A company currently provisions its infrastructure through a series of manual steps documented in a runbook. They are experiencing inconsistencies between environments and want to adopt Infrastructure as Code. What is the primary benefit they will gain from this transition?

Ensuring that all environments are provisioned identically and reproducibly.

Making infrastructure changes without any testing.

Automatically fixing any configuration drift that occurs.

Eliminating the need for any manual intervention in the future.

A team uses Terraform to manage infrastructure in a shared AWS account. Two developers are working on different modules and accidentally run `terraform apply` at the same time, causing state corruption. What should they implement to prevent this?

Store the state file in a shared network drive

Use `terraform refresh` before every apply

Have developers manually coordinate who runs apply

Use a remote backend with state locking, such as an S3 bucket with DynamoDB

A company uses Terraform to manage its AWS infrastructure. After a manual change to a security group rule, the next `terraform plan` shows a diff. The team wants to prevent such manual changes from going unnoticed in the future. What should they implement?

Run `terraform apply` automatically on a schedule

Enable drift detection using a tool like Terraform Cloud or a CI job that runs `terraform plan` and alerts on diffs

Use `terraform refresh` before every apply

Disable the AWS console for all users

What is the primary benefit of integrating Infrastructure as Code into a CI/CD pipeline?

It guarantees that no security issues will ever occur.

It eliminates the need for version control.

It allows infrastructure changes to be automatically tested and deployed in a consistent manner.

It removes the need for monitoring deployed infrastructure.

GIAC Cloud Security Automation

Domain 1Objective 3

Deploying Cloud Infrastructure as Code GCSA Practice Questions (Page 1)

Part of the DevOps and Cloud Infrastructure domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

10concepts

Questions 1–5

1foundation · easy
Which Infrastructure as Code tool is commonly used to provision cloud resources across multiple cloud providers using a declarative configuration language?
Select an answer first
2application · medium
A company currently provisions its infrastructure through a series of manual steps documented in a runbook. They are experiencing inconsistencies between environments and want to adopt Infrastructure as Code. What is the primary benefit they will gain from this transition?
Select an answer first
3application · medium
A team uses Terraform to manage infrastructure in a shared AWS account. Two developers are working on different modules and accidentally run `terraform apply` at the same time, causing state corruption. What should they implement to prevent this?
Select an answer first
4application · medium
A company uses Terraform to manage its AWS infrastructure. After a manual change to a security group rule, the next `terraform plan` shows a diff. The team wants to prevent such manual changes from going unnoticed in the future. What should they implement?
Select an answer first
5foundation · easy
What is the primary benefit of integrating Infrastructure as Code into a CI/CD pipeline?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.