SRE Automation Tools & Infrastructure as Code 5

Question 1

What does 'policy as code' mean in infrastructure management?

Accepted Answer

Defining and enforcing governance rules using code rather than manual processes

Answer

Policy as code means encoding compliance, security, and operational rules as machine-readable code that can be automatically enforced and version-controlled.

Question 2

Which command initializes a Terraform working directory and downloads required providers?

Accepted Answer

terraform init

Answer

`terraform init` initializes the working directory, downloads provider plugins, and sets up the backend for state storage.

Question 3

What is 'infrastructure drift detection' and why is it important for SREs?

Accepted Answer

Identifying when actual infrastructure differs from its IaC definition so it can be corrected

Answer

Drift detection identifies discrepancies between actual infrastructure and its IaC definition, allowing SREs to maintain consistency and prevent unexpected behavior.

Question 4

In Kubernetes, what is the purpose of a ConfigMap?

Accepted Answer

It stores non-sensitive configuration data that can be consumed by pods

Answer

A ConfigMap stores non-sensitive configuration data as key-value pairs that can be injected into pods as environment variables or mounted as files.

Question 5

What is the SRE benefit of using declarative IaC over imperative scripts?

Accepted Answer

Declarative IaC describes desired state, making the system responsible for achieving and maintaining it

Answer

Declarative IaC lets you specify what you want rather than how to get there, enabling tools to handle idempotency and state reconciliation automatically.

(SRE) Site Reliability Engineering Foundation Certification Practice Test

(SRE) Site Reliability Engineering Foundation Certification Practice Test

SRE Automation Tools & Infrastructure as Code 5