350-201 Question 286
Select 3A cybersecurity team is tasked with ensuring consistent deployment of firewall configurations across multiple environments (development, staging, and production). They decide to implement Infrastructure as Code (IaC) to manage these configurations. Which principles of IaC should the team follow to achieve this objective effectively?
- A
Use version control to track changes to configuration files.
- B
Manually adjust configurations in each environment to ensure deployment accuracy.
- C
Leverage automation tools to deploy configurations consistently across environments.
- D
Test configurations in isolated environments before deploying to production.
- E
Use different scripting languages for each environment to handle specific requirements.
Show answer and explanation
Correct answers: A, C, D
Explanation
Infrastructure as Code (IaC) emphasizes automation, consistency, and version control to manage infrastructure configurations effectively. By leveraging tools for automation, using version control systems, and validating configurations in isolated environments, teams can achieve reliable and repeatable deployments across different environments, reducing the risk of configuration drift and human error.
- A. Correct.
Version control is a core principle of IaC as it allows tracking, auditing, and rolling back changes to ensure consistency and accountability.
- B. Incorrect.
Manually adjusting configurations is the opposite of IaC principles, which emphasize automation and consistency to minimize human error.
- C. Correct.
Automation tools are central to IaC, enabling consistent and repeatable deployments across various environments without manual intervention.
- D. Correct.
Testing configurations in isolated environments aligns with IaC principles, ensuring that deployments are validated before being applied to production.
- E. Incorrect.
Using different scripting languages for each environment contradicts the IaC principle of standardization, which simplifies management and reduces errors.