Utilizing Configuration Management GCSA Practice Questions (Page 8)

Questions 36–40

1. 36application · easy

   A company is migrating to the cloud and wants to ensure that all servers have the same security patches and software versions. They plan to use a configuration management tool. Which benefit of configuration management is most directly related to this goal?

   • AImproved performance of applications
   • BFaster deployment of new servers
   • CReduced need for manual monitoring
   • DConsistent and reliable infrastructure
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company uses Puppet to manage its infrastructure. The security team requires that only authorized personnel can modify the Puppet code and that all changes are logged. Which control should they implement?

   • AUse Git with branch protection and require pull requests for all changes
   • BUse a shared folder on the Puppet master and restrict access to the security team
   • CUse a CI pipeline that automatically deploys any change to the Puppet master
   • DGive all developers write access to the Puppet master and rely on the code review process
   Reveal Solution Discussion Select an answer first
4. 38application · easy

   A small company has a single administrator who manually configures servers. After a recent outage, they discovered that one server had a different timezone and another had an outdated package version. They want to prevent this from happening again. Which action should they take?

   • ASchedule a weekly meeting to review server configurations
   • BUse a monitoring tool to alert when servers differ, and fix them manually
   • CCreate a detailed runbook and require the administrator to follow it every time
   • DImplement a configuration management tool to define the desired state of all servers and enforce it automatically
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which access control practice is important for configuration management systems?

   • ADisabling audit logs to reduce storage costs
   • BUsing role-based access control (RBAC) to limit permissions to what is needed
   • CSharing a single admin account among the team
   • DGranting all team members full administrative access to simplify workflows
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A team uses Terraform to provision cloud infrastructure and Ansible to configure the servers after provisioning. They want to integrate both tools into a CI/CD pipeline so that any change to the infrastructure code or configuration code is automatically applied to a staging environment before production. Which pipeline design best achieves this?

   • AHave the pipeline run Terraform plan and Ansible syntax check, then require a manual approval before applying to staging.
   • BRun Terraform apply and Ansible playbook in the same pipeline stage, with no manual approval.
   • CUse a single pipeline that runs Ansible first, then Terraform, because configuration must happen before infrastructure is created.
   • DCreate two pipeline stages: first, run Terraform apply to provision or update the staging infrastructure; second, run Ansible playbooks to configure the servers. Then, after successful tests, promote to production with a manual approval step.
   Reveal Solution Discussion Select an answer first