Cloud Automation GCLD Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company uses Azure Automation to manage runbooks that perform routine maintenance tasks on Azure VMs. The team wants to ensure that runbooks are tested and that changes are reviewed before being run in production. What is the best way to achieve this?

   • AUse Azure Automation's built-in scheduler to run runbooks at a specific time without testing.
   • BCreate a copy of the runbook for each change and run them all in production.
   • CStore runbooks in a version control system, use a test automation account to validate changes, and promote to the production automation account after review.
   • DRun runbooks directly in the production automation account and rely on Azure's audit logs.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   An organization uses Ansible to manage configuration of Linux servers in a hybrid cloud environment. They need to ensure that the same playbook runs consistently across different environments (dev, test, prod) without changing the playbook logic. What is the best practice to achieve this?

   • ACreate separate playbooks for each environment to handle differences.
   • BUse Ansible tags to conditionally skip tasks in different environments.
   • CUse Ansible variables and inventory files to define environment-specific settings.
   • DHardcode environment-specific values directly in the playbook.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company wants to automate the creation of cloud resources for new projects. The team wants to ensure that each project gets a consistent set of resources (e.g., VPC, subnets, security groups) and that the process is repeatable. They also want to avoid manual intervention. Which approach is most effective?

   • AUse a configuration management tool like Ansible to provision resources.
   • BCreate a new CloudFormation template for each project based on the previous one.
   • CCreate a Terraform module that defines the standard resources and use it for each new project.
   • DHave an administrator manually create resources using a checklist.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   How can security controls be automated in cloud environments?

   • ABy using the same password for all cloud accounts
   • BBy disabling security monitoring to reduce false positives
   • CBy using policy-as-code to automatically enforce security rules during deployment
   • DBy requiring manual approval for every security change
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A team is using Terraform to manage infrastructure. They want to ensure that the Terraform code is secure and that secrets are not exposed. They also want to enforce a policy that all resources are tagged with an owner. Which approach best addresses these concerns?

   • AStore secrets in the Terraform state file and rely on access controls.
   • BManually review all Terraform code before deployment and ensure tags are added.
   • CUse a static analysis tool like tfsec or Checkov in the CI pipeline to scan Terraform code for security issues and enforce tagging policies.
   • DUse Terraform's built-in validation command to check for syntax errors only.
   Reveal Solution Discussion Select an answer first