DevNet Associate (DEVASC) v1.0Infrastructure and AutomationEasy
A junior network engineer is tasked with automating the deployment of a standardized firewall rule set across multiple security appliances. The solution needs to define the desired state of the firewall rules in a declarative manner and apply these configurations consistently. Which concept best describes this approach?
- AManual Configuration
- BAd-hoc Automation
- CImperative Scripting
- DInfrastructure as Code (IaC)
Show answer & explanationAnswer & explanation
Correct answer: D. Infrastructure as Code (IaC)
Infrastructure as Code (IaC) is the practice of managing and provisioning infrastructure through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools. It emphasizes declarative definitions of desired states.
Why the other options are wrong
- A. Manual configuration is the opposite of automation and lacks consistency and repeatability.
- B. Ad-hoc automation implies one-off scripts without a structured, repeatable definition of the infrastructure state.
- C. Imperative scripting focuses on 'how' to achieve a state, not 'what' the desired state is.
Infrastructure as Code (IaC)
Infrastructure as Code (IaC) is the practice of managing and provisioning computing infrastructure (e.g., networks, virtual machines, load balancers) using machine-readable definition files, rather than physical hardware configuration or interactive configuration tools.
- Declarative approach.
- Version control for infrastructure.
- Automated and repeatable deployments.
- Reduces human error.
Memory trick: IaC defines desired state like a blueprint for infrastructure.