nerdexam
Isaca

CISA · Question #650

Which of the following is the PRIMARY benefit of Infrastructure as Code (IaC) to configuration management practices?

The correct answer is C. It expedites the infrastructure provisioning process and defines baselines. IaC's core value to configuration management is that infrastructure is defined, versioned, and deployed through code - this both accelerates provisioning (eliminating manual, error-prone steps) and inherently establishes a codified baseline (the code itself is the configuration s

Submitted by joshua94· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Which of the following is the PRIMARY benefit of Infrastructure as Code (IaC) to configuration management practices?

Options

  • AIt prevents unauthorized changes outside of approved change windows.
  • BIt expedites infrastructure performance testing and throughput.
  • CIt expedites the infrastructure provisioning process and defines baselines
  • DIt prevents users from overriding configuration changes after deployment.

How the community answered

(25 responses)
  • B
    4% (1)
  • C
    88% (22)
  • D
    8% (2)

Explanation

IaC's core value to configuration management is that infrastructure is defined, versioned, and deployed through code - this both accelerates provisioning (eliminating manual, error-prone steps) and inherently establishes a codified baseline (the code itself is the configuration standard). The codebase serves as the authoritative record of what the infrastructure should look like. Option A (preventing unauthorized changes) is a benefit of change control processes, not IaC specifically. Option B (performance testing) is unrelated to IaC's primary configuration management benefit. Option D (preventing post-deployment overrides) is a related enforcement benefit but not the primary one - IaC focuses on defining and deploying baselines, not necessarily locking them post-deployment.

Topics

#Infrastructure as Code (IaC)#Configuration Management#IT Automation#System Provisioning

Community Discussion

No community discussion yet for this question.

Full CISA Practice