350-201 Question 287
Select 3A cybersecurity engineer is tasked with deploying a secure and scalable application on a cloud infrastructure. To ensure consistency, reduce manual errors, and enable automated configuration management, the engineer decides to implement Infrastructure as Code (IaC). Which principles of IaC should the engineer prioritize to achieve these goals?
- A
Use version control to track and manage infrastructure changes.
- B
Rely on manual configuration to ensure flexibility in deployment.
- C
Write declarative code to define the desired infrastructure state.
- D
Minimize automation to retain full manual control over the infrastructure.
- E
Test infrastructure code in isolated environments before production deployment.
Show answer and explanation
Correct answers: A, C, E
Explanation
Infrastructure as Code (IaC) is a practice that allows engineers to manage and provision infrastructure using code, ensuring consistency, automation, and scalability. Key principles of IaC include using version control for tracking changes, writing declarative code to define desired states, and testing code in isolated environments to prevent errors in production. These practices collectively enhance security, reliability, and operational efficiency.
- A. Correct.
Using version control is a foundational principle of IaC that ensures infrastructure changes are tracked, auditable, and reversible. This helps maintain consistency and reduces the risk of errors.
- B. Incorrect.
Relying on manual configuration contradicts the core principles of IaC, which focus on automation and reducing human error.
- C. Correct.
Declarative code is a key principle of IaC, allowing engineers to specify the desired state of infrastructure without detailing procedural steps. This promotes consistency and scalability.
- D. Incorrect.
Minimizing automation goes against the essence of IaC, which is designed to leverage automation to improve efficiency and reduce human intervention.
- E. Correct.
Testing infrastructure code in isolated environments is a best practice in IaC to validate configurations, identify potential issues, and ensure the code functions as expected before deployment to production.