Certified DevOps Master (CDM) — Questions and Answers

Question 1: What is Static Application Security Testing (SAST)?

Testing an application's security while it is running in production
Analyzing source code or binaries for security flaws without executing the application (Correct answer)
Monitoring network traffic for anomalous patterns
Running penetration tests manually on staging environments

Correct answer: Analyzing source code or binaries for security flaws without executing the application

SAST tools analyze source code, bytecode, or binaries at rest to find security vulnerabilities such as SQL injection or buffer overflows before the code runs.

Question 2: A 'value stream' in DevOps refers to which of the following?

The on-call rotation schedule
The sequence of steps to deliver value from idea to customer (Correct answer)
The revenue generated by a product feature
The set of automated tests in a pipeline

Correct answer: The sequence of steps to deliver value from idea to customer

A value stream maps all steps — including wait times — from customer request to delivery of working software.

Question 3: What does the DevOps principle of 'continuous feedback' primarily aim to achieve?

Replace sprint retrospectives with dashboards
Eliminate customer support tickets
Automate all human communication
Shorten the feedback loop between production and development teams (Correct answer)

Correct answer: Shorten the feedback loop between production and development teams

Continuous feedback shortens the cycle between observing production behavior and acting on that information to improve the system.

Question 4: In Certified DevOps Master practice, what is the CORRECT sequence when performing a technical procedure?

Execute, then plan and review
Plan, prepare, execute, verify, and document (Correct answer)
Execute immediately and document only if issues arise
Document, execute, then plan

Correct answer: Plan, prepare, execute, verify, and document

The correct sequence follows: plan, prepare, execute, verify, and document.

Question 5: Which Puppet concept defines the desired final state of a system resource rather than the steps to achieve it?

Declarative resource definition (Correct answer)
Procedural scripting
Imperative task execution
Event-driven remediation

Correct answer: Declarative resource definition

Puppet uses a declarative model where you describe the desired state of resources (files, packages, services) and the agent determines how to converge to that state.

Question 6: How does the CDM body of knowledge relate to daily professional practice?

It is only for academic research
It is theoretical with limited application
It provides the foundational framework guiding decision-making and standard practices (Correct answer)
It only applies during exams

Correct answer: It provides the foundational framework guiding decision-making and standard practices

The body of knowledge provides the framework guiding daily decision-making and practices.

Question 7: What role does calibration play in maintaining technical accuracy for Certified DevOps Master professionals?

It only matters during inspections
It ensures instruments produce accurate, consistent results over time (Correct answer)
It is only necessary for new equipment
It is optional for advanced professionals

Correct answer: It ensures instruments produce accurate, consistent results over time

Regular calibration ensures instruments continue producing accurate results over time.

Question 8: How does the CDM body of knowledge relate to daily professional practice?

It provides the foundational framework guiding decision-making and standard practices (Correct answer)
It is only for academic research
It is theoretical with limited application
It only applies during exams

Correct answer: It provides the foundational framework guiding decision-making and standard practices

The body of knowledge provides the framework guiding daily decision-making and practices.

Question 9: Which cloud service model gives a DevOps team the most control over the operating system and runtime environment?

PaaS (Platform as a Service)
SaaS (Software as a Service)
IaaS (Infrastructure as a Service) (Correct answer)
FaaS (Function as a Service)

Correct answer: IaaS (Infrastructure as a Service)

IaaS provides virtual machines where the team manages the OS, middleware, and runtime, offering the greatest control compared to PaaS or SaaS abstractions.

Question 10: What does the concept of 'immutable infrastructure' primarily advocate?

Encrypting all infrastructure configuration files at rest
Using version-locked dependencies in all deployment pipelines
Preventing any changes to production systems by non-admins
Replacing servers with new images rather than updating them in place (Correct answer)

Correct answer: Replacing servers with new images rather than updating them in place

Immutable infrastructure replaces servers entirely with freshly built images instead of patching running instances, reducing configuration drift.

Question 11: Which tool is purpose-built for testing infrastructure code by provisioning real resources and verifying their behavior?

Selenium
JUnit
SonarQube
Terratest (Correct answer)

Correct answer: Terratest

Terratest is a Go-based framework that provisions actual cloud resources using Terraform, validates their properties, and then tears them down as part of automated testing.

Question 12: What is the PRIMARY purpose of obtaining CDM certification in Certified DevOps Master?

To bypass educational requirements
To satisfy a personal achievement goal
To guarantee employment
To demonstrate verified competency and adherence to professional standards (Correct answer)

Correct answer: To demonstrate verified competency and adherence to professional standards

Certification demonstrates verified competency and adherence to professional standards.

Question 13: What is the FIRST step before operating any equipment in CDM practice?

Ask a colleague if it seems okay
Begin operation to test it
Read the manual only if issues occur
Conduct a pre-operation inspection and verify safety systems (Correct answer)

Correct answer: Conduct a pre-operation inspection and verify safety systems

Pre-operation inspection ensures visible damage is checked and safety systems verified.

Question 14: Which approach is MOST important for CDM professionals when applying technical procedures?

Following personal shortcuts
Applying the same technique without variation
Adhering to established protocols while adapting to specific conditions (Correct answer)
Using the fastest method regardless of standards

Correct answer: Adhering to established protocols while adapting to specific conditions

Technical procedures require adherence to protocols with professional judgment for adaptation.

Question 15: What role does calibration play in maintaining technical accuracy for Certified DevOps Master professionals?

It ensures instruments produce accurate, consistent results over time (Correct answer)
It is only necessary for new equipment
It only matters during inspections
It is optional for advanced professionals

Correct answer: It ensures instruments produce accurate, consistent results over time

Regular calibration ensures instruments continue producing accurate results over time.

Question 16: How should Certified DevOps Master professionals handle procedures that have been updated or revised?

Only apply updates to new cases
Continue using the original method
Review updates, complete required training, and implement revised procedures (Correct answer)
Wait for mandatory enforcement

Correct answer: Review updates, complete required training, and implement revised procedures

Professionals must review changes, complete training, and implement revised procedures.

Question 17: Which Ansible module is best suited for ensuring a specific line exists in a configuration file without duplicating it?

lineinfile (Correct answer)
template
copy
blockinfile

Correct answer: lineinfile

The `lineinfile` module manages individual lines in files, adding or updating them idempotently based on a regexp match.

Question 18: When new equipment is introduced in Certified DevOps Master, what is REQUIRED before staff use it?

Reading the manual independently
A brief verbal overview
Formal training, competency verification, and documentation (Correct answer)
Watching a colleague use it once

Correct answer: Formal training, competency verification, and documentation

Formal training, competency verification, and documented training completion are required.

Question 19: Which cloud-native design principle recommends that application state should not be stored in the application server process itself?

Blue-green networking
Canary deployment
Service mesh
Stateless application design (12-factor app principle VI) (Correct answer)

Correct answer: Stateless application design (12-factor app principle VI)

The 12-factor app's 'Processes' principle states that application processes must be stateless and share-nothing, with persistent state stored in backing services like databases or caches.

Question 20: Which statement BEST describes the relationship between Certified DevOps Master certification and industry evolution?

Changes only occur when government mandates them
Requirements evolve periodically to reflect advances in knowledge and practice (Correct answer)
Certification requirements never change
Requirements become less stringent over time

Correct answer: Requirements evolve periodically to reflect advances in knowledge and practice

Certification requirements evolve to keep pace with professional and technological advances.

Question 21: How should Certified DevOps Master professionals handle equipment showing signs of malfunction during operation?

Attempt field repairs while running
Continue operating while monitoring
Immediately cease operation, secure the equipment, and report (Correct answer)
Finish the current task first

Correct answer: Immediately cease operation, secure the equipment, and report

Immediate cessation prevents safety hazards, further damage, or compromised results.

Question 22: What is the MOST important reason for maintaining equipment maintenance logs in CDM practice?

To assign blame when equipment fails
To satisfy insurance requirements only
To justify replacement budgets
To track maintenance history, predict failures, and demonstrate compliance (Correct answer)

Correct answer: To track maintenance history, predict failures, and demonstrate compliance

Maintenance logs track history, predict failures, and demonstrate regulatory compliance.

Question 23: In Certified DevOps Master practice, what is the CORRECT sequence when performing a technical procedure?

Execute, then plan and review
Plan, prepare, execute, verify, and document (Correct answer)
Document, execute, then plan
Execute immediately and document only if issues arise

Correct answer: Plan, prepare, execute, verify, and document

The correct sequence follows: plan, prepare, execute, verify, and document.

Question 24: In Terraform, what is the purpose of the `terraform state mv` command?

Import an existing resource into Terraform management
Delete a resource from the state file
Refresh the state file to match real infrastructure
Move a resource to a different state file or rename it within state (Correct answer)

Correct answer: Move a resource to a different state file or rename it within state

`terraform state mv` relocates a resource record within or between state files without destroying and recreating the real infrastructure.

Question 25: A team uses structured logging with JSON format instead of plain text. What is the primary operational benefit?

Encryption of sensitive fields
Easier machine parsing and querying of specific fields (Correct answer)
Smaller log file sizes
Reduced network bandwidth for log shipping

Correct answer: Easier machine parsing and querying of specific fields

Structured JSON logs allow log aggregation systems to index and query specific fields efficiently without complex regex parsing.

Question 26: What is the MOST effective way for new CDM professionals to build competency?

Studying certification materials exclusively
Learning through trial and error
Combining formal education, mentored practice, and ongoing professional development (Correct answer)
Focusing solely on advanced topics

Correct answer: Combining formal education, mentored practice, and ongoing professional development

Building competency requires formal education, mentored practice, and ongoing development.

Question 27: What distinguishes a Certified DevOps Master certified professional from a non-certified practitioner?

Certified professionals always have more experience
There is no meaningful difference
Certification validates competency through standardized assessment against benchmarks (Correct answer)
Certified professionals only work in larger organizations

Correct answer: Certification validates competency through standardized assessment against benchmarks

Certification provides objective validation of competency through standardized assessment.

Question 28: In a GitOps workflow, what serves as the single source of truth for infrastructure state?

The live cloud provider console
A Git repository containing declarative configuration files (Correct answer)
An agent running on each managed node
The CI/CD pipeline's artifact registry

Correct answer: A Git repository containing declarative configuration files

GitOps treats the Git repository as the authoritative desired state, using automated reconciliation to ensure running infrastructure matches what is committed.

Question 29: What is the FIRST step before operating any equipment in CDM practice?

Begin operation to test it
Conduct a pre-operation inspection and verify safety systems (Correct answer)
Read the manual only if issues occur
Ask a colleague if it seems okay

Correct answer: Conduct a pre-operation inspection and verify safety systems

Pre-operation inspection ensures visible damage is checked and safety systems verified.

Question 30: Which Terraform feature allows multiple configurations to share the same infrastructure state?

Remote backends with workspaces (Correct answer)
Provider aliases
Module registries
Data sources

Correct answer: Remote backends with workspaces

Remote backends such as S3 or Terraform Cloud combined with workspaces allow teams to share and isolate state across environments.

Question 31: What is the PROPER procedure for decommissioning outdated equipment in Certified DevOps Master?

Donate without preparation
Simply discard in regular waste
Follow established protocols for safe decommissioning, data clearing, and proper disposal (Correct answer)
Store indefinitely in case it's needed

Correct answer: Follow established protocols for safe decommissioning, data clearing, and proper disposal

Decommissioning requires safe shutdown, data clearing, proper disposal, and documentation.

Question 32: Why is version control important in configuration management?

Avoid documentation
Ignore changes
Track and maintain configuration history (Correct answer)
Delete previous versions

Correct answer: Track and maintain configuration history

Version control is vital in configuration management because it allows teams to track every change made to configuration files and scripts over time. This provides a complete audit trail, enabling easy rollback to previous, stable configurations if a new change introduces issues. It also facilitates collaboration among team members on infrastructure definitions and ensures consistency across different environments.

Question 33: Which factor MOST significantly affects the quality of technical outcomes in CDM practice?

The brand of equipment
The time of day
Speed of procedure completion
The practitioner's training, preparation, and attention to detail (Correct answer)

Correct answer: The practitioner's training, preparation, and attention to detail

Quality depends primarily on training, preparation, and attention to detail.

Question 34: In a blameless postmortem, what is the primary goal of the 'five whys' technique?

To calculate the financial impact of the outage
To document the timeline of the incident
To assign responsibility to the engineer who made the error
To iteratively ask 'why' to trace from symptoms to root systemic causes (Correct answer)

Correct answer: To iteratively ask 'why' to trace from symptoms to root systemic causes

The five whys technique drills past surface symptoms by repeatedly asking 'why' until the underlying systemic or process failure is identified.

Question 35: What distinguishes a Certified DevOps Master certified professional from a non-certified practitioner?

Certified professionals always have more experience
Certification validates competency through standardized assessment against benchmarks (Correct answer)
There is no meaningful difference
Certified professionals only work in larger organizations

Correct answer: Certification validates competency through standardized assessment against benchmarks

Certification provides objective validation of competency through standardized assessment.

Question 36: Which preventive maintenance approach is MOST effective for CDM professionals?

Outsource all maintenance
Perform maintenance annually regardless of usage
Schedule regular maintenance based on manufacturer recommendations and usage (Correct answer)
Fix equipment only when it breaks

Correct answer: Schedule regular maintenance based on manufacturer recommendations and usage

Scheduling based on manufacturer recommendations and usage patterns optimizes reliability.

Question 37: When new equipment is introduced in Certified DevOps Master, what is REQUIRED before staff use it?

Watching a colleague use it once
Formal training, competency verification, and documentation (Correct answer)
A brief verbal overview
Reading the manual independently

Correct answer: Formal training, competency verification, and documentation

Formal training, competency verification, and documented training completion are required.

Question 38: Which statement BEST describes the relationship between Certified DevOps Master certification and industry evolution?

Certification requirements never change
Requirements become less stringent over time
Changes only occur when government mandates them
Requirements evolve periodically to reflect advances in knowledge and practice (Correct answer)

Correct answer: Requirements evolve periodically to reflect advances in knowledge and practice

Certification requirements evolve to keep pace with professional and technological advances.

Question 39: When a CDM professional encounters an unexpected result during a procedure, the FIRST action should be to:

Continue and address it later
Repeat the procedure immediately
Report without preliminary assessment
Stop, assess the situation, and determine whether to proceed or seek guidance (Correct answer)

Correct answer: Stop, assess the situation, and determine whether to proceed or seek guidance

Stopping to assess unexpected results is critical for safety and quality.

Question 40: A team wants to test a new feature with only 10% of users before full rollout. Which technique should they use?

A/B Testing with Feature Flags (Correct answer)
Shadow Mode Deployment
Rolling Deployment
Blue-Green Deployment

Correct answer: A/B Testing with Feature Flags

Feature flags combined with A/B testing allow the new feature to be toggled on for a controlled percentage of users without a separate deployment.

Certified DevOps Master (CDM)

The CDM certification validates advanced expertise in implementing and managing DevOps practices across the full software lifecycle, including CI/CD pipelines, infrastructure automation, DevSecOps, deployment operations, and software architecture principles.

Questions

90 min

Time Limit

65%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds