Deploying Cloud Infrastructure as Code GCSA Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is the primary benefit of using Infrastructure as Code (IaC) compared to manual infrastructure provisioning?

   • AIt automatically fixes any security vulnerability in the deployed infrastructure.
   • BIt eliminates the need for any human oversight during deployment.
   • CIt allows infrastructure to be provisioned and managed through machine-readable definition files, enabling consistency and repeatability.
   • DIt guarantees that infrastructure will never fail or require maintenance.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which practice is essential for securing Infrastructure as Code templates?

   • AScanning templates for security vulnerabilities and misconfigurations before deployment.
   • BUsing hard-coded credentials to simplify deployment.
   • CAvoiding the use of variables to keep templates simple.
   • DStoring secrets directly in the template for convenience.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Why is version control important for Infrastructure as Code configuration files?

   • AIt ensures that the infrastructure is always in the desired state.
   • BIt automatically deploys changes to production.
   • CIt encrypts the configuration files to protect secrets.
   • DIt provides a history of changes and enables collaboration and rollback.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A DevOps team is building a CI/CD pipeline for Terraform. They want to catch errors early and ensure that the Terraform code is syntactically correct and follows best practices before any resources are created. Which steps should they include in the pipeline before running `terraform apply`?

   • ARun `terraform apply` in a sandbox environment first, then in production.
   • BRun `terraform plan` and then `terraform apply` without any additional checks.
   • CRun `terraform fmt`, `terraform validate`, and a static analysis tool like `tfsec` or `checkov`.
   • DRun `terraform fmt` and `terraform validate` only.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A small company currently provisions infrastructure manually through the cloud console. They want to adopt Infrastructure as Code to improve consistency and reduce human error. Which benefit is most directly achieved by moving to IaC?

   • AReproducible and consistent environments through version-controlled definitions
   • BElimination of all security vulnerabilities
   • CGuaranteed zero downtime during deployments
   • DAutomatic scaling of applications based on load
   Reveal Solution Discussion Select an answer first