CDM Infrastructure Automation & Configuration Management 5

Question 1

Which tool is purpose-built for testing infrastructure code by provisioning real resources and verifying their behavior?

Accepted Answer

Terratest

Answer

Terratest is a Go-based framework that provisions actual cloud resources using Terraform, validates their properties, and then tears them down as part of automated testing.

Question 2

In Terraform, what is the effect of setting `prevent_destroy = true` in a resource's `lifecycle` block?

Accepted Answer

Causes Terraform to error if a plan would destroy the resource

Answer

`prevent_destroy = true` is a safeguard that makes Terraform abort with an error if a plan would delete the resource, protecting stateful resources like databases.

Question 3

What is the primary purpose of Packer in an infrastructure automation pipeline?

Accepted Answer

Building consistent machine images (AMIs, VM templates) across multiple platforms from a single configuration

Answer

Packer automates the creation of identical machine images for multiple platforms (AWS AMI, GCP image, Docker) from a single JSON or HCL2 template.

Question 4

Which Ansible feature enables conditional task execution based on the value of a variable or fact?

Accepted Answer

when

Answer

The `when` directive evaluates a Jinja2 expression and skips the task if the condition is false, enabling branching logic in playbooks.

Question 5

In a DevOps pipeline, what does 'shifting left' security testing for IaC mean?

Accepted Answer

Running security scans on IaC code during development and CI rather than only after deployment

Answer

Shifting left means integrating security scanning tools (Checkov, tfsec, Trivy) into the developer workflow and CI pipeline so vulnerabilities are caught before deployment.

(CDM) Certified DevOps Master Practice Test

(CDM) Certified DevOps Master Practice Test

CDM Infrastructure Automation & Configuration Management 5