350-201 Question 285
Select 3A cybersecurity engineer is tasked with deploying and managing configurations for a multi-cloud infrastructure. To ensure consistency, scalability, and automation, the engineer decides to use Infrastructure as Code (IaC). Which of the following principles should the engineer prioritize to align with IaC best practices?
- A
Use version control systems to track changes in infrastructure configurations.
- B
Manually apply configuration changes to production environments for better control.
- C
Ensure infrastructure configurations are stored as declarative code.
- D
Regularly test infrastructure code in isolated environments before deployment.
- E
Rely on unique, manually provisioned environments for each deployment.
Show answer and explanation
Correct answers: A, C, D
Explanation
Infrastructure as Code (IaC) promotes automation, consistency, and repeatability in infrastructure management. Key principles include the use of version control systems for tracking changes, storing configurations as declarative code for easier management, and testing code in isolated environments to prevent unforeseen issues in production. These practices enable organizations to manage infrastructure in a scalable and reliable manner while reducing human error.
- A. Correct.
Using version control systems is a key principle of IaC, allowing for change tracking, collaboration, and rollback capabilities.
- B. Incorrect.
Manually applying configuration changes contradicts the automation and consistency principles of IaC.
- C. Correct.
Storing infrastructure configurations as declarative code ensures clarity, repeatability, and ease of deployment.
- D. Correct.
Testing infrastructure code in isolated environments ensures its correctness and reduces the risk of failures in production.
- E. Incorrect.
Relying on unique, manually provisioned environments undermines the repeatability and consistency achieved by IaC.