Deploying Cloud Infrastructure as Code GCSA Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company uses Terraform to manage infrastructure across multiple AWS accounts. They need to ensure that all changes are logged and that any unauthorized change is detected quickly. They also want to minimize the operational overhead of managing separate monitoring for each account. What should they implement?

   • ASet up separate monitoring in each account without aggregation
   • BUse Terraform state files as the only audit log
   • CUse `terraform output` to track changes
   • DEnable AWS CloudTrail in each account and aggregate logs into a central S3 bucket
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is considering adopting Infrastructure as Code. They currently have a mix of manual and scripted processes. They want to improve consistency and reduce the risk of human error. They also want to be able to detect when the actual infrastructure drifts from the desired state. Which approach should they take?

   • AUse a configuration management tool like Puppet to manage all infrastructure.
   • BUse an imperative IaC tool like Ansible and run it on a schedule to enforce the desired state.
   • CUse a declarative IaC tool like Terraform and run `terraform plan` regularly to detect drift.
   • DUse a combination of manual processes and scripts to manage infrastructure.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which Infrastructure as Code tool is AWS-specific and uses JSON or YAML templates to define resources?

   • ATerraform
   • BCloudFormation
   • CChef
   • DAnsible
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A team is using Terraform with a remote backend. They notice that after a failed `terraform apply`, the state file is locked, and subsequent operations fail. They need to resolve this quickly without risking data corruption. What should they do?

   • AWait for the lock to expire automatically
   • BRun `terraform force-unlock <lock-id>`
   • CManually delete the lock file from the backend
   • DRun `terraform refresh` to clear the lock
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of unit testing in Infrastructure as Code?

   • ATo verify that individual modules or components of the IaC code work as expected.
   • BTo ensure that the infrastructure meets security compliance standards.
   • CTo test the entire infrastructure stack in a production-like environment.
   • DTo check the performance of the deployed infrastructure.
   Reveal Solution Discussion Select an answer first