Certified DevOps Master (CDM) — Questions and Answers
Question 1: What is infrastructure automation?
- Managing infrastructure automatically (Correct answer)
- Manual server setup
- Ignoring infrastructure
- Writing application code
Correct answer: Managing infrastructure automatically
Infrastructure automation involves using software and scripts to provision, configure, and manage IT infrastructure components like servers, networks, and databases, rather than performing these tasks manually. This approach ensures consistency, reduces human error, and significantly speeds up the deployment and scaling of environments. It is a cornerstone of modern DevOps practices, enabling environments to be treated as code.
Question 2: Which statement BEST describes the relationship between Certified DevOps Master certification and industry evolution?
- Certification requirements never change
- Requirements evolve periodically to reflect advances in knowledge and practice (Correct answer)
- Requirements become less stringent over time
- Changes only occur when government mandates them
Correct answer: Requirements evolve periodically to reflect advances in knowledge and practice
Certification requirements evolve to keep pace with professional and technological advances.
Question 3: In DevSecOps, what is a Software Composition Analysis (SCA) tool primarily used for?
- Analyzing CPU composition of running services
- Composing software release notes automatically
- Decomposing monoliths into microservices
- Identifying vulnerabilities in open-source libraries and dependencies (Correct answer)
Correct answer: Identifying vulnerabilities in open-source libraries and dependencies
SCA tools scan a project's dependencies and open-source libraries against vulnerability databases to identify known CVEs and license risks.
Question 4: How should Certified DevOps Master professionals handle equipment showing signs of malfunction during operation?
- Immediately cease operation, secure the equipment, and report (Correct answer)
- Attempt field repairs while running
- Finish the current task first
- Continue operating while monitoring
Correct answer: Immediately cease operation, secure the equipment, and report
Immediate cessation prevents safety hazards, further damage, or compromised results.
Question 5: Which practice involves automatically scanning container images for known vulnerabilities before they are pushed to a registry?
- Network policy enforcement
- Image vulnerability scanning (Correct answer)
- Runtime threat detection
- Secrets rotation
Correct answer: Image vulnerability scanning
Image vulnerability scanning (using tools like Trivy, Clair, or Snyk) checks container images against CVE databases before they reach the registry or production.
Question 6: What is the purpose of a Git tag, and how does it differ from a branch?
- A tag marks a specific point in history as immutable; a branch is a movable pointer to commits (Correct answer)
- Tags and branches are functionally identical in Git
- A tag creates a new line of development; a branch does not
- A tag is a temporary reference; a branch is permanent
Correct answer: A tag marks a specific point in history as immutable; a branch is a movable pointer to commits
Tags create a fixed, named reference to a specific commit (typically a release), while branches are mutable pointers that advance with each new commit.
Question 7: What is the MOST important reason for maintaining equipment maintenance logs in CDM practice?
- To justify replacement budgets
- To track maintenance history, predict failures, and demonstrate compliance (Correct answer)
- To satisfy insurance requirements only
- To assign blame when equipment fails
Correct answer: To track maintenance history, predict failures, and demonstrate compliance
Maintenance logs track history, predict failures, and demonstrate regulatory compliance.
Question 8: How should Certified DevOps Master professionals handle equipment showing signs of malfunction during operation?
- Continue operating while monitoring
- Finish the current task first
- Attempt field repairs while running
- Immediately cease operation, secure the equipment, and report (Correct answer)
Correct answer: Immediately cease operation, secure the equipment, and report
Immediate cessation prevents safety hazards, further damage, or compromised results.
Question 9: What is the PRIMARY purpose of obtaining CDM certification in Certified DevOps Master?
- To guarantee employment
- To demonstrate verified competency and adherence to professional standards (Correct answer)
- To satisfy a personal achievement goal
- To bypass educational requirements
Correct answer: To demonstrate verified competency and adherence to professional standards
Certification demonstrates verified competency and adherence to professional standards.
Question 10: In Certified DevOps Master practice, what is the CORRECT sequence when performing a technical procedure?
- Document, execute, then plan
- Plan, prepare, execute, verify, and document (Correct answer)
- Execute, then plan and review
- Execute immediately and document only if issues arise
Correct answer: Plan, prepare, execute, verify, and document
The correct sequence follows: plan, prepare, execute, verify, and document.
Question 11: Which tool is commonly used for configuration management?
- Ansible (Correct answer)
- Notepad
- Photoshop
- Excel
Correct answer: Ansible
Ansible is a popular open-source automation engine widely used for configuration management, application deployment, and orchestration. It operates agentlessly, using SSH to connect to target machines, and uses simple YAML syntax for its playbooks, making it relatively easy to learn and implement. Other common tools include Puppet, Chef, and SaltStack.
Question 12: How should Certified DevOps Master professionals handle procedures that have been updated or revised?
- Continue using the original method
- Only apply updates to new cases
- Review updates, complete required training, and implement revised procedures (Correct answer)
- Wait for mandatory enforcement
Correct answer: Review updates, complete required training, and implement revised procedures
Professionals must review changes, complete training, and implement revised procedures.
Question 13: What is 'infrastructure as code' (IaC)?
- Physical hardware setup
- Manual configuration
- Writing application code
- Infrastructure managed as code (Correct answer)
Correct answer: Infrastructure managed as code
Infrastructure as Code (IaC) is a practice where infrastructure (networks, virtual machines, databases, etc.) is provisioned and managed using machine-readable definition files, rather than through manual processes or interactive tools. These definition files are versioned, tested, and deployed just like application code. IaC brings the benefits of software development practices, such as version control, automated testing, and continuous integration, to infrastructure management, ensuring consistency and repeatability.
Question 14: Which factor MOST significantly affects the quality of technical outcomes in CDM practice?
- The time of day
- The brand of equipment
- Speed of procedure completion
- The practitioner's training, preparation, and attention to detail (Correct answer)
Correct answer: The practitioner's training, preparation, and attention to detail
Quality depends primarily on training, preparation, and attention to detail.
Question 15: Why is version control important in configuration management?
- Delete previous versions
- Ignore changes
- Avoid documentation
- Track and maintain configuration history (Correct answer)
Correct answer: Track and maintain configuration history
Version control is vital in configuration management because it allows teams to track every change made to configuration files and scripts over time. This provides a complete audit trail, enabling easy rollback to previous, stable configurations if a new change introduces issues. It also facilitates collaboration among team members on infrastructure definitions and ensures consistency across different environments.
Question 16: What distinguishes a Certified DevOps Master certified professional from a non-certified practitioner?
- There is no meaningful difference
- Certified professionals always have more experience
- Certified professionals only work in larger organizations
- Certification validates competency through standardized assessment against benchmarks (Correct answer)
Correct answer: Certification validates competency through standardized assessment against benchmarks
Certification provides objective validation of competency through standardized assessment.
Question 17: In DevOps, what is the key advantage of using short-lived feature branches over long-lived feature branches?
- Short-lived branches require more documentation
- Short-lived branches reduce merge conflicts and integrate feedback more frequently (Correct answer)
- Short-lived branches eliminate the need for CI pipelines
- Short-lived branches enforce stricter code review policies
Correct answer: Short-lived branches reduce merge conflicts and integrate feedback more frequently
Short-lived branches diverge from the main branch for a brief period, minimizing merge conflicts and enabling continuous integration of small, reviewable increments.
Question 18: In DevSecOps, what is the primary purpose of a Web Application Firewall (WAF)?
- To filter, monitor, and block malicious HTTP traffic targeting web applications (Correct answer)
- To manage TLS certificate issuance and renewal automatically
- To load-balance traffic across multiple application instances
- To encrypt data at rest in the application database
Correct answer: To filter, monitor, and block malicious HTTP traffic targeting web applications
A WAF sits in front of web applications and inspects HTTP/S traffic to block common exploits such as XSS, SQL injection, and OWASP Top 10 attacks.
Question 19: What role does calibration play in maintaining technical accuracy for Certified DevOps Master professionals?
- It is only necessary for new equipment
- It is optional for advanced professionals
- It only matters during inspections
- It ensures instruments produce accurate, consistent results over time (Correct answer)
Correct answer: It ensures instruments produce accurate, consistent results over time
Regular calibration ensures instruments continue producing accurate results over time.
Question 20: What is a common language for writing IaC templates?
- JavaScript
- YAML (Correct answer)
- HTML
- CSS
Correct answer: YAML
YAML (YAML Ain't Markup Language) is a human-friendly data serialization standard often used for configuration files and in applications where data is being stored or transmitted. Its readability and hierarchical structure make it a popular choice for defining Infrastructure as Code templates in tools like Ansible, Kubernetes, and AWS CloudFormation. While JSON is also used, YAML is frequently preferred for its cleaner syntax.
Question 21: What is the MOST effective way for new CDM professionals to build competency?
- Studying certification materials exclusively
- Focusing solely on advanced topics
- Learning through trial and error
- Combining formal education, mentored practice, and ongoing professional development (Correct answer)
Correct answer: Combining formal education, mentored practice, and ongoing professional development
Building competency requires formal education, mentored practice, and ongoing development.
Question 22: In Certified DevOps Master practice, what is the CORRECT sequence when performing a technical procedure?
- Execute immediately and document only if issues arise
- Execute, then plan and review
- Plan, prepare, execute, verify, and document (Correct answer)
- Document, execute, then plan
Correct answer: Plan, prepare, execute, verify, and document
The correct sequence follows: plan, prepare, execute, verify, and document.
Question 23: What is the FIRST step before operating any equipment in CDM practice?
- Begin operation to test it
- Conduct a pre-operation inspection and verify safety systems (Correct answer)
- Ask a colleague if it seems okay
- Read the manual only if issues occur
Correct answer: Conduct a pre-operation inspection and verify safety systems
Pre-operation inspection ensures visible damage is checked and safety systems verified.
Question 24: Which benefit does configuration management provide?
- Consistency and repeatability (Correct answer)
- Manual error increase
- Random environment changes
- Lack of documentation
Correct answer: Consistency and repeatability
Configuration management ensures that all systems and environments are configured identically and consistently according to defined standards. This eliminates configuration drift and 'snowflake' servers, making environments predictable and reliable. The ability to repeatedly deploy the same configuration across multiple servers or environments significantly reduces errors and simplifies troubleshooting.
Question 25: Which foundational principle is MOST important for success in Certified DevOps Master?
- Commitment to continuous learning, ethical practice, and quality outcomes (Correct answer)
- Maintaining minimum certification requirements
- Maximizing financial returns
- Specializing in only one narrow area
Correct answer: Commitment to continuous learning, ethical practice, and quality outcomes
Success requires continuous learning, ethical practice, and focus on quality outcomes.
Question 26: What is the primary purpose of a pull request (PR) in a collaborative Git workflow?
- To notify the team of a new repository
- To create a backup of a branch
- To automatically merge code into production
- To propose and review changes before merging into a target branch (Correct answer)
Correct answer: To propose and review changes before merging into a target branch
A pull request is a collaboration mechanism that allows developers to propose changes, discuss them, request reviews, and merge code only after approval.
Question 27: What distinguishes a Certified DevOps Master certified professional from a non-certified practitioner?
- Certified professionals always have more experience
- There is no meaningful difference
- Certification validates competency through standardized assessment against benchmarks (Correct answer)
- Certified professionals only work in larger organizations
Correct answer: Certification validates competency through standardized assessment against benchmarks
Certification provides objective validation of competency through standardized assessment.
Question 28: When documenting assessment findings in CDM practice, which approach is MOST appropriate?
- Summarize verbally without written documentation
- Include only positive findings
- Record objective findings, measurements, and observations factually (Correct answer)
- Use jargon only experts understand
Correct answer: Record objective findings, measurements, and observations factually
Assessment documentation must be objective, factual, and comprehensive.
Question 29: Which preventive maintenance approach is MOST effective for CDM professionals?
- Fix equipment only when it breaks
- Outsource all maintenance
- Schedule regular maintenance based on manufacturer recommendations and usage (Correct answer)
- Perform maintenance annually regardless of usage
Correct answer: Schedule regular maintenance based on manufacturer recommendations and usage
Scheduling based on manufacturer recommendations and usage patterns optimizes reliability.
Question 30: Why is automation important in configuration management?
- Increase manual workload
- Reduce errors and speed deployments (Correct answer)
- Ignore consistency
- Complicate processes
Correct answer: Reduce errors and speed deployments
Automation in configuration management eliminates manual intervention, which is a common source of human error. By automating tasks like provisioning, configuring, and updating systems, organizations can ensure consistency, reduce the likelihood of misconfigurations, and significantly accelerate the speed at which infrastructure changes and deployments can be executed. This leads to more reliable and efficient operations.
Question 31: What role does calibration play in maintaining technical accuracy for Certified DevOps Master professionals?
- It is only necessary for new equipment
- It ensures instruments produce accurate, consistent results over time (Correct answer)
- It only matters during inspections
- It is optional for advanced professionals
Correct answer: It ensures instruments produce accurate, consistent results over time
Regular calibration ensures instruments continue producing accurate results over time.
Question 32: What is 'drift' in configuration management?
- Consistent systems
- Deviation from desired state (Correct answer)
- Perfect configuration
- Immediate deployment
Correct answer: Deviation from desired state
In configuration management, 'drift' refers to the phenomenon where the actual configuration of a system or environment deviates from its intended or desired state, as defined by the configuration management system. This often occurs due to manual changes, ad-hoc updates, or unmanaged processes. Configuration drift can lead to inconsistencies, instability, and security vulnerabilities across systems.
Question 33: How does the CDM body of knowledge relate to daily professional practice?
- It provides the foundational framework guiding decision-making and standard practices (Correct answer)
- It is theoretical with limited application
- It only applies during exams
- It is only for academic research
Correct answer: It provides the foundational framework guiding decision-making and standard practices
The body of knowledge provides the framework guiding daily decision-making and practices.
Question 34: Which approach is MOST important for CDM professionals when applying technical procedures?
- Adhering to established protocols while adapting to specific conditions (Correct answer)
- Using the fastest method regardless of standards
- Following personal shortcuts
- Applying the same technique without variation
Correct answer: Adhering to established protocols while adapting to specific conditions
Technical procedures require adherence to protocols with professional judgment for adaptation.
Question 35: When new equipment is introduced in Certified DevOps Master, what is REQUIRED before staff use it?
- Reading the manual independently
- Watching a colleague use it once
- Formal training, competency verification, and documentation (Correct answer)
- A brief verbal overview
Correct answer: Formal training, competency verification, and documentation
Formal training, competency verification, and documented training completion are required.
Question 36: Which preventive maintenance approach is MOST effective for CDM professionals?
- Schedule regular maintenance based on manufacturer recommendations and usage (Correct answer)
- Outsource all maintenance
- Perform maintenance annually regardless of usage
- Fix equipment only when it breaks
Correct answer: Schedule regular maintenance based on manufacturer recommendations and usage
Scheduling based on manufacturer recommendations and usage patterns optimizes reliability.
Question 37: What is 'log sampling' and when is it most appropriate to use in a high-throughput system?
- Replaying historical logs to reproduce incidents
- Encrypting a random subset of logs for security testing
- Recording only a fraction of log events to reduce storage and processing costs at very high volume (Correct answer)
- Aggregating logs by hour instead of by event
Correct answer: Recording only a fraction of log events to reduce storage and processing costs at very high volume
Log sampling records a representative subset of events (e.g., 1 in 100) to manage cost and volume in systems generating millions of events per second.
Question 38: What is the MOST important reason for maintaining equipment maintenance logs in CDM practice?
- To assign blame when equipment fails
- To track maintenance history, predict failures, and demonstrate compliance (Correct answer)
- To satisfy insurance requirements only
- To justify replacement budgets
Correct answer: To track maintenance history, predict failures, and demonstrate compliance
Maintenance logs track history, predict failures, and demonstrate regulatory compliance.
Question 39: Which factor MOST significantly affects the quality of technical outcomes in CDM practice?
- Speed of procedure completion
- The time of day
- The practitioner's training, preparation, and attention to detail (Correct answer)
- The brand of equipment
Correct answer: The practitioner's training, preparation, and attention to detail
Quality depends primarily on training, preparation, and attention to detail.
Question 40: How does the CDM body of knowledge relate to daily professional practice?
- It is theoretical with limited application
- It only applies during exams
- It provides the foundational framework guiding decision-making and standard practices (Correct answer)
- It is only for academic research
Correct answer: It provides the foundational framework guiding decision-making and standard practices
The body of knowledge provides the framework guiding daily decision-making and practices.
Certified DevOps Master (CDM)
The CDM certification validates advanced expertise in implementing and managing DevOps practices across the full software lifecycle, including CI/CD pipelines, infrastructure automation, DevSecOps, deployment operations, and software architecture principles.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds
These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- gsdcouncil.org — Eligibility, exam format, passing score, retake policy, time limit, score validity, score release · verified Oct 2026