DevOps Engineer Certification Exam — Questions and Answers

Question 1: What is distributed tracing?

Tracking a request's journey across multiple services to diagnose latency and failures (Correct answer)
Logging all API calls made by a distributed application
Monitoring CPU and memory usage across distributed servers
Collecting metrics from multiple cloud providers in one place

Correct answer: Tracking a request's journey across multiple services to diagnose latency and failures

Distributed tracing instruments requests with trace IDs that flow through all microservices, allowing developers to visualize the full request path and identify bottlenecks.

Question 2: What is a Docker image?

A running instance of a containerized application
A configuration file that defines container networking
A read-only template used to create Docker containers (Correct answer)
A virtual machine snapshot for cloud deployments

Correct answer: A read-only template used to create Docker containers

A Docker image is a read-only, layered template built from a Dockerfile that serves as the blueprint for creating containers.

Question 3: What is a 'canary deployment'?

Rolling out a new version to a small subset of users before full deployment (Correct answer)
Deploying to a parallel environment and switching traffic instantly
Deploying to production only after manual sign-off
Running automated tests in a production-like environment

Correct answer: Rolling out a new version to a small subset of users before full deployment

A canary deployment gradually routes a small percentage of traffic to the new version to detect issues before rolling out to all users.

Question 4: What does 'idempotency' mean in the context of IaC tools like Ansible?

Changes are applied only once and ignored on subsequent runs
Infrastructure is destroyed and recreated on every run
Running the same operation multiple times produces the same result without unintended side effects (Correct answer)
Each run generates a new unique infrastructure configuration

Correct answer: Running the same operation multiple times produces the same result without unintended side effects

Idempotency means you can run a playbook or Terraform apply multiple times and the end state will always be the same desired state without duplicate or unexpected changes.

Question 5: What is chaos engineering?

Randomly deleting production databases
Writing code with intentional bugs
Stress testing network bandwidth
Deliberately injecting failures into a system to test its resilience and identify weaknesses before they cause incidents (Correct answer)

Correct answer: Deliberately injecting failures into a system to test its resilience and identify weaknesses before they cause incidents

Chaos engineering (e.g., Netflix's Chaos Monkey) proactively breaks things in controlled ways to discover failure modes and verify that systems handle them gracefully.

Question 6: What is a load balancer health check?

A periodic test sent to backend instances to determine if they are healthy and should receive traffic (Correct answer)
A Kubernetes liveness probe
A CPU utilization alert
A network bandwidth monitoring tool

Correct answer: A periodic test sent to backend instances to determine if they are healthy and should receive traffic

Load balancers use health checks (HTTP, TCP, or custom probes) to automatically remove unhealthy instances from the rotation and restore them once they pass checks again.

Question 7: What is 'on-call rotation' in SRE?

A team meeting to review incident reports
A schedule where team members take turns being the primary responder for production incidents (Correct answer)
A load testing schedule
A CI/CD deployment schedule

Correct answer: A schedule where team members take turns being the primary responder for production incidents

On-call rotation distributes the burden of production incident response across the team, with clearly defined primary and secondary responders and escalation paths.

Question 8: What is Prometheus primarily used for in a DevOps environment?

Collecting and storing time-series metrics with a pull-based model (Correct answer)
Distributed tracing of requests across microservices
Alerting on infrastructure security vulnerabilities
Aggregating and searching application logs across services

Correct answer: Collecting and storing time-series metrics with a pull-based model

Prometheus is an open-source monitoring system that scrapes metrics from instrumented targets at defined intervals and stores them as time-series data.

Question 9: What is AWS CloudFormation?

An AWS-native IaC service that provisions resources using JSON or YAML templates (Correct answer)
A cloud storage service for Terraform state files
An AWS service for automating CI/CD pipelines
A tool for monitoring AWS resource usage and costs

Correct answer: An AWS-native IaC service that provisions resources using JSON or YAML templates

AWS CloudFormation allows you to model and provision AWS infrastructure resources using declarative JSON or YAML templates called stacks.

Question 10: In a CI/CD pipeline, what does 'shift-left testing' mean?

Delaying tests until after deployment
Prioritizing UI tests over unit tests
Running tests on the left side of a distributed system
Moving testing earlier in the development lifecycle (Correct answer)

Correct answer: Moving testing earlier in the development lifecycle

Shift-left testing means incorporating testing earlier in the software development lifecycle to find and fix defects sooner and at lower cost.

Question 11: Which metric measures how frequently code is deployed to production in a CI/CD context?

Mean time to recovery (MTTR)
Deployment frequency (Correct answer)
Change failure rate
Lead time for changes

Correct answer: Deployment frequency

Deployment frequency, one of the four DORA metrics, measures how often an organization successfully releases to production.

Question 12: What does a Kubernetes NetworkPolicy do?

Controls which Pods can communicate with each other and with external endpoints (Correct answer)
Sets bandwidth limits on inter-node network traffic
Configures load balancing algorithms for Service traffic
Defines DNS resolution rules for Services within a namespace

Correct answer: Controls which Pods can communicate with each other and with external endpoints

NetworkPolicies define firewall rules at the Pod level, specifying which ingress and egress traffic is allowed based on Pod labels and namespaces.

Question 13: What is the function of the Kubernetes Horizontal Pod Autoscaler (HPA)?

Distributes Pods evenly across availability zones
Scales node sizes vertically
Automatically scales the number of Pod replicas based on CPU/memory metrics (Correct answer)
Manages cluster node provisioning

Correct answer: Automatically scales the number of Pod replicas based on CPU/memory metrics

HPA monitors metrics and adjusts the replica count of a Deployment or StatefulSet to match current demand automatically.

Question 14: What does `terraform init` do?

Creates an execution plan showing infrastructure changes
Initializes a Terraform working directory and downloads provider plugins (Correct answer)
Applies the Terraform configuration to provision resources
Destroys all infrastructure managed by the configuration

Correct answer: Initializes a Terraform working directory and downloads provider plugins

`terraform init` initializes the working directory by downloading the required provider plugins and setting up the backend for state storage.

Question 15: What does a Kubernetes Deployment object manage?

Declarative updates and scaling of ReplicaSets and Pods (Correct answer)
Routing external traffic to services inside the cluster
Cluster-wide configuration and secret management
Persistent storage volumes for stateful applications

Correct answer: Declarative updates and scaling of ReplicaSets and Pods

A Deployment manages a ReplicaSet to ensure the desired number of identical Pods are running and handles rolling updates and rollbacks.

Question 16: What is 'toil' in SRE terminology?

Post-incident report writing
On-call scheduling
Planned maintenance windows
Manual, repetitive operational work that is automatable, tactical, and scales with service growth (Correct answer)

Correct answer: Manual, repetitive operational work that is automatable, tactical, and scales with service growth

SRE defines toil as work that is manual, repetitive, automatable, tactical, and grows proportionally with service load — teams aim to keep toil below 50% of work time.

Question 17: Which Git branching strategy is most commonly associated with CI/CD pipelines?

Trunk-based development (Correct answer)
Forking workflow
Git Flow
Feature branching

Correct answer: Trunk-based development

Trunk-based development, where all developers commit to a single main branch frequently, best supports CI/CD by reducing merge conflicts and enabling rapid integration.

Question 18: Which IaC tool uses a declarative language called HCL (HashiCorp Configuration Language)?

Chef
Terraform (Correct answer)
Ansible
Puppet

Correct answer: Terraform

Terraform uses HCL to describe the desired state of infrastructure; it then creates, updates, or destroys resources to match that declared state.

Question 19: What is a 'golden signal' in SRE monitoring?

A high-priority production alert
A 100% uptime milestone
One of four key metrics: latency, traffic, errors, and saturation (Correct answer)
A Grafana dashboard theme

Correct answer: One of four key metrics: latency, traffic, errors, and saturation

The four golden signals (from Google's SRE book) — latency, traffic, errors, and saturation — are the most critical metrics to monitor for any user-facing service.

Question 20: What is a circuit breaker pattern?

A deployment rollback mechanism
A Kubernetes network policy
A design pattern that stops sending requests to a failing service to allow it to recover, instead of overwhelming it (Correct answer)
A load balancing algorithm

Correct answer: A design pattern that stops sending requests to a failing service to allow it to recover, instead of overwhelming it

The circuit breaker opens when a service exceeds a failure threshold, redirecting or failing fast for requests instead of waiting for timeouts, protecting the caller and giving the failing service recovery time.

Question 21: What is a cloud cost optimization strategy called 'right-sizing'?

Expanding instances to the largest available size
Migrating workloads to cheaper regions
Selecting the smallest instance type that meets a workload's actual performance requirements (Correct answer)
Using reserved instances for all workloads

Correct answer: Selecting the smallest instance type that meets a workload's actual performance requirements

Right-sizing analyzes actual CPU, memory, and I/O usage to replace over-provisioned instances with smaller, cost-appropriate alternatives without impacting performance.

Question 22: In GitLab CI/CD, what file defines the pipeline configuration?

.gitlab-ci.yml (Correct answer)
ci-config.yml
pipeline.yml
Gitlabfile

Correct answer: .gitlab-ci.yml

GitLab CI/CD reads its pipeline configuration from a `.gitlab-ci.yml` file stored at the root of the repository.

Question 23: What does 'fail fast' mean in a CI/CD pipeline?

Deploying rapidly even if some non-critical tests fail
Automatically rolling back all failed deployments immediately
Running the quickest and most critical checks first to detect failures early (Correct answer)
Terminating the pipeline as soon as any single test fails

Correct answer: Running the quickest and most critical checks first to detect failures early

Fail fast means ordering pipeline stages so the fastest and most likely-to-fail checks (lint, unit tests) run first, giving developers quick feedback.

Question 24: What is Grafana used for?

Collecting application logs from distributed services
Tracing distributed requests across microservices
Visualizing metrics and logs from data sources like Prometheus in dashboards (Correct answer)
Running load tests against production systems

Correct answer: Visualizing metrics and logs from data sources like Prometheus in dashboards

Grafana is an open-source visualization and analytics platform that connects to data sources like Prometheus, Elasticsearch, and CloudWatch to create dashboards.

Question 25: What is the main risk of using 'git push --force' on a shared branch?

It permanently deletes all tags in the repository
It resets all branch protections and CI integrations
It merges all pending pull requests automatically
It overwrites remote history, potentially losing teammates' committed work (Correct answer)

Correct answer: It overwrites remote history, potentially losing teammates' committed work

Force pushing rewrites the remote branch history, which can erase commits others have pushed, causing data loss and broken local copies.

Question 26: What does the `terraform destroy` command do?

Deletes all .tf configuration files in the current directory
Removes the Terraform state file from the backend
Reverts infrastructure to the previous Terraform state
Destroys all infrastructure resources managed by the current Terraform state (Correct answer)

Correct answer: Destroys all infrastructure resources managed by the current Terraform state

`terraform destroy` plans and executes the removal of all resources tracked in the state file, effectively tearing down the managed infrastructure.

Question 27: What is backpressure in distributed systems?

A database replication lag
Network latency between microservices
A mechanism where a downstream service signals upstream services to slow down when it's overwhelmed (Correct answer)
A Kubernetes resource quota

Correct answer: A mechanism where a downstream service signals upstream services to slow down when it's overwhelmed

Backpressure prevents cascading overload by letting overwhelmed services reject or slow requests, signaling upstream callers to reduce their send rate.

Question 28: What does 'infrastructure immutability' enable in cloud deployments?

Read-only access to production databases
Consistent, repeatable deployments by replacing instances rather than updating them in place (Correct answer)
Disabling auto-scaling during deployments
Preventing all changes to cloud resources

Correct answer: Consistent, repeatable deployments by replacing instances rather than updating them in place

Immutable infrastructure means every deployment creates new instances from a fresh image, eliminating configuration drift and making rollbacks as simple as switching to the previous image.

Question 29: What is 'observability-driven development'?

Building systems with instrumentation and telemetry from the start so they are intrinsically observable (Correct answer)
Writing unit tests for monitoring code
Replacing code reviews with log analysis
Using observability tools to write code

Correct answer: Building systems with instrumentation and telemetry from the start so they are intrinsically observable

Observability-driven development treats telemetry as a first-class concern, ensuring every feature ships with the metrics, logs, and traces needed to understand its behavior in production.

Question 30: What is AWS Auto Scaling?

A service that automatically adjusts compute capacity based on defined scaling policies and metrics (Correct answer)
A feature that automatically migrates workloads to cheaper AWS regions
An AWS service for automatically patching and updating EC2 instances
A tool for automatically deploying new EC2 instance types when they become available

Correct answer: A service that automatically adjusts compute capacity based on defined scaling policies and metrics

AWS Auto Scaling monitors application metrics (CPU, requests) and automatically adds or removes EC2 instances, ECS tasks, or other resources to meet demand.

Question 31: What is 'pipeline as code'?

Defining CI/CD pipeline configuration in version-controlled files (Correct answer)
Using infrastructure code to provision pipeline servers
Writing pipeline logic in a programming language like Python
Automating code review processes through pipelines

Correct answer: Defining CI/CD pipeline configuration in version-controlled files

Pipeline as code means storing pipeline definitions in version-controlled files (like Jenkinsfile or .gitlab-ci.yml) so they are treated like application code.

Question 32: What is a 'blue-green deployment' strategy?

Running two identical production environments and switching traffic between them (Correct answer)
Deploying canary builds to test new features
Using blue containers for staging and green containers for production
Deploying to a subset of servers first then rolling out gradually

Correct answer: Running two identical production environments and switching traffic between them

Blue-green deployment maintains two identical production environments where one is live (blue) and the other receives the new deployment (green), then traffic is switched.

Question 33: What is the principle behind GitOps?

Storing application code and infrastructure code in separate Git repositories
Using Git as the single source of truth for declarative infrastructure and application configuration (Correct answer)
Automating Git branching strategies using CI/CD pipelines
Using Git hooks to trigger infrastructure provisioning

Correct answer: Using Git as the single source of truth for declarative infrastructure and application configuration

GitOps uses Git as the source of truth for both application and infrastructure configuration, where any change to the Git repo triggers automated reconciliation of the live environment.

Question 34: What does 'mean time to recovery' (MTTR) measure?

The average time to restore service after a failure (Correct answer)
The number of deployments per day
The total uptime of a system
The cost of cloud resources

Correct answer: The average time to restore service after a failure

MTTR measures how quickly a team restores service after an incident or failure.

Question 35: What is an Ansible 'playbook'?

A role that groups related tasks for reuse across projects
A template for generating configuration files on remote hosts
A YAML file that defines an ordered set of tasks to execute on managed hosts (Correct answer)
A dynamic inventory script that lists managed hosts

Correct answer: A YAML file that defines an ordered set of tasks to execute on managed hosts

An Ansible playbook is a YAML file containing one or more plays that map groups of hosts to roles and tasks to configure or deploy applications.

Question 36: In a Jenkins pipeline, what file defines the pipeline-as-code configuration?

build.xml
Jenkinsfile (Correct answer)
ci-config.json
pipeline.yaml

Correct answer: Jenkinsfile

A Jenkinsfile is a text file stored in the repository that defines the Jenkins pipeline using either Declarative or Scripted pipeline syntax.

Question 37: What is the '12-Factor App' methodology?

A framework with 12 architectural patterns for distributed systems
A methodology for building scalable, maintainable cloud-native applications across 12 principles (Correct answer)
A checklist of 12 security requirements for cloud applications
A 12-step deployment process for containerized microservices

Correct answer: A methodology for building scalable, maintainable cloud-native applications across 12 principles

The 12-Factor App methodology defines 12 principles for building SaaS applications that are scalable, portable, and maintainable, covering topics from codebase to logging.

Question 38: 23. Which of the following is a critical success factor for DevOps?

Breaking down silos
Making use of an enterprise tool
System engineering that includes both Dev and Ops (Correct answer)
Making use of agile software development techniques

Correct answer: System engineering that includes both Dev and Ops

A critical success factor for DevOps is the adoption of a holistic system engineering approach that explicitly integrates both development and operations perspectives. This means designing, building, and maintaining systems with the entire lifecycle in mind, considering operational concerns from the outset of development. This integration ensures that systems are not only functional but also reliable, scalable, and easily operable, breaking down traditional silos and fostering shared responsibility.

Question 39: What does MTTR stand for in incident management?

Mean Time to Recovery — average time to restore service after an incident (Correct answer)
Mean Time to Respond — average time for on-call to acknowledge an alert
Mean Time to Report — average time to notify stakeholders of an incident
Maximum Time to Resolve — SLA-defined resolution deadline

Correct answer: Mean Time to Recovery — average time to restore service after an incident

MTTR (Mean Time to Recovery) measures the average elapsed time between a system failure and full service restoration, indicating incident response effectiveness.

Question 40: What is AWS Fargate?

An AWS service for building and storing Docker images
A serverless compute engine for containers that removes the need to manage underlying EC2 instances (Correct answer)
An AWS managed Kubernetes service for running container clusters
A tool for automatically scaling ECS clusters based on task count

Correct answer: A serverless compute engine for containers that removes the need to manage underlying EC2 instances

AWS Fargate is a serverless container execution engine for ECS and EKS that provisions and manages the underlying compute infrastructure automatically.

Question 41: What is a Terraform 'workspace'?

A GUI for visualizing Terraform infrastructure plans
A remote execution environment for running Terraform commands
A shared repository for storing Terraform modules
An isolated state environment that allows multiple deployments from the same configuration (Correct answer)

Correct answer: An isolated state environment that allows multiple deployments from the same configuration

Terraform workspaces allow you to maintain separate state files for different environments (dev, staging, prod) using the same configuration codebase.

Question 42: What is request retrying with exponential backoff?

Retrying immediately and continuously until success
A deployment retry mechanism in CI/CD
A database transaction retry pattern
Retrying failed requests with increasing delays (1s, 2s, 4s) plus jitter to avoid thundering herd (Correct answer)

Correct answer: Retrying failed requests with increasing delays (1s, 2s, 4s) plus jitter to avoid thundering herd

Exponential backoff with jitter spaces out retries to reduce load on a recovering service, preventing all clients from retrying simultaneously and amplifying the problem.

Question 43: What is object storage (e.g., AWS S3)?

A file system mount for Kubernetes Pods
A block device for EC2 instances
A flat storage system that stores data as objects with metadata and a unique key (Correct answer)
A relational database service

Correct answer: A flat storage system that stores data as objects with metadata and a unique key

Object storage stores unstructured data (images, backups, logs) as objects in buckets, accessible via HTTP APIs, with high durability and pay-per-use pricing.

Question 44: What is a Kubernetes Pod?

The smallest deployable unit containing one or more containers (Correct answer)
A group of worker nodes in a cluster
A configuration object storing sensitive data
A virtual network connecting microservices

Correct answer: The smallest deployable unit containing one or more containers

A Pod is the smallest and simplest Kubernetes object, representing one or more containers that share network, storage, and a lifecycle.

Question 45: What does 'observability' mean beyond traditional monitoring?

The degree to which infrastructure is visible to the operations team
The practice of setting up dashboards and alerts for known failure modes
Collecting logs, metrics, and traces from all production systems
The ability to understand a system's internal state from its external outputs without prior knowledge of failures (Correct answer)

Correct answer: The ability to understand a system's internal state from its external outputs without prior knowledge of failures

Observability means you can ask arbitrary questions about a system's behavior and get answers from telemetry data, even for failure modes you didn't anticipate.

Question 46: What is a post-mortem (or post-incident review) in DevOps?

A process for rolling back code after a failed deployment
A formal report submitted to customers after an SLA violation
A blameless analysis of an incident to identify root causes and prevent recurrence (Correct answer)
A performance review of on-call engineers after a production outage

Correct answer: A blameless analysis of an incident to identify root causes and prevent recurrence

A blameless post-mortem documents the timeline, contributing factors, and action items from an incident to improve systems and processes without assigning blame.

Question 47: What does P99 latency mean in monitoring?

The latency measured at the 99% completion point of a deployment
The maximum acceptable latency defined in the SLA
The average latency across 99% of all production servers
The latency value below which 99% of requests fall; the 99th percentile (Correct answer)

Correct answer: The latency value below which 99% of requests fall; the 99th percentile

P99 latency is the 99th percentile — 99% of requests are faster than this value, representing the tail latency experienced by your slowest 1% of users.

Question 48: What is 'configuration drift'?

When Git history is rewritten
When CPU usage spikes during deployment
When environments diverge from their defined desired state over time (Correct answer)
When a config file is renamed

Correct answer: When environments diverge from their defined desired state over time

Configuration drift happens when running infrastructure gradually deviates from its declared configuration.

Question 49: What is a 'runbook' in incident management?

A documented set of procedures for responding to specific operational events or alerts (Correct answer)
An automated script that executes remediation steps without human intervention
A record of all incidents that occurred during a given period
A dashboard showing the real-time health of production systems

Correct answer: A documented set of procedures for responding to specific operational events or alerts

A runbook provides step-by-step instructions for handling a specific alert or operational task, reducing response time and cognitive load during incidents.

Question 50: 4. Which of the following teams represents the development part of DevOps stakeholders?

Database Administrator
Information Security Engineer
Release Engineer
Product Manager (Correct answer)

Correct answer: Product Manager

In a DevOps context, the 'development' part encompasses all roles involved in defining, designing, and building the product. A Product Manager is crucial here as they represent the customer, define requirements, prioritize features, and guide the product's direction. They embody the strategic and business-oriented aspect of development, ensuring the right product is built to meet market needs.

Question 51: What is Terraform 'state'?

A file that tracks the current real-world resources managed by Terraform (Correct answer)
A log of all previous Terraform operations
The current running status of provisioned VMs
The desired configuration declared in .tf files

Correct answer: A file that tracks the current real-world resources managed by Terraform

Terraform state (terraform.tfstate) maps the configuration to real infrastructure resources so Terraform can calculate changes and detect drift.

Question 52: Which Git branching strategy uses long-lived branches named 'main', 'develop', 'release', and 'hotfix'?

GitHub Flow
GitLab Flow
Trunk-Based Development
Gitflow (Correct answer)

Correct answer: Gitflow

Gitflow defines a strict branching model with dedicated branches for features, releases, and hotfixes alongside main and develop.

Question 53: What is the AWS Shared Responsibility Model?

Customers are responsible for physical data center security
AWS manages all security for customers
Security responsibilities are equal between AWS and customers
AWS is responsible for security of the cloud infrastructure; customers are responsible for security in the cloud (Correct answer)

Correct answer: AWS is responsible for security of the cloud infrastructure; customers are responsible for security in the cloud

AWS secures the underlying physical infrastructure, while customers are responsible for their data, identity management, network configuration, and application security.

Question 54: What is a Terraform 'module'?

A policy that restricts what Terraform can create
A remote backend for storing Terraform state
A reusable, self-contained package of Terraform configuration that encapsulates resources (Correct answer)
A plugin that adds provider support to Terraform

Correct answer: A reusable, self-contained package of Terraform configuration that encapsulates resources

Terraform modules bundle related resources into reusable, parameterized packages that can be shared across projects and teams.

Question 55: What is a 'microservices' architecture?

A development methodology focusing on building minimal viable features
A cloud infrastructure pattern using many small virtual machines
An architectural style that structures an application as a collection of small, independently deployable services (Correct answer)
A design pattern for breaking monolithic databases into smaller shards

Correct answer: An architectural style that structures an application as a collection of small, independently deployable services

Microservices architecture organizes an application as loosely coupled, independently deployable services each responsible for a specific business capability.

Question 56: What is an SLO (Service Level Objective)?

A budget for acceptable downtime over a given period
A contractual agreement between a provider and customer about service uptime
A threshold that triggers an alert when a metric exceeds it
A target reliability or performance goal for a service, expressed as a measurable metric (Correct answer)

Correct answer: A target reliability or performance goal for a service, expressed as a measurable metric

An SLO is an internal reliability target (e.g., 99.9% availability) that teams use to guide engineering decisions and prioritize reliability work.

Question 57: What is Pulumi in the IaC ecosystem?

A Terraform competitor that uses its own proprietary language
A configuration management tool similar to Ansible
A cloud-agnostic container orchestration platform
An IaC tool that uses general-purpose programming languages (Python, TypeScript, Go) instead of DSL (Correct answer)

Correct answer: An IaC tool that uses general-purpose programming languages (Python, TypeScript, Go) instead of DSL

Pulumi lets you define cloud infrastructure using familiar programming languages like Python, TypeScript, or Go, enabling loops, conditionals, and abstractions natively.

Question 58: What is OpenTelemetry?

A distributed tracing protocol developed by Google
A vendor-neutral observability framework providing APIs, SDKs, and tools for logs, metrics, and traces (Correct answer)
A cloud-native logging standard for containerized applications
An open-source alternative to Prometheus for metrics collection

Correct answer: A vendor-neutral observability framework providing APIs, SDKs, and tools for logs, metrics, and traces

OpenTelemetry is a CNCF project that standardizes telemetry data collection so applications can be instrumented once and send data to any compatible backend.

Question 59: Which practice ensures that configuration and infrastructure definitions are stored and versioned alongside application code?

Feature flagging
Blue-green deployment
Canary releasing
GitOps (Correct answer)

Correct answer: GitOps

GitOps uses Git as the single source of truth for both application and infrastructure state, with automated reconciliation to apply declared configurations.

Question 60: Which practice ensures that every code change passes automated tests before being merged?

Continuous Feedback
Continuous Integration (Correct answer)
Continuous Monitoring
Continuous Deployment

Correct answer: Continuous Integration

Continuous Integration requires every code change to trigger an automated build and test run, failing the merge if tests do not pass.

Question 61: What is a cloud region in AWS/GCP/Azure?

A cloud pricing tier
A geographically distinct data center cluster where cloud services are hosted (Correct answer)
A load balancing zone
A virtual private network segment

Correct answer: A geographically distinct data center cluster where cloud services are hosted

A cloud region is a physical location containing multiple isolated availability zones, allowing customers to deploy resources close to users and comply with data residency requirements.

Question 62: What is 'policy as code' in a DevOps context?

Documenting organizational security policies in code comments
Writing application authorization logic in configuration files
Encoding compliance and security rules as machine-readable code enforced automatically in pipelines (Correct answer)
Using IaC templates to define IAM policies in cloud environments

Correct answer: Encoding compliance and security rules as machine-readable code enforced automatically in pipelines

Policy as code tools like OPA (Open Policy Agent) and Sentinel encode governance, security, and compliance rules as code that can be tested and enforced in CI/CD pipelines.

Question 63: What is Site Reliability Engineering (SRE)?

A discipline that applies software engineering principles to operations to create scalable, reliable systems (Correct answer)
A deployment automation tool
A microservices architecture pattern
A cloud security framework

Correct answer: A discipline that applies software engineering principles to operations to create scalable, reliable systems

SRE, originated at Google, treats operations as a software engineering problem, using code and automation to manage production systems and maintain reliability.

Question 64: What is a 'service mesh' in a microservices environment?

A monitoring tool for tracking inter-service API call latency
A container orchestration system for managing microservices at scale
A network configuration for connecting microservices across cloud regions
An infrastructure layer that handles service-to-service communication, observability, and security (Correct answer)

Correct answer: An infrastructure layer that handles service-to-service communication, observability, and security

A service mesh (like Istio or Linkerd) uses sidecar proxies to handle load balancing, mTLS encryption, circuit breaking, and distributed tracing between microservices.

Question 65: What is a 'thundering herd' problem?

A memory leak in distributed systems
A DDoS attack pattern
High CPU usage from parallel builds
When many clients simultaneously retry or connect after a service recovers, overwhelming it again (Correct answer)

Correct answer: When many clients simultaneously retry or connect after a service recovers, overwhelming it again

A thundering herd occurs when a large number of clients all attempt to reconnect or retry simultaneously, often triggered by a service restart, overwhelming the recovering system.

Question 66: In a pipeline, what is a 'gate' or 'approval step' used for?

Caching dependencies
Increasing build speed automatically
Requiring a condition or human sign-off before promoting to the next stage (Correct answer)
Deleting old artifacts

Correct answer: Requiring a condition or human sign-off before promoting to the next stage

A gate pauses the pipeline until a condition is met or approval is granted before continuing.

Question 67: What does the DORA metric 'Lead Time for Changes' measure?

Number of deployments per time period
Percentage of deployments causing failures
Time to recover from a production failure
Time from code commit to running in production (Correct answer)

Correct answer: Time from code commit to running in production

Lead time for changes measures the elapsed time from a code commit to that code running successfully in production.

Question 68: What is the purpose of a 'staging environment' in a CI/CD pipeline?

To store build artifacts before deployment
To monitor production traffic patterns
To run unit tests in isolation
To provide a production-like environment for final testing before release (Correct answer)

Correct answer: To provide a production-like environment for final testing before release

A staging environment mirrors production and is used for final integration testing, UAT, and smoke tests before a release goes live.

Question 69: Which GitHub Actions component defines a workflow trigger?

event:
on: (Correct answer)
trigger:
start:

Correct answer: on:

The `on:` key in a GitHub Actions workflow YAML file specifies the events (push, pull_request, schedule, etc.) that trigger the workflow.

Question 70: What does 'toil budget' mean in SRE?

A limit on the number of incidents per month
A maximum percentage of engineering time allowed for repetitive manual work, beyond which automation becomes mandatory (Correct answer)
A cap on deployment frequency
A financial allocation for operations tools

Correct answer: A maximum percentage of engineering time allowed for repetitive manual work, beyond which automation becomes mandatory

SRE teams typically cap toil at 50% of time; if toil exceeds the budget, it signals the need to invest in automation and pay down operational debt.

Question 71: What is the purpose of a 'dead man's switch' in monitoring?

An alert that fires when an expected event (like a heartbeat) stops occurring (Correct answer)
A scheduled job that tests whether monitoring systems are working
An alert triggered when a service consumes 100% of its error budget
A mechanism to automatically shut down failing services

Correct answer: An alert that fires when an expected event (like a heartbeat) stops occurring

A dead man's switch (or heartbeat alert) triggers when a periodic expected signal is not received, detecting silent failures like a crashed cron job.

Question 72: What does 'immutable infrastructure' mean in practice?

Infrastructure configuration files cannot be modified without version control approval
Servers are never modified after deployment — changes require replacing with new instances built from updated images (Correct answer)
Cloud resources are locked to prevent accidental deletion
Server AMIs are built once and reused across all environments without changes

Correct answer: Servers are never modified after deployment — changes require replacing with new instances built from updated images

Immutable infrastructure means never patching or updating running servers — instead, a new server image is built, deployed, and the old one is terminated.

Question 73: What does CI stand for in the context of DevOps?

Continuous Implementation
Continuous Integration (Correct answer)
Continuous Infrastructure
Continuous Inspection

Correct answer: Continuous Integration

CI stands for Continuous Integration, the practice of frequently merging code changes into a shared repository with automated builds and tests.

Question 74: What is the difference between ENTRYPOINT and CMD in a Dockerfile?

ENTRYPOINT is used for scripts; CMD is used for binary executables
ENTRYPOINT defines the executable that always runs; CMD provides default arguments that can be overridden (Correct answer)
They are interchangeable and serve the same purpose
CMD defines the executable; ENTRYPOINT provides optional arguments

Correct answer: ENTRYPOINT defines the executable that always runs; CMD provides default arguments that can be overridden

ENTRYPOINT sets the fixed executable that cannot be overridden at runtime, while CMD provides default arguments that users can replace when running the container.

Question 75: Which of the following is the primary goal of Continuous Delivery (CD)?

Run unit tests on every commit
Monitor production environments continuously
Automatically deploy every commit to production
Ensure software can be released to production at any time (Correct answer)

Correct answer: Ensure software can be released to production at any time

Continuous Delivery ensures the software is always in a deployable state so it can be released to production at any time with a manual approval step.

Question 76: What is the purpose of a 'pipeline artifact' in CI/CD?

A built output (binary, JAR, Docker image) produced by one stage and consumed by another (Correct answer)
A configuration file that defines pipeline variables
A test report generated after running unit tests
A log file generated during pipeline execution

Correct answer: A built output (binary, JAR, Docker image) produced by one stage and consumed by another

Pipeline artifacts are built outputs like binaries or container images produced by one stage and passed downstream to subsequent stages such as testing or deployment.

Question 77: What is an 'error budget' in Site Reliability Engineering (SRE)?

The cost allocated for fixing production incidents
The maximum number of errors allowed per minute in production
The permissible amount of unreliability remaining before an SLO is violated (Correct answer)
The time budget for on-call engineers to respond to incidents

Correct answer: The permissible amount of unreliability remaining before an SLO is violated

An error budget is 100% minus the SLO — if your SLO is 99.9% availability, your error budget is 0.1% downtime per period.

Question 78: What is AWS Lambda?

A serverless compute service that runs code in response to events without managing servers (Correct answer)
A CI/CD pipeline service
A managed container orchestration service
A virtual machine scale set

Correct answer: A serverless compute service that runs code in response to events without managing servers

Lambda executes function code triggered by events (API calls, S3 uploads, SQS messages) and automatically scales from zero to thousands of concurrent executions.

Question 79: Which tool is commonly used for collecting and querying time-series metrics?

Jira
Prometheus (Correct answer)
Nginx
Git

Correct answer: Prometheus

Prometheus is a widely used open-source system for collecting and querying time-series metrics.

Question 80: What does the term 'idempotent' mean in the context of configuration management tools like Ansible?

Configuration changes are randomly applied
Applying the same operation multiple times yields the same result (Correct answer)
The tool runs faster on each subsequent execution
Each run requires manual approval

Correct answer: Applying the same operation multiple times yields the same result

Idempotent operations produce the same end state no matter how many times they are applied.

DevOps Engineer Certification Exam

The DevOps Engineer Certification Exam covers CI/CD pipelines, containerization and Kubernetes, infrastructure as code, monitoring and observability, cloud platform integration, site reliability engineering, Docker, and modern DevOps practices for software delivery teams.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds