1a Explain What IaC Is TERRAFORM-ASSOCIATE-004 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary purpose of using Infrastructure as Code?

   • ATo provide a visual representation of the infrastructure architecture
   • BTo manage infrastructure through machine-readable definition files
   • CTo manually track infrastructure changes in a spreadsheet
   • DTo eliminate the need for any configuration management tools
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A developer is new to IaC and asks why they should use Terraform instead of writing a script that calls the cloud provider's API. What is the most important advantage of Terraform over a custom script?

   • ATerraform is easier to write because it uses a simple scripting language.
   • BTerraform does not require any credentials to run.
   • CTerraform is declarative and manages the state of resources, allowing it to detect and correct drift.
   • DTerraform is faster because it uses a compiled language.
   Reveal Solution Discussion Select an answer first
4. 23expert · medium

   A team manages a production environment that is critical to business operations. They are planning to adopt IaC. They are concerned about the risk of a misconfiguration being applied to production. Which practice is most effective in mitigating this risk?

   • AUse a configuration management tool to enforce the desired state.
   • BRely on the cloud provider's built-in rollback features.
   • CUse a version control system and require all changes to go through a pull request with peer review.
   • DApply changes directly to production to avoid delays.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A team is considering whether to use Terraform or a configuration management tool like Ansible for a new project. They need to provision a large number of cloud resources (VMs, networks, load balancers) and also configure the software on those VMs. They have a small team and want to minimize the learning curve. What is the most appropriate recommendation?

   • AUse only Terraform, because it can handle both provisioning and configuration with provisioners.
   • BUse Terraform for provisioning and Ansible for configuration, but plan for a learning curve for both tools.
   • CUse only Ansible, because it can handle both provisioning and configuration.
   • DUse a cloud provider's native IaC tool, such as CloudFormation, to minimize the number of tools.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A startup has been manually creating cloud resources through the provider's web console. After a failed deployment, they discover that a misconfigured security group was left in place, and no one can recall who changed it. They want to move to a system where infrastructure is defined in files, reviewed in pull requests, and automatically applied. Which approach best meets their needs?

   • AAdopt an Infrastructure as Code tool that provisions resources from version-controlled definition files.
   • BUse a scripting language to write a one-time script that recreates the failed deployment.
   • CUse a configuration management tool to enforce the desired state of the security group on existing servers.
   • DContinue using the console but document every change in a shared spreadsheet.
   Reveal Solution Discussion Select an answer first