Scripting and Automation

1. A security team configures a script that detects when a new patch arrives in a designated folder and automatically deploys it to all affected systems overnight. Which automation benefit does this primarily demonstrate?

A. Workforce multiplier — the script replaces the need for any security staff B. Enforcing security baselines — automation ensures consistent patch levels across all systems without manual intervention C. Guard rails — the script validates that patches are safe before installation D. Escalation — the script notifies the on-call technician when a patch is available

2. A technician attempts to delete a temporary folder but accidentally selects the entire application directory. An automated system detects that the selected path contains files flagged as critical and blocks the operation. What type of automation control is this?

A. Escalation — the system escalated the deletion request to an administrator for approval B. Guard rails — automated validation that intercepts and prevents unsafe operations before they execute C. Access control — the technician does not have permission to delete application files D. Continuous integration — the CI/CD pipeline flagged the deletion as a code change

3. An organization's disk space monitoring script clears temporary files whenever free space drops below 10%. The script keeps servers running, but the root cause of excessive temporary file accumulation is never investigated. What scripting risk does this represent?

A. Single point of failure — if the script stops running, the server will run out of disk space immediately B. Complexity — the script interacts with too many system components to troubleshoot reliably C. Technical debt — the script masks the underlying problem rather than fixing the root cause, deferring a growing issue D. Ongoing supportability — the script will fail when the operating system is updated

4. A company automates its cloud infrastructure provisioning so that when a new application server is added, the associated security groups, firewall rules, and encryption settings are also configured automatically. Which automation benefit does this exemplify?

A. Employee retention — cloud engineers no longer have to manually configure security, freeing them for more creative tasks B. Guard rails — the script validates that all cloud resources meet security requirements before provisioning C. Secure scaling — security controls are automatically applied alongside infrastructure during dynamic cloud expansion D. Ticket creation — the script creates a security review ticket for each new cloud resource provisioned

5. A monitoring script detects that a web service has stopped responding. It first attempts to restart the service automatically. If the restart succeeds, no alert is generated. If the restart fails twice, it creates an incident ticket and pages the on-call administrator. Which two automation use cases does this demonstrate?

A. Guard rails and secure scaling — the script prevents unsafe restarts and scales the response B. Escalation and ticket creation — the script attempts automated resolution first, then creates a ticket and escalates to a human only when automation cannot fix the problem C. Provisioning and deprovisioning — the script creates and removes service accounts as needed during the restart cycle D. CI/CD and API integration — the restart is processed through the deployment pipeline using the service's API

6. An organization relies on a single automation script to handle all new user account creation. The script fails due to an API change. No new accounts can be created until the script is repaired. Which scripting risk does this illustrate?

A. Technical debt — the script was hiding a deeper problem with the identity management system B. Complexity — the script's interaction with the API made it impossible to predict this failure mode C. Single point of failure — the script's failure disables all provisioning processes that depend on it simultaneously D. Employee retention — skilled engineers are needed to fix the script but are focused on other tasks

Matching: Automation Concepts

Match each automation concept (1–4) to its correct description (A–D).

1User provisioning/deprovisioning

2Workforce multiplier

3API integration

4Ongoing supportability

AAllows scripts to communicate with third-party devices, cloud services, and security appliances programmatically without requiring manual UI interaction

BAutomation operates 24/7 performing many tasks simultaneously, effectively extending the team's capacity without additional headcount

CAutomation that creates accounts, grants permissions, and configures resources for new employees, and revokes all access immediately when employees leave

DThe challenge of maintaining automation as OS versions, API schemas, and scripting language versions change over time, requiring continuous updates and documentation

Scripting and Automation — Quiz