Question

A cloud operations team manages 300 Linux servers across multiple environments. Over time, engineers have manually applied hotfixes, causing inconsistent package versions and service configurations. The team wants a solution that continuously enforces a defined desired state, automatically correcting any manual changes on the servers without requiring the servers to be rebuilt. Which approach best meets this requirement?

Accepted Answer

Deploy a configuration management tool that periodically applies declarative manifests and remediates drift on existing servers

Answer

Rebuild all servers from a golden image whenever a configuration inconsistency is detected

Answer

Add a manual peer-review checklist to the change management process before engineers apply hotfixes

Answer

Enable verbose logging on each server so administrators can audit configuration changes after they occur