AWS DevOps DevOps Configuration Management & Infrastructure as Code 4

Question 1

What does 'configuration drift' mean in the context of infrastructure management?

Accepted Answer

Differences between the intended configuration state and the actual running state of resources

Answer

Configuration drift occurs when the actual state of infrastructure diverges from the desired state defined in configuration code or templates.

Question 2

A team uses AWS Config to monitor CloudFormation stacks. Which AWS Config feature detects when a stack's actual resource configuration diverges from its template?

Accepted Answer

CloudFormation Drift Detection

Answer

CloudFormation Drift Detection compares the current configuration of stack resources against the expected configuration defined in the stack template.

Question 3

In a CI/CD pipeline for infrastructure, which practice involves testing CloudFormation templates for syntax errors and policy compliance before deployment?

Accepted Answer

Infrastructure pipeline with linting and policy-as-code gates

Answer

Running linters (like cfn-lint) and policy-as-code tools (like cfn-guard or OPA) in the pipeline catches template errors and compliance violations before any resources are deployed.

Question 4

Which AWS service enables you to author, test, and deploy OpsCenter runbooks (automation documents) to remediate operational issues automatically?

Accepted Answer

AWS Systems Manager Automation

Answer

AWS Systems Manager Automation runs runbooks (SSM Documents of type Automation) that can perform multi-step remediation tasks across AWS resources.

Question 5

When using Terraform with a remote backend on Amazon S3, why is DynamoDB table locking recommended?

Accepted Answer

To prevent concurrent state modifications that could corrupt the state file

Answer

DynamoDB state locking prevents multiple team members or pipeline runs from simultaneously modifying the Terraform state file, which would cause corruption.

AWS Practice Test

AWS Practice Test

AWS DevOps DevOps Configuration Management & Infrastructure as Code 4