Utilizing Configuration Management GCSA Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a mixed environment of cloud VMs and on-premises servers. They need a configuration management solution that can manage both, with a central server that stores configuration state and provides a reporting dashboard. They also want to use a declarative approach to define the desired state. Which tool best fits these requirements?

   • AAnsible, because it uses a central server (Ansible Tower) and declarative playbooks.
   • BSaltStack, because it uses a central server (Salt Master) and declarative states.
   • CChef, because it uses a central server (Chef Server) and declarative recipes.
   • DPuppet, because it uses a central server (Puppet Server) and declarative manifests.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security team wants to audit all changes made to the configuration management system. They need to know who made a change, when, and what was changed. Which control should they implement?

   • AUse a version control system with commit history and enforce that all changes are made through pull requests
   • BEnable logging on the configuration management server
   • CTake regular backups of the configuration files
   • DUse a shared administrator account for all changes
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why is version control important for configuration files?

   • AIt provides a history of changes and enables rollback to previous versions
   • BIt eliminates the need for backups
   • CIt speeds up the execution of configuration scripts
   • DIt automatically encrypts configuration files
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company uses Chef to manage its servers. They notice that some servers have drifted from the desired state because an administrator manually changed a configuration file. The team wants to automatically revert any unauthorized changes. What should they configure?

   • AUse a script that runs once to apply the configuration and then stops
   • BSet the Chef client to run on a schedule and use resources that enforce the desired state
   • CDisable manual access to the servers so no one can change configurations
   • DConfigure a monitoring alert that notifies the team when drift is detected
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A DevOps team uses Jenkins to deploy applications. They want to use Infrastructure as Code to manage their Jenkins pipeline configuration and ensure that changes are versioned and reviewed. Which approach should they use?

   • AConfigure the pipeline directly in the Jenkins UI and export it to a file for backup
   • BUse a shared network drive to store the Jenkinsfile and copy it to Jenkins manually
   • CStore the Jenkinsfile in Git and use Jenkins Multibranch Pipeline to build from the repository
   • DWrite a shell script that generates the Jenkins job configuration and run it on a schedule
   Reveal Solution Discussion Select an answer first