Infrastructure as Code & Automation Flashcards

What is the primary benefit of Infrastructure as Code (IaC) in incident recovery systems?

Answer: Consistent, version-controlled environment provisioning

Infrastructure as Code (IaC) defines and manages infrastructure using configuration files, treating it like application code. This ensures that environments are provisioned consistently every time, eliminating configuration drift and manual errors. For incident recovery, IaC allows for rapid, reliable, and repeatable recreation of infrastructure from a known good state, significantly speeding up recovery efforts and ensuring environmental integrity.

Which tool is commonly used for Infrastructure as Code?

Answer: Terraform

Terraform is a widely used open-source Infrastructure as Code (IaC) tool that allows users to define and provision data center infrastructure using a declarative configuration language. It supports multiple cloud providers and on-premise solutions, enabling consistent and repeatable infrastructure deployment and management. Its ability to manage infrastructure across various platforms makes it a powerful choice for IaC.

What is the purpose of idempotency in infrastructure automation?

Answer: To ensure consistent results regardless of how many times code is executed

Idempotency in infrastructure automation means that applying the same configuration or command multiple times will produce the same desired state as applying it once. This is crucial for reliability, as it prevents unintended side effects or errors if a script is re-run due to network issues, retries, or routine maintenance. It ensures consistent and predictable infrastructure, making automation robust and trustworthy.

Why is version control important for IaC scripts?

Answer: To track changes and enable rollback to previous versions

Version control systems (like Git) are essential for IaC scripts because they allow teams to track every modification made to the infrastructure definitions over time. This provides a complete history of changes, facilitates collaboration among team members, and, critically, enables quick and reliable rollback to any previous stable configuration if a new deployment introduces issues. It ensures auditability and recoverability of infrastructure states.

What is the benefit of using configuration management tools like Ansible?

Answer: Automated, consistent system configuration across environments

Configuration management tools like Ansible automate the process of setting up and maintaining servers and other infrastructure components. They ensure that all systems are configured identically and consistently across development, testing, and production environments, reducing manual errors and configuration drift. This leads to improved system reliability, security, and efficiency by standardizing infrastructure provisioning and management.

How does IaC improve disaster recovery processes?

Answer: By enabling quick recreation of infrastructure from code definitions

Infrastructure as Code (IaC) significantly enhances disaster recovery by allowing organizations to define their entire infrastructure in code. In the event of a disaster, this code can be used to quickly and reliably provision a new, identical environment from scratch, rather than relying on manual processes or outdated backups alone. This drastically reduces Recovery Time Objectives (RTOs) and ensures consistent recovery.

What is the purpose of modular design in IaC?

Answer: To create reusable components for different environments

Modular design in Infrastructure as Code involves breaking down infrastructure definitions into smaller, self-contained, and reusable components. This allows teams to build complex environments by combining these modules, promoting consistency, reducing redundancy, and making it easier to manage and update infrastructure across different projects or environments. It enhances maintainability and accelerates infrastructure provisioning.

Why is state management important in IaC tools like Terraform?

Answer: To track real infrastructure state and plan appropriate changes

State management in IaC tools like Terraform is crucial because it tracks the real-world configuration of your infrastructure. By maintaining a state file, Terraform knows what resources it has already created, their current properties, and what changes are needed to align the actual infrastructure with your desired configuration. This prevents unintended modifications, ensures idempotency, and allows for accurate planning of infrastructure changes.

What is the benefit of policy-as-code in infrastructure automation?

Answer: Automated enforcement of security and compliance rules

Policy-as-code involves defining security, compliance, and operational policies in a machine-readable format, often stored in version control. The primary benefit is the automated enforcement of these rules across your infrastructure. This ensures consistent adherence to organizational standards and regulatory requirements, catching non-compliant configurations early in the development lifecycle and preventing potential security vulnerabilities or audit failures.