Configuration drift detection in PowerShell - Practice Problems & Coding Challenges

Challenge - 5 Problems

💻 Command Output

intermediate

Detecting drift by comparing file hashes

You have a baseline hash stored in a variable $baselineHash. Which command outputs true if the current file hash matches the baseline, indicating no drift?

PowerShell

$baselineHash = 'ABC123'
$currentHash = Get-FileHash -Path 'C:\config.txt' -Algorithm SHA256 | Select-Object -ExpandProperty Hash

A Compare-Object $currentHash $baselineHash

B $currentHash.Equals($baselineHash)

C $currentHash -ne $baselineHash

D $currentHash -eq $baselineHash

💡 Hint

Use the equality operator to compare strings in PowerShell.

Option D uses the -eq operator to check if the current hash equals the baseline hash, returning true if they match, meaning no drift.

Option D calls a method that works but returns a boolean, but in PowerShell, -eq is preferred for clarity.

Option D checks for inequality, which is the opposite of what is needed.

Option D returns a comparison object, not a boolean.

📝 Syntax

intermediate

Correct syntax for reading configuration file content

Which PowerShell command correctly reads the content of C:\config.txt into a variable $configContent for drift analysis?

A $configContent = Get-Content -Path 'C:\config.txt' -Raw

B $configContent = Read-File 'C:\config.txt'

C $configContent = Get-Content 'C:\config.txt' | Out-String

D $configContent = Read-Content -File 'C:\config.txt'

💡 Hint

Use the standard cmdlet to read file content as a single string.

Option A uses Get-Content with -Raw to read the entire file as one string, ideal for drift checks.

Option A and D use non-existent cmdlets.

Option A reads content line by line and converts to string, but may add unwanted newlines.

🚀 Application

advanced

Automating drift detection with scheduled task

You want to create a scheduled task that runs a PowerShell script DetectDrift.ps1 daily at 2 AM to check configuration drift. Which command correctly creates this scheduled task?

A Register-ScheduledTask -TaskName 'DriftCheck' -Trigger (New-ScheduledTaskTrigger -Daily -At 2am) -Action (New-ScheduledTaskAction -Execute 'PowerShell.exe' -Argument '-File C:\Scripts\DetectDrift.ps1')

B New-ScheduledTask -Name 'DriftCheck' -Daily -At 2am -ScriptPath 'C:\Scripts\DetectDrift.ps1'

C schtasks /create /tn DriftCheck /tr 'PowerShell.exe -File C:\Scripts\DetectDrift.ps1' /sc daily /st 02:00

D Set-ScheduledTask -TaskName 'DriftCheck' -Daily -At 2am -Script 'C:\Scripts\DetectDrift.ps1'

💡 Hint

Use PowerShell cmdlets to register a scheduled task with trigger and action.

Option A correctly uses Register-ScheduledTask with a daily trigger at 2 AM and an action to run PowerShell with the script.

Option A uses a non-existent cmdlet.

Option A is a valid schtasks command but is not PowerShell native cmdlet.

Option A uses a non-existent cmdlet and parameters.

🔧 Debug

advanced

Identify the error in this drift detection script snippet

What error will this script produce?

$baselineHash = 'ABC123'
$currentHash = Get-FileHash -Path 'C:\config.txt' -Algorithm SHA256
if ($currentHash -eq $baselineHash) { Write-Output 'No drift' } else { Write-Output 'Drift detected' }

A Runtime error because Get-FileHash requires admin privileges

B SyntaxError due to missing parentheses in the if statement

C false because $currentHash is an object, not a string, causing the comparison to fail

D No error, outputs 'No drift' or 'Drift detected' correctly

💡 Hint

Check the type of $currentHash and what is being compared.

$currentHash is an object with properties, not just the hash string. Comparing it directly to a string will fail.

The correct approach is to compare $currentHash.Hash to $baselineHash.

🧠 Conceptual

expert

Understanding configuration drift detection strategy

Which statement best describes the main goal of configuration drift detection in automation scripts?

A To encrypt configuration files to protect sensitive data from unauthorized access.

B To continuously monitor and identify changes in system configuration that differ from a defined baseline, enabling timely remediation.

C To automatically update all system configurations to the latest software versions without manual checks.

D To backup configuration files daily to prevent data loss in case of system failure.

💡 Hint

Think about what 'drift' means in configuration management.

Configuration drift detection focuses on finding differences from a known good baseline to keep systems consistent.

Options A, B, and C describe other tasks not directly related to drift detection.