DRAG DROP
Drag and drop the commands from the bottom onto the correct Terraform code in the exhibit to push a network object to a Cisco ASA Firewall device.
Select and Place:

Correct Answer:

Section: Automating Infrastructure

Comment: *

Name: *

Email: *

Verification: *

What is as responsibility for teams running private cloud servers that is less of a concern when running in the public cloud?

• A.credentials management
• B.metrics and monitoring
• C.cost
• D.hardware maintenance

Comment: *

Name: *

Email: *

Verification: *

Which Dockerfile produces an efficient image rebuild when the exposed port Python dependency, or MyApp source code is modified?
A)

B)

C)

D)

• A.Option C
• B.Option A
• C.Option B
• D.Option D

Comment: *

Name: *

Email: *

Verification: *

A development team uses Kubernetes for application development. Any changes on ConfigMap are performed manually for each development, test, and production environment. The edits are performed to deploy applications. This approach causes inconsistent deployments across all environments.
Which practice improves the consistency of the deployments?

• A.Create a unique repository for each environment that contains ConfigMaps for that environment to ensure that each environment can be deployed independently
• B.In the master branch where the ConfigMaps are stored, create a branch for each environment that contains an environment-specific ConfigMap.
• C.Generate the ConfigMaps specific to the environment by using a templating language such as Jinja2 and store the ConfigMaps in unique branches of a repository
• D.Implement environment variables within the ConfigMaps and store the variable definitions separately from the master branch where the ConfigMaps are stored

Comment: *

Name: *

Email: *

Verification: *

A security team is running vulnerability scans against a CI/CD pipeline. The reports show that RDBMS secrets were found hardcoded in Ansible scripts. The RDBMS resides in the internal network but is accessible from a jump server that resides in a public network.
If an attacker gains access to the scripts, what is the risk exposure?

• A.The entire CI/CD-related infrastructure is at risk.
• B.The Ansible scripts run through encrypted SSH connections.
• C.The Automation server is at risk of being compromised.
• D.The internal network is at risk of being compromised.

Comment: *

Name: *

Email: *

Verification: *