M5.1 module quiz
Ten questions. 80% to pass (8 of 10). Open book, unlimited retakes.
Answers are collapsed under each question. Answer first, then check.
Q1
Tags are organisational debt because:
A. They cost real money to store on every single resource across the estate
B. Providers limit how many tags are allowed
C. Inconsistency compounds silently and the cost of fixing it grows with the estate
D. They must be reapplied every month
Show answer
Correct: C. Nothing breaks when a tag is missing, so nothing forces the fix, and the backlog grows at the rate the estate does.
Q2
On GCP, cost labels applied at the folder level:
A. Do not inherit; only Resource Manager Tags do
B. Inherit down to both projects and resources
C. Inherit to projects but not resources
D. Inherit only within a single region
Show answer
Correct: A. Label consistency has to come from IaC default labels. The AWS equivalent confusion is SCPs, which do not apply tags at all; Tag Policies are the mechanism there.
Q3
The MVT is four tags because:
A. Providers limit tag keys to four
B. Four covers every reporting axis
C. It matches the FOCUS billing specification
D. Four is what survives contact with engineers
Show answer
Correct: D. A policy nobody applies produces worse attribution than a small one everybody does, which is the whole argument for a minimum rather than a complete set.
Q4
Preventive and detective enforcement differ in that preventive:
A. Is cheaper to operate at scale across a very large estate
B. Rejects the resource at provision time, before debt accumulates
C. Runs on a nightly schedule
D. Covers more resource types
Show answer
Correct: B. Detective catches what preventive misses, which is console-created and pre-policy resources. Both are needed; only one stops the backlog growing.
Q5
Terraform default_tags handles:
A. All of the resources in the entire account
B. Only the taggable resource types
C. Only resources created after it
D. All resources created by that provider block
Show answer
Correct: D. Which is why it does not reach resources created outside that IaC, and why cloud-native policy is the third layer rather than a redundant one.
Q6
Tag drift is most often caused by:
A. Provider bugs in the cloud tagging API
B. Console edits and out-of-band tooling
C. Tag policy changes over time
D. Resource recreation on apply
Show answer
Correct: B. Which is why drift detection and preventive enforcement are complements: one stops new drift, the other finds what already happened.
Q7
A reorg-proof tag avoids:
A. Abbreviating the value
B. Using uppercase letters throughout the value
C. Encoding a current team name in the value
D. Using numeric values
Show answer
Correct: C. Team names change; cost centres and product identifiers change less. A tag keyed on the org chart requires a migration every reorg.
Q8
Hierarchy should be expressed:
A. In one delimited tag value
B. Across multiple tags
C. By resource group
D. In the resource name
Show answer
Correct: B. A delimited value cannot be filtered on its parts, so bu-product-team gives you one dimension where three separate tags give you three.
Q9
A tag migration during a reorg should:
A. Apply the new values going forward with a documented cutover date
B. Rewrite the tag history retroactively
C. Delete the old tag values immediately
D. Wait until the whole reorganisation has completely finished
Show answer
Correct: A. Rewriting history makes past reports change, and reports that change after the fact stop being reconcilable against anything.
Q10
The three governance postures are:
A. Strict, moderate and relaxed
B. Manual, automated, hybrid
C. Preventive, detective, reactive
D. Org, team, resource
Show answer
Correct: C. Choosing consciously matters: an org running reactive only will always have a backlog, and one attempting preventive only will block work it did not intend to block.