What is the primary benefit of using orchestration tools (e.g., Ansible, Terraform) for security automation?

To consistently apply security configurations across many resources

To automatically patch all software vulnerabilities

To provide a manual process for security reviews

To replace the need for security monitoring

A company is subject to a regulation that requires them to demonstrate compliance to auditors. They need to provide evidence that their cloud environment is configured securely. They also want to automate the collection of this evidence. What should they implement?

Use a cloud security posture management (CSPM) tool that continuously assesses the environment against compliance frameworks and generates reports.

Enable cloud audit logging and store logs indefinitely.

Manually collect configuration data and compile reports before each audit.

Use a cloud monitoring tool that tracks CPU and memory usage.

Which of the following is a key practice for securing the software supply chain?

Disabling all automated security scans to save time

Using the latest version of all software without checking compatibility

Verifying the integrity of third-party dependencies

Storing all credentials in the source code repository

A company is moving a legacy application to the cloud. The security team is concerned about the shared responsibility model. They want to ensure that they understand which security aspects they are responsible for. What should they do?

Use a third-party security assessment to determine responsibilities.

Assume the cloud provider is responsible for all security aspects.

Review the cloud provider's shared responsibility model documentation and map it to their specific services.

Implement security controls only for the application layer.

In cloud IAM, what is the primary purpose of a policy attached to an IAM role?

To assign a password to the role

To log all actions performed by the role

To encrypt the data stored by the role's associated resources

To define the permissions that the role grants to its assigned users or services

LPI DevOps Tools Engineer

Domain 4Objective 1

704.1 Cloud Native Security (weight: 4) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 1)

Part of the 704 Security and Observability domain, which makes up ~26% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

Questions 1–5

1foundation · easy
What is the primary benefit of using orchestration tools (e.g., Ansible, Terraform) for security automation?
Select an answer first
2expert · hard
A company is subject to a regulation that requires them to demonstrate compliance to auditors. They need to provide evidence that their cloud environment is configured securely. They also want to automate the collection of this evidence. What should they implement?
Select an answer first
3foundation · easy
Which of the following is a key practice for securing the software supply chain?
Select an answer first
4application · medium
A company is moving a legacy application to the cloud. The security team is concerned about the shared responsibility model. They want to ensure that they understand which security aspects they are responsible for. What should they do?
Select an answer first
5foundation · easy
In cloud IAM, what is the primary purpose of a policy attached to an IAM role?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEVOPS-TOOLS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “DEVOPS-TOOLS-ENGINEER” is a trademark of its owner, used for identification only.