CompTIA Cloud+ (CV0-004)OperationsMedium
A cloud administrator needs to ensure that all newly provisioned virtual machines (VMs) in a specific project automatically comply with corporate security baselines, including specific operating system configurations, software installations, and agent deployments. Manual configuration is prone to errors and does not scale. Which cloud operations practice should be implemented?
- AGolden Image creation with pre-baked configurations.
- BInfrastructure as Code (IaC) for VM definition and configuration.
- CManual VM provisioning followed by a security audit.
- DApplying security groups and network ACLs after VM deployment.
Show answer & explanationAnswer & explanation
Correct answer: A. Golden Image creation with pre-baked configurations.
Creating a 'Golden Image' (or custom machine image) that has all the required operating system configurations, software, and agents pre-installed and hardened is the most efficient and reliable way to ensure new VMs automatically comply with security baselines upon provisioning. This eliminates manual configuration errors and ensures consistency.
Why the other options are wrong
- B. While IaC defines the VM, it doesn't inherently pre-configure the OS or install software without additional configuration management tools, which could be part of the image creation but isn't the direct answer for pre-baked configs.
- C. Manual provisioning and auditing is inefficient, error-prone, and does not scale, directly contradicting the problem statement.
- D. Security groups and network ACLs control network access, but they do not address internal OS configurations, software installations, or agent deployments within the VM.
Golden Image (Custom Machine Image)
A pre-configured virtual machine image that includes a hardened operating system, required software, security agents, and specific configurations, used as a template for new VM deployments.
- Ensures consistency and compliance.
- Reduces manual configuration errors.
- Speeds up VM provisioning and deployment.
Memory trick: Golden Image: Bake in security, deploy with ease.