CDM Infrastructure Automation & Configuration Management 3

Question 1

Which Terraform meta-argument is used to create multiple instances of the same resource using a map variable?

Accepted Answer

for_each

Answer

`for_each` iterates over a map or set to create one resource instance per element, giving each a unique key-based identifier.

Question 2

What Ansible construct allows you to define and reuse a set of tasks with its own variables, files, and handlers?

Accepted Answer

Role

Answer

An Ansible role provides a structured directory layout for tasks, handlers, defaults, and files, enabling reuse across multiple playbooks.

Question 3

In the context of IaC security, what does 'policy as code' typically enforce?

Accepted Answer

Automated scanning of IaC templates against compliance rules before deployment

Answer

Policy as code tools like OPA or Sentinel evaluate IaC templates against security and compliance rules in CI/CD pipelines before any resources are provisioned.

Question 4

Which AWS service is commonly used as a remote backend for storing Terraform state files?

Accepted Answer

Amazon S3 with optional DynamoDB locking

Answer

Amazon S3 stores the Terraform state file while DynamoDB provides state locking to prevent concurrent modifications.

Question 5

In Ansible, what is the function of `ansible-vault encrypt`?

Accepted Answer

Encrypts sensitive data files so they can be safely stored in version control

Answer

`ansible-vault encrypt` uses AES-256 to encrypt files containing secrets, allowing them to be committed to source control without exposing plaintext.

(CDM) Certified DevOps Master Practice Test

(CDM) Certified DevOps Master Practice Test

CDM Infrastructure Automation & Configuration Management 3