nerdexam
CompTIA

CNX-001 · Question #94

A cloud engineer is planning to build VMs in a public cloud environment for a cloud migration. A cloud security policy restricts access to the console for new VM builds. The engineer wants to…

The correct answer is A. IaC template. Infrastructure as Code (IaC) templates (e.g., Terraform, AWS CloudFormation, Azure ARM/Bicep) are the best deployment method here. IaC allows the engineer to declare all VM configuration including network settings in a reusable, version-controlled template file. Each VM is…

Cloud Network Implementation

Question

A cloud engineer is planning to build VMs in a public cloud environment for a cloud migration. A cloud security policy restricts access to the console for new VM builds. The engineer wants to replicate the settings for each of the VMs to ensure the network settings are preconfigured. Which of the following is the best deployment method?

Options

  • AIaC template
  • BCustom SDK
  • CAPI script
  • DCLI command

How the community answered

(55 responses)
  • A
    73% (40)
  • B
    5% (3)
  • C
    4% (2)
  • D
    18% (10)

Explanation

Infrastructure as Code (IaC) templates (e.g., Terraform, AWS CloudFormation, Azure ARM/Bicep) are the best deployment method here. IaC allows the engineer to declare all VM configuration including network settings in a reusable, version-controlled template file. Each VM is provisioned identically by applying the same template - no manual console interaction is required, which directly satisfies the policy restriction. A custom SDK (B) requires writing and maintaining bespoke application code, adding unnecessary complexity for what is a standard provisioning task. An API script (C) can automate deployments but is imperative and harder to make idempotent and consistent across many VMs compared to a declarative IaC template. A CLI command (D) is suitable for one-off or ad-hoc operations but not for reliably replicating preconfigured settings across many VMs in a repeatable, auditable way.

Topics

#Infrastructure as Code#VM Deployment#Network Configuration#Automation

Community Discussion

No community discussion yet for this question.

Full CNX-001 Practice