DevOps Engineering on AWS Certification DevOps Engineering on AWS Certification MCQ 3

Question 1

A DevOps team wants to store application secrets such as database passwords in a way that supports automatic rotation. Which AWS service is best suited for this requirement?

Accepted Answer

AWS Secrets Manager

Answer

AWS Secrets Manager natively supports automatic secret rotation using Lambda functions and integrates directly with RDS, Redshift, and DocumentDB.

Question 2

Which AWS CodeBuild environment variable type stores the value in AWS Systems Manager Parameter Store and retrieves it at build time without exposing it in build logs?

Accepted Answer

PARAMETER_STORE

Answer

The PARAMETER_STORE environment variable type in CodeBuild retrieves values from SSM Parameter Store at build time so they never appear in the buildspec or console.

Question 3

A company uses AWS Organizations and wants to prevent member accounts from disabling AWS CloudTrail. Which mechanism enforces this across all accounts?

Accepted Answer

A Service Control Policy (SCP) attached to the organization root

Answer

SCPs attached to the organization root act as guardrails that deny CloudTrail-disabling API calls even for account administrators in all member accounts.

Question 4

When designing a CI/CD pipeline for a microservices architecture on Amazon EKS, which tool is commonly used to package, version, and deploy Kubernetes manifests?

Accepted Answer

Helm

Answer

Helm is the de facto Kubernetes package manager that templates manifests into versioned charts, enabling repeatable and parameterized deployments to EKS clusters.

Question 5

A Lambda-based application experiences intermittent throttling during traffic spikes. Which configuration change best reduces throttling without increasing function concurrency limits?

Accepted Answer

Enable provisioned concurrency on the Lambda function

Answer

Provisioned concurrency pre-initializes execution environments so they are ready to respond immediately, eliminating cold starts and reducing the chance of throttling during spikes.

DevOps Engineering on AWS Certification Practice Test

DevOps Engineering on AWS Certification Practice Test

DevOps Engineering on AWS Certification DevOps Engineering on AWS Certification MCQ 3