Examkin

Soru

Zorluk: KolayBuilding and Managing Infrastructure as Code (IaC)

An organization is establishing baseline operational standards for managing Google Cloud resources using Terraform. The cloud engineering team needs to ensure state concurrency locking, state change history tracking, and safe automated deployments. Which two configurations or practices should the team implement? (Select TWO.)

  1. Configure a Google Cloud Storage (GCS) bucket as a remote backend for centralized state storage.Cevap
  2. Enable Object Versioning on the Google Cloud Storage backend bucket.Cevap
  3. C
    Store Terraform state files locally on individual developer laptops to eliminate remote API network dependencies.
  4. D
    Perform ad-hoc manual resource updates using the Cloud Console whenever quick infrastructure modifications are required.
  5. E
    Grant the primitive Owner IAM role to the CI/CD service account to ensure all Terraform resources provision without permission errors.

Cevap

The team should configure a Google Cloud Storage bucket as the remote backend and enable Object Versioning on that bucket.
Configuring a Cloud Storage backend ensures state file centralization with native locking capabilities, while enabling Object Versioning guarantees state file backup history and recovery options.

Adım Adım Çözüm

1
Identify state locking and storage requirements for collaborative Infrastructure as Code workflows.
Centralizing state storage in Google Cloud Storage provides multi-user access control and automatic state locking.
Remote state management ensures developers and automated CI/CD pipelines work against a single source of truth without concurrent execution risks.
2
Determine the mechanism required to maintain historical state records.
Enabling Object Versioning on the backend Cloud Storage bucket enables tracking and rollback of state files.
Object Versioning keeps a detailed history of state file updates and guards against accidental deletion or corruption.

Anahtar Kavram

Centralized Terraform state management using Cloud Storage with Object Versioning
Bu soruyu puanla

Konular

Building and Managing Infrastructure as Code (IaC)

Bu konudan daha fazla soru