to check bucket encryption.
   • DAWS Identity and Access Management (IAM) policy to deny bucket creation without encryption.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a recommended best practice for cloud automation?

   • ATesting automation scripts in a non-production environment before applying them to production
   • BApplying automation scripts directly to production without review
   • CAvoiding version control to save time
   • DDisabling monitoring to reduce noise
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is migrating from a legacy environment to Google Cloud. They want to use Infrastructure as Code to manage their infrastructure. They have a requirement that the same IaC templates must work across multiple cloud providers (AWS and GCP) to avoid vendor lock-in. Which tool should they choose?

   • AAWS CloudFormation
   • BAzure Resource Manager templates
   • CTerraform
   • DGoogle Cloud Deployment Manager
   Reveal Solution Discussion Select an answer first