Practice Test GeeksAWS Practice Test
← All AWS Flashcard Decks

DevOps Configuration Management & Infrastructure as Code Flashcards

7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 DevOps Configuration Management & Infrastructure as Code flashcards as text

  1. A team wants to enforce that all EC2 instances launched via CloudFormation must use approved AMIs. Which AWS service enforces this as a preventive control?

    Answer: AWS CloudFormation Guard (cfn-guard)

    CloudFormation Guard allows you to write policy-as-code rules that validate CloudFormation templates before deployment, blocking non-compliant resources from being created.

  2. In AWS CloudFormation, what is the purpose of a Change Set?

    Answer: To preview proposed changes to a stack before executing the update

    A Change Set shows a summary of proposed changes to a CloudFormation stack, allowing you to review and understand the impact before executing the actual update.

  3. A DevOps team uses Chef for configuration management. What is the Chef component that contains configuration policies defining the desired state of a node?

    Answer: Recipe

    A Chef Recipe is a Ruby-based file containing resources that define the desired state of a system component, and Cookbooks group related recipes together.

  4. Which AWS CDK command updates the CloudFormation bootstrap stack in an account/region to support CDK deployments?

    Answer: cdk bootstrap

    `cdk bootstrap` provisions the CDKToolkit CloudFormation stack that creates the S3 bucket and IAM roles needed for CDK deployments in an account/region.

  5. A CloudFormation template references outputs from another stack. Which intrinsic function is used to import these cross-stack values?

    Answer: !ImportValue

    !ImportValue retrieves the value of an output exported by another CloudFormation stack, enabling cross-stack resource sharing.

  6. When should you use AWS Systems Manager Parameter Store SecureString type over the String type?

    Answer: When the value is sensitive data like passwords or API keys that must be encrypted at rest

    SecureString uses AWS KMS to encrypt sensitive parameter values at rest, making it appropriate for secrets, passwords, and API keys.

  7. A team wants to use immutable infrastructure by replacing EC2 instances instead of updating them in place. Which deployment pattern best supports this with CloudFormation?

    Answer: Blue/green deployment using separate CloudFormation stacks and Route 53 DNS swap

    Blue/green with separate stacks creates entirely new infrastructure (green) alongside the old (blue), then shifts traffic via DNS, embodying immutable infrastructure principles.