CompTIA Cloud Essentials+ (CLO-002)Management and Technical OperationsMedium
A company is migrating its on-premises virtual machines to a public cloud provider. They want to ensure that the network configuration, including subnets, routing tables, and security groups, is consistently applied across all environments and can be version-controlled. Which approach is best suited for this requirement?
- AInfrastructure as Code (IaC)
- BScripting with shell scripts
- CManual configuration via the cloud provider's console
- DUsing a virtual private network (VPN)
Show answer & explanationAnswer & explanation
Correct answer: A. Infrastructure as Code (IaC)
Infrastructure as Code (IaC) allows defining and managing infrastructure resources, such as network configurations, through machine-readable definition files. This enables version control, automation, and consistent deployments.
Why the other options are wrong
- B. While scripting can automate, it often lacks the declarative nature, state management, and built-in idempotency of dedicated IaC tools.
- C. Manual configuration is error-prone, lacks version control, and is not scalable for consistent deployment.
- D. A VPN is a networking component for secure connectivity, not a method for consistently provisioning infrastructure.
Infrastructure as Code (IaC)
Managing and provisioning computing infrastructure through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools.
- Enables automation, version control, and idempotency.
- Improves consistency and reduces human error.
- Examples include Terraform, AWS CloudFormation, Azure Resource Manager.
Memory trick: Code builds the cloud, manual makes you frown, scripts are a start, but IaC wears the crown.