Certified DevOps Master (CDM) — Questions and Answers

Question 1: What is 'infrastructure as code' (IaC)?

Manual configuration
Physical hardware setup
Writing application code
Infrastructure managed as code (Correct answer)

Correct answer: Infrastructure managed as code

Infrastructure as Code (IaC) is a practice where infrastructure (networks, virtual machines, databases, etc.) is provisioned and managed using machine-readable definition files, rather than through manual processes or interactive tools. These definition files are versioned, tested, and deployed just like application code. IaC brings the benefits of software development practices, such as version control, automated testing, and continuous integration, to infrastructure management, ensuring consistency and repeatability.

Question 2: What Ansible construct allows you to define and reuse a set of tasks with its own variables, files, and handlers?

Inventory
Vault
Playbook
Role (Correct answer)

Correct answer: Role

An Ansible role provides a structured directory layout for tasks, handlers, defaults, and files, enabling reuse across multiple playbooks.

Question 3: How should Certified DevOps Master professionals handle equipment showing signs of malfunction during operation?

Finish the current task first
Attempt field repairs while running
Immediately cease operation, secure the equipment, and report (Correct answer)
Continue operating while monitoring

Correct answer: Immediately cease operation, secure the equipment, and report

Immediate cessation prevents safety hazards, further damage, or compromised results.

Question 4: What is a 'release train' model in the context of CD?

A method of deploying microservices in dependency order
A deployment technique where changes are batched and released on a fixed schedule regardless of individual feature readiness (Correct answer)
A continuous deployment approach where every commit is deployed instantly
An automated rollback mechanism triggered by error rate thresholds

Correct answer: A deployment technique where changes are batched and released on a fixed schedule regardless of individual feature readiness

A release train deploys on a fixed cadence (e.g., every two weeks); features ready by the cutoff ride the train, others wait for the next one.

Question 5: What is the FIRST step before operating any equipment in CDM practice?

Begin operation to test it
Conduct a pre-operation inspection and verify safety systems (Correct answer)
Ask a colleague if it seems okay
Read the manual only if issues occur

Correct answer: Conduct a pre-operation inspection and verify safety systems

Pre-operation inspection ensures visible damage is checked and safety systems verified.

Question 6: Which access control model is typically recommended for managing permissions in a large DevOps organization's Git repositories?

Restrict all access to a single repository owner with manual file distribution
Give every developer admin access to all repositories to maximize velocity
Share a single service account credential among all CI/CD pipelines
Role-Based Access Control (RBAC) with least-privilege principles applied per repository or project (Correct answer)

Correct answer: Role-Based Access Control (RBAC) with least-privilege principles applied per repository or project

RBAC with least-privilege ensures each developer and service account has only the permissions required for their role, reducing the blast radius of compromised credentials or human error.

Question 7: In a distributed team using Git, what is the recommended strategy to maintain a clean and understandable project history?

Use squash merging or rebase to consolidate noisy feature branch commits before merging (Correct answer)
Commit all work-in-progress directly to main
Force-push frequently to update remote branches with local history rewrites
Avoid using commit messages to save time

Correct answer: Use squash merging or rebase to consolidate noisy feature branch commits before merging

Squash merging or rebasing condenses many small work-in-progress commits into meaningful, atomic commits, keeping the shared history clean and easier to audit.

Question 8: Why is automation important in configuration management?

Complicate processes
Ignore consistency
Increase manual workload
Reduce errors and speed deployments (Correct answer)

Correct answer: Reduce errors and speed deployments

Automation in configuration management eliminates manual intervention, which is a common source of human error. By automating tasks like provisioning, configuring, and updating systems, organizations can ensure consistency, reduce the likelihood of misconfigurations, and significantly accelerate the speed at which infrastructure changes and deployments can be executed. This leads to more reliable and efficient operations.

Question 9: Which Terraform feature allows multiple configurations to share the same infrastructure state?

Remote backends with workspaces (Correct answer)
Module registries
Provider aliases
Data sources

Correct answer: Remote backends with workspaces

Remote backends such as S3 or Terraform Cloud combined with workspaces allow teams to share and isolate state across environments.

Question 10: In Certified DevOps Master practice, what is the CORRECT sequence when performing a technical procedure?

Document, execute, then plan
Plan, prepare, execute, verify, and document (Correct answer)
Execute immediately and document only if issues arise
Execute, then plan and review

Correct answer: Plan, prepare, execute, verify, and document

The correct sequence follows: plan, prepare, execute, verify, and document.

Question 11: Which AWS service is commonly used as a remote backend for storing Terraform state files?

AWS Systems Manager Parameter Store
Amazon DynamoDB
Amazon S3 with optional DynamoDB locking (Correct answer)
AWS CodePipeline

Correct answer: Amazon S3 with optional DynamoDB locking

Amazon S3 stores the Terraform state file while DynamoDB provides state locking to prevent concurrent modifications.

Question 12: When a CDM professional encounters an unexpected result during a procedure, the FIRST action should be to:

Stop, assess the situation, and determine whether to proceed or seek guidance (Correct answer)
Report without preliminary assessment
Continue and address it later
Repeat the procedure immediately

Correct answer: Stop, assess the situation, and determine whether to proceed or seek guidance

Stopping to assess unexpected results is critical for safety and quality.

Question 13: What role does calibration play in maintaining technical accuracy for Certified DevOps Master professionals?

It only matters during inspections
It ensures instruments produce accurate, consistent results over time (Correct answer)
It is only necessary for new equipment
It is optional for advanced professionals

Correct answer: It ensures instruments produce accurate, consistent results over time

Regular calibration ensures instruments continue producing accurate results over time.

Question 14: What is the FIRST step before operating any equipment in CDM practice?

Read the manual only if issues occur
Ask a colleague if it seems okay
Conduct a pre-operation inspection and verify safety systems (Correct answer)
Begin operation to test it

Correct answer: Conduct a pre-operation inspection and verify safety systems

Pre-operation inspection ensures visible damage is checked and safety systems verified.

Question 15: How does logging assist in compliance?

Demonstrate regulatory adherence (Correct answer)
Delete records
Hide user activity
Ignore audits

Correct answer: Demonstrate regulatory adherence

Logging is critical for compliance because it provides an auditable trail of system activities, user actions, and security events. Many regulatory frameworks (e.g., GDPR, HIPAA, PCI DSS) require organizations to maintain detailed logs to demonstrate adherence to security policies, data access controls, and incident response procedures. These logs are essential evidence during compliance audits.

Question 16: Which statement BEST describes the relationship between Certified DevOps Master certification and industry evolution?

Changes only occur when government mandates them
Certification requirements never change
Requirements evolve periodically to reflect advances in knowledge and practice (Correct answer)
Requirements become less stringent over time

Correct answer: Requirements evolve periodically to reflect advances in knowledge and practice

Certification requirements evolve to keep pace with professional and technological advances.

Question 17: How does the CDM body of knowledge relate to daily professional practice?

It provides the foundational framework guiding decision-making and standard practices (Correct answer)
It is theoretical with limited application
It is only for academic research
It only applies during exams

Correct answer: It provides the foundational framework guiding decision-making and standard practices

The body of knowledge provides the framework guiding daily decision-making and practices.

Question 18: What is the MOST effective way for new CDM professionals to build competency?

Learning through trial and error
Combining formal education, mentored practice, and ongoing professional development (Correct answer)
Studying certification materials exclusively
Focusing solely on advanced topics

Correct answer: Combining formal education, mentored practice, and ongoing professional development

Building competency requires formal education, mentored practice, and ongoing development.

Question 19: Which approach is MOST important for CDM professionals when applying technical procedures?

Applying the same technique without variation
Adhering to established protocols while adapting to specific conditions (Correct answer)
Following personal shortcuts
Using the fastest method regardless of standards

Correct answer: Adhering to established protocols while adapting to specific conditions

Technical procedures require adherence to protocols with professional judgment for adaptation.

Question 20: In Terraform, what is the effect of setting `prevent_destroy = true` in a resource's `lifecycle` block?

Locks the resource state file so other users cannot modify it
Prevents the resource from being modified by any `terraform apply`
Causes Terraform to error if a plan would destroy the resource (Correct answer)
Excludes the resource from `terraform plan` output

Correct answer: Causes Terraform to error if a plan would destroy the resource

`prevent_destroy = true` is a safeguard that makes Terraform abort with an error if a plan would delete the resource, protecting stateful resources like databases.

Question 21: What is the PROPER procedure for decommissioning outdated equipment in Certified DevOps Master?

Simply discard in regular waste
Follow established protocols for safe decommissioning, data clearing, and proper disposal (Correct answer)
Donate without preparation
Store indefinitely in case it's needed

Correct answer: Follow established protocols for safe decommissioning, data clearing, and proper disposal

Decommissioning requires safe shutdown, data clearing, proper disposal, and documentation.

Question 22: What does 'Infrastructure as Code' (IaC) scanning help detect?

Misconfigurations and security policy violations in IaC templates before deployment (Correct answer)
Syntax errors in application business logic
Network latency between microservices at runtime
Memory leaks in containerized workloads

Correct answer: Misconfigurations and security policy violations in IaC templates before deployment

IaC scanning tools like Checkov or tfsec analyze Terraform, CloudFormation, or Kubernetes manifests to catch insecure defaults and misconfigurations before they are applied.

Question 23: When new equipment is introduced in Certified DevOps Master, what is REQUIRED before staff use it?

Formal training, competency verification, and documentation (Correct answer)
Reading the manual independently
Watching a colleague use it once
A brief verbal overview

Correct answer: Formal training, competency verification, and documentation

Formal training, competency verification, and documented training completion are required.

Question 24: When a CDM professional encounters an unexpected result during a procedure, the FIRST action should be to:

Stop, assess the situation, and determine whether to proceed or seek guidance (Correct answer)
Repeat the procedure immediately
Continue and address it later
Report without preliminary assessment

Correct answer: Stop, assess the situation, and determine whether to proceed or seek guidance

Stopping to assess unexpected results is critical for safety and quality.

Question 25: What is the MOST effective way for new CDM professionals to build competency?

Combining formal education, mentored practice, and ongoing professional development (Correct answer)
Studying certification materials exclusively
Focusing solely on advanced topics
Learning through trial and error

Correct answer: Combining formal education, mentored practice, and ongoing professional development

Building competency requires formal education, mentored practice, and ongoing development.

Question 26: How should Certified DevOps Master professionals handle procedures that have been updated or revised?

Only apply updates to new cases
Review updates, complete required training, and implement revised procedures (Correct answer)
Wait for mandatory enforcement
Continue using the original method

Correct answer: Review updates, complete required training, and implement revised procedures

Professionals must review changes, complete training, and implement revised procedures.

Question 27: Which foundational principle is MOST important for success in Certified DevOps Master?

Specializing in only one narrow area
Commitment to continuous learning, ethical practice, and quality outcomes (Correct answer)
Maximizing financial returns
Maintaining minimum certification requirements

Correct answer: Commitment to continuous learning, ethical practice, and quality outcomes

Success requires continuous learning, ethical practice, and focus on quality outcomes.

Question 28: What is the MOST important reason for maintaining equipment maintenance logs in CDM practice?

To satisfy insurance requirements only
To track maintenance history, predict failures, and demonstrate compliance (Correct answer)
To assign blame when equipment fails
To justify replacement budgets

Correct answer: To track maintenance history, predict failures, and demonstrate compliance

Maintenance logs track history, predict failures, and demonstrate regulatory compliance.

Question 29: What is the PRIMARY purpose of obtaining CDM certification in Certified DevOps Master?

To guarantee employment
To satisfy a personal achievement goal
To demonstrate verified competency and adherence to professional standards (Correct answer)
To bypass educational requirements

Correct answer: To demonstrate verified competency and adherence to professional standards

Certification demonstrates verified competency and adherence to professional standards.

Question 30: In incident communication, what is the purpose of a status page (e.g., Statuspage.io) during an active outage?

To trigger automated rollbacks of deployments
To store detailed internal postmortem data
To provide transparent, real-time incident updates to external customers and stakeholders (Correct answer)
To route alerts to the correct on-call team

Correct answer: To provide transparent, real-time incident updates to external customers and stakeholders

A status page gives customers visibility into ongoing incidents and current service health, reducing inbound support volume and maintaining trust.

Certified DevOps Master (CDM)

The CDM certification validates advanced expertise in implementing and managing DevOps practices across the full software lifecycle, including CI/CD pipelines, infrastructure automation, DevSecOps, deployment operations, and software architecture principles.

Questions

35 min

Time Limit

65%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds