System Configuration

AutoOps+ · 50 questions

• After an overnight emergency change, a county wants to know whether the web proxy still matches the approved baseline. Which configuration-management capability should they use first?
• Library kiosk SSH banners were edited by hand and no longer match the approved text. What drift remediation should config management perform?
• A water utility needs config management to remember which packages must exist on SCADA jump hosts across applies. What concept does that require?
• Permits portal backends must not serve expired TLS certificates after staff leave for the weekend. Which configuration-management action best addresses this?
• A housing authority wants share permissions on case-file folders limited to assigned caseworkers. How should ACL automation help?
• Fire stations keep drifting to random public NTP servers after local troubleshooting. What should config management ensure?
• A school district wants lab PCs locked to an approved security posture without visiting each classroom. Which configuration-management practice fits?
• City VPN concentrator certificates will expire during a holiday freeze. What certificate-oriented configuration practice should ops schedule?
• Clerk-VLAN devices should reach the records API but must not open lateral admin ports on neighboring systems. Which ACL intent matches that goal?
• Parks PCs show unauthorized local administrator accounts after a contractor visit. What should the next config-management converge do?
• EMS CAD printer mappings keep changing after night-shift troubleshooting. What drift-detection output helps the platform team?
• Transit garage Windows clients must trust a newly issued municipal root CA. How should configuration management help?
• Open-data ETL nodes must keep a logging agent installed and running after every reboot and package churn. Which state-management semantics should config management use?
• A city 311 stack must keep the application tier from talking freely to the database tier. Which workload configuration should automation enforce?
• County IT is standing up public-facing proxies for the permits portal. Where should those proxies be placed in the virtual network design?
• Library branches must send private traffic back to the city data center rather than out a local internet breakout. Which virtual-network control should automation configure?
• Citizen traffic to the 311 web frontends must be spread across healthy redundant nodes. Which virtual-network component should the city automate?
• The health department portal must reach a lab results API, but nothing else on that lab network should be reachable from the portal tier. Which firewall posture should automation apply?
• Courts IT is cutting the e-filing hostname to a new frontend pair. Which virtual-network change must be included so citizens reach the new endpoints?
• A school district needs classroom egress to traverse an inspection path before reaching the internet. Which virtual-network role should automation place in that path?
• City hall wireless must keep staff devices from sharing a broadcast domain with public guest Wi-Fi. What virtual-network design should automation implement?
• Housing authority application servers sit behind a load balancer. What configuration ensures citizens stop hitting a node that has failed its readiness probe?
• Elections tabulation systems sit on a high-sensitivity VLAN. Which firewall posture should automation enforce for that segment?
• Before migrating the tax portal to new addresses, county DNS operators want client caches to notice the cutover quickly. Which DNS practice should they apply ahead of the change?
• Library IT must repeatedly enforce kiosk lockdown settings across dozens of branches. Which automation approach best fits ongoing converge versus a one-time laptop run?
• County ops must remotecfg Windows print servers without installing a third-party agent on each host. Which remote management channel fits that Windows-centric approach?
• Fire-station clocks must always use the approved municipal NTP servers even after local troubleshooting. Which automation style should config management prefer?
• Network ops will push approved baselines to newly installed firehouse switches from a central controller. Which provisioning model does that describe?
• School lab PCs run an agent that periodically fetches the latest approved baseline from a central store. Which automation model is in use?
• When a resident uploads a new 311 case attachment to object storage, the city wants an automated virus-scan and metadata tag without a standing poller. Which approach fits?
• Parks backup jobs should alert operators and kick a retry runbook when a job fails. Which event-driven pattern supports that response?
• A clerk workstation needs a disk-cleanup script: sometimes an admin watches it live, sometimes it must run overnight unattended. Which local-execution distinction matters?
• Transit AVL hosts stay online continuously and need frequent policy refreshes. Which remote automation approach fits best?
• EMS appliances are constrained devices that rarely change and cannot run a heavyweight config agent. How should rare remote tweaks be performed?
• An automation job must list currently open code-enforcement cases from a municipal REST API without changing any records. Which HTTP method should it use?
• Parks staff need automation to create a brand-new work-order resource in the maintenance API. Which HTTP method is appropriate?
• Housing staff must change only the contact-phone field on a waitlist entry without replacing the entire record. Which HTTP method fits that partial update?
• Clerk automation must replace an entire calendar resource with a new authoritative representation from the scheduling system. Which HTTP method matches that full replace?
• An open-data portal must retire an obsolete dataset registration so clients stop discovering it. Which REST method should the automation use?
• A public-health lab integration must send an API credential on each request. Where should that credential be carried in a typical REST call?
• A county engineer on a jump host needs a fast CLI way to probe CRUD endpoints on the permits API during an outage. Which tool fits that need?
• School-district automation receives HTTP 401 when calling the SSO-protected roster API after a token lifetime ends. What does that status primarily indicate?
• Courts e-filing clients suddenly receive HTTP 503 during a filing rush. How should AutoOps interpret that status?
• A 311 intake bot posts a new service request and the API responds with HTTP 201. What does that response communicate?
• A library kiosk lockdown playbook fails to parse after an edit, and the runner reports a YAML structure error near a nested task. What is the most likely cause?
• Config agents fail TLS handshakes to the municipal API gateway after a holiday weekend. Logs show certificate verify errors. What should ops investigate first?
• An open-data feed validator rejects a published JSON document after a manual edit. The file is otherwise complete but includes a trailing comma in an object. What is the problem?
• After a network change, county config agents stop checking in to the configuration server though their local services still run. What should troubleshooting prioritize?
• Sanitation route hosts suddenly stop writing application logs after a config push. The logging agent package is installed, but its INI file has a mistyped section name. What is the likely root cause?
• A permitting application begins timing out on database connections immediately after a security change that tightened host ACLs. What is the most likely configuration root cause?