easyMultiple Choice
CAS-004 Immutable infrastructure security benefit Practice Question
Which of the following is the primary security benefit of using immutable infrastructure in automated deployments?
⚠ Common exam trap
A common mix-up: candidates confuse immutable infrastructure with traditional configuration management (e.g., Puppet, Ansible) that corrects drift by modifying existing servers, whereas immutable infrastructure prevents drift entirely by never modifying servers in place.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Eliminates configuration drift and unauthorized changes
Immutable infrastructure ensures that servers are never modified after deployment; instead, updates are made by replacing the entire instance with a new, pre-configured image. This eliminates configuration drift because any unauthorized or unintended changes are wiped out on the next deployment cycle, enforcing a consistent, known-good state across all environments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reduces operational costs by reusing existing servers
Why it's wrong here
Reusing servers contradicts immutability, which replaces rather than patches instances, so drift and persistent compromise survive. Cost reduction is a financial outcome, not the security benefit sought. Reuse suits stable, long-lived workloads where rebuild overhead outweighs patch risk.
- ✓
Eliminates configuration drift and unauthorized changes
Why this is correct
Immutable infrastructure replaces servers rather than modifying them, so no running instance accumulates manual tweaks. That directly satisfies the stem's constraint: configuration drift and unauthorised changes become impossible because every deployment provisions fresh, identical instances from a versioned image, and any deviation is discarded at replacement.
- ✗
Increases system performance through hardware acceleration
Why it's wrong here
Immutability concerns instance lifecycle and reproducibility, not CPU or GPU throughput; hardware acceleration is orthogonal to deployment security. Performance tuning fits compute-intensive workloads, whereas the stem asks how replacing rather than modifying instances limits attacker persistence.
- ✗
Simplifies monitoring by reducing the number of servers
Why it's wrong here
Immutability's benefit is that replaced instances are rebuilt from a known-good image, eliminating configuration drift and persistent compromise; monitoring effort is unrelated. It is tempting because fewer long-lived servers can appear to reduce monitoring overhead, but that is an operational side effect, not the security gain.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The CAS-005 exam frequently reuses these exact scenarios with slightly different constraints.
✓Eliminates configuration drift and unauthorized changesCorrect answer▾
Why this is correct
Immutable infrastructure replaces servers rather than modifying them, so no running instance accumulates manual tweaks. That directly satisfies the stem's constraint: configuration drift and unauthorised changes become impossible because every deployment provisions fresh, identical instances from a versioned image, and any deviation is discarded at replacement.
✗Reduces operational costs by reusing existing serversWrong answer — click to see why▾
Why this is wrong here
Immutable infrastructure typically increases costs because new instances are spun up instead of patching old ones.
✗Increases system performance through hardware accelerationWrong answer — click to see why▾
Why this is wrong here
Immutable infrastructure is about deployment methodology, not hardware performance.
✗Simplifies monitoring by reducing the number of serversWrong answer — click to see why▾
Why this is wrong here
Immutable infrastructure may actually increase server count due to frequent redeployments.
Analysis generated from the official CAS-005blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
About these practice questions
Courseiva writes every CAS-005 question from scratch — 973 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.