Download DevOps Exam: NIST Cloud, Practices, and Deployment and more Exams Business Administration in PDF only on Docsity!
SIA EXAM QUESTIONS AND 100%
VERIFIED ANSWERS
NIST (The National Institute of Standards and Technology) defines three types of cloud services including SaaS, PaaS and IaaS - ANSWER All three can be used in a devops context In which cloud service model consumers are allowed to have control over operating systems, storage, and deployed applications? - ANSWER IAAS DevOps and continuous deployment require the implementation part of service transition to be highly automated so it can deal with high-frequency transition and provide better quality control. - ANSWER False, instead of implementation it is DELIVERY With the help of DevOps, incidents that are related with the operation of particular software system are routed to the development team. One example about how DevOps is changing the traditional operations activities. - ANSWER True As Amazon states in its rules for teams, their teams can communicate with all others through direct linking, direct reads of another team's datastore, or shared- memory model. - ANSWER False We should prevent likely changes from rippling through a service by introducing special modules whose sole purpose is to localize and isolate changes to the environment, to other services, or to third-party software or libraries. - ANSWER True
In order to remove the inter-team coordination, a design decision of system architecture should be made to allow each component to be allocated to a single (virtual) machine or container but avoid multiple components to be allocated to a single (virtual) machine. - ANSWER False An architect involved in a DevOps project should ensure the following: (This is a multiple answers question and you must select all that are correct for full credit.) - ANSWER Every stage of the deployment pipeline has a suite of automated tests using an appropriate test harness. Configuration parameters should be separated according to whether they are going to vary between distinct environments and according to their sensitivity. The different tools and environments are prepared to make it possible for their activities to be traceable and reproducible. Which of the following are possibilities regarding how it is decided which component is in charge of a new instance of a service provisioning and deprovisioning? Choose all that apply. - ANSWER It can be the client, or any component in the client chain, that is supposed to be responsible for instance (de)provisioning of a service. An external component monitors the performance of service instances, for example their CPU load, and (de)provisions an instance when the load reaches a given threshold. A service itself can be responsible for the (de)provisioning of additional instances.
The color of the background on the screen IS an example of configuration setting (or parameter) because it changes the behavior of a system. - ANSWER TRUE can also be the language you wish to expose to the user, the location of a data file, the thread pool size, feature toggle settings An incident, ITIL defines as "any event which disrupts, or which could disrupt, a service." They are raised by ____________. (This is a multiple answers question and you must select all that are correct for full credit.) - ANSWER technical personnel users support desk staff monitoring tools The recovery point objective, or RPO, and the recovery time objective, RTO, are the two key parameters that let an organization analyze and do a cost/benefit review of various options to maintain business continuity. - ANSWER A deployment pipeline consists of the steps taken between a developer committing code and the code actually being promoted into normal production, while making sure high quality is guaranteed. Thus, deployment pipeline of DevOps contains steps of (choose all that apply) - ANSWER Pre-commit tests Feasibility analysis Build and integration tests Performance tests There will usually be multiple instances of a service in a microservice architecture, both to support a load too heavy for a single instance and to protect against failure. The registry can rotate among the instances registered to balance the load. That is, the registry acts as a ________________ as well as a registry. (two words, case insensitive, singular form, zero point if misspelled) - ANSWER load balancer
____________________ testing is a method of deploying the new version to a few servers first, to see how they perform. It is the cloud equivalent of beta testing and one of several forms of early release testing. (one word, case insensitive, zero point if misspelled) - ANSWER canary testing Coordination must occur with customers, stakeholders, other development teams, and operations. Therefore, DevOps processes try to minimize this coordination as much as possible. From the development team's point of view, there are three kinds of cross-team coordination: upstream coordination, downstream coordination, and cross-stream coordination. Among the three, ___________ coordination is the one that a development team uses to coordinate with operations. (must write exactly one of the three items printed in boldface, zero point if misspelled) - ANSWER downstream The two methods that we have discussed for managing service demand of client requests include (1) monitoring performance, and (2) using __________ to control the number of instances. (either three words or an acronym of three letters, case insensitive but must be in plural form, zero point if misspelled or in incorrect form) - ANSWER SLAs The ITIL service life cycle consists of service __________, service design, service transition, service operation, and continual service improvement. (one word in singular form, zero point if misspelled) - ANSWER strategy The _________ testing practice requires the test cases for testing a microservice be decided and even co-owned by all the consumers of that microservice. Any changes to the test cases need to be agreed on by both the consumers and the developers of the microservice. (three words with no symbols, or a 3-letter acronym, case insensitive, singular form, zero point if misspelled) - ANSWER Consumer Driven Contract
Inconsistency in functionality between a service and its clients without synchronous coordination. One common deployment strategy results in multiple versions of a service being simultaneously active and this, in turn, raises questions of consistency. Which deployment strategy is this? Your answer: _____________________ (two words, case insensitive, zero point if misspelled) - ANSWER rolling upgrade A variant of big flip deployment model is to do the traffic switching gradually. A small percentage of requests are first routed to the new version, effectively conducting a ____________ test. (one word, case insensitive, zero point if misspelled - ANSWER canary If we compare blue/green deployment and rolling upgrade, blue/green deployment does not introduce any logical problems but requires allocating twice the number of VMs needed to render a service, while rolling upgrade is more efficient in the use of resources, but introduces a number of logical consistency problems. (Enter exactly 'rolling upgrade' or 'blue/green deployment' in each blank. Zero point if misspelled.) - ANSWER blue/green deployment rolling upgrade We have no reason whatsoever to deploy some services of a system to one environment, say VMware and other services to another environment, say Amazon EC2. - ANSWER False, you should
CloudWatch and HDFS are two examples of tools that manage the items inside a virtual machine. They can change out a version of a piece of software inside a VM and ensure that configuration settings are set to a specification. - ANSWER False, CloudWatch is a monitoring tool of AWS and HDFS is not a tool but a distributed file system used by Hadoop applications. Tools mentioned in Chapter 6 for deployment purpose are Chef, Puppet, Netflix Asgard, Docker, Vagrant and Test Kitchen, etc. means no unauthorized people are able to modify information. (one word, case insensitive, zero point if misspelled) - ANSWER Integrity has two elements that answer the following questions: Who is trying to access or modify information and do they have the right to perform the operation they requested? (one word, case insensitive, zero point if misspelled) - ANSWER authorization Security in DevOps is not just application and operation security; it's about the security of the ______________ itself, such as build/test server security, micro- service component security, environment security, and security during dynamic provisioning. (one word, case insensitive, zero point if misspelled) - ANSWER pipeline One of the design principles for security that needs to be applied to both the application design and the deployment pipeline itself is to employ _______________ defaults. Argue why a given process or client must have access, do not argue why it should not. (two words, case insensitive, zero point if misspelled) - ANSWER fail safe STRIDE - ANSWER Spoofing identity Data tampering
these two terms. (Enter 'Logs' or 'Audit trails' in each blank, both in plural form, zero point if misspelled or incorrect form) - ANSWER audit trails logs Accessing another user's authentication information (username and password, say) by illegitimate means, and then using that information is a form of identity _______________. (one word, case insensitive, zero point if misspelled) - ANSWER spoofing A software architect will typically use the word "ility" to refer to ___________ concerns other than those that relate to the basic functionalities and their correctness. (one word, case insensitive, zero point if misspelled) - ANSWER quality A concern about the level of effort needed to make changes either to a DevOps software or its processes or to the operation environment of an application is called _______________. (one word, case insensitive, zero point if misspelled)
- ANSWER modifiability Netflix Edda was a tool which was developed to capture ____________ changes of Amazon cloud resources and enable queries, including correlation with recent operations. (one word, case insensitive, zero point if misspelled) - ANSWER state 'Version Control Everything' could be an approach to improve the quality of _______________ of a DevOps deployment pipeline. (one word, case insensitive, zero point if misspelled) - ANSWER repeatability
This would be achieved by the quality goal of a DevOps deployment pipeline if tools with stable interfaces and flexible scripting facilities were selected. (one word, case insensitive, zero point if misspelled) - ANSWER interoperability The popular source control system Git can support the ________________ with static analysis, testing, build, and notification/messaging systems through event- based hooks: The invocation of other systems using appropriate Git outputs can be carried out before or after a Git event such as commit or push. (one word, case insensitive, zero point if misspelled - ANSWER interoperation ChefSpec is a tool for running ________________ of Chef cookbooks. (two words in plural form, case insensitive, zero point if misspelled) - ANSWER unit tests Infrastructure-as-code is about using code, instead of manually running commands for setting up the, virtual, machines and networks, installing packages and configuring the environment for the application of interest. - ANSWER True Tear down an environment when it is not used is a way to recover the deployment pipeline. - ANSWER False The DevOps pipeline has to deal with different types of software ranging from desktop IDEs to code repositories, build/testing servers, cloud infrastructure APIs, and potentially complex environments for testing/staging/production - ANSWER True ities and quality concerns early and built in rather than added in as an afterthought. - ANSWER True
As we discussed in Chapter 9 (Links to an external site.)Links to an external site., the continuous deployment pipeline is not just another software ________________________ with system-of-systems characteristics, it also has strong characteristics of a ___________. (each blank is one word in singular form, case insensitive, no credit if misspelled or incorrect form) - ANSWER products process Relaxing the thresholds increases the chances of ________________________ —that is, failing to detect _____________________. (each blank contains two words in plural form, case insensitive, no credit if misspelled or incorrect form)
- ANSWER false negatives actual errors For detecting operations errors discussed in Chapter 14, ______________ are employed as a comparison model. (two words in plural form, case insensitive, zero point if misspelled or incorrect form) - ANSWER fault trees The only process mining tool introduced in Chapter 14 is called _________ (one word, case insensitive for grading purpose, zero point if misspelled) - ANSWER PRoM Netflix _____________ is a powerful open source cloud management and deployment tool. This is the tool used to execute the rolling upgrade operations of the research work presented in Chapter 14. - ANSWER Asgard
In Chapter 14, ELB stands for _______________________ and AMI stands for ________________. - ANSWER elastic load balancer amazon virtual machine image From the process model, we know the desired sequence of steps. Any steps out of the desired sequence is called a _______________ error. - ANSWER conformance Chapter 14 described two choices to recover automatically from errors during an operation: roll ________________________ back to the state at the beginning of the last activity or roll ____________ back to the desired state. - ANSWER back forward Knowing the process context can make it possible to dynamically change monitoring ___________ to lower the false ____________ generated when an operations process is underway. - ANSWER thresholds positives Crossing the Chasm: Marketing and Selling High-Tech Products to Mainstream Customers. This illustrates that innovations that do not offer material containing information on how to use the technology, case studies of other users, or business reasons why mainstream customers might want to embrace the technology will not survive long. The degree of material necessary for
Vendor lock-in is considered one process issues that will arise in the future of DevOps. One solution to the problem of vendor lock-in is the use of standards. As yet, there are no widely adopted standards for the tools in a continuous deployment pipeline. While lacking standards, the solutions suggested by Chapter 15 for resisting vendor lock-in include ____________ programming, and ___________________ programs. every blank is one word in nominative, case insensitive form, zero point if misspelled or wrong form)- ANSWER defensive migration In addition to the adoption of standards for the tools within a continuous deployment pipeline, another way to prevent lock-in is to offer open
and foster an active plug-in ecosystem for ________________ amongst the tools. (first blank is an acronym in plural form, second blank contains one word in singular form, both are case insensitive, zero point if misspelled or incorrect form) - ANSWER APIs interoperation There are four types of charging models for resources in a cloud platform. The one that charges to pay for unlimited or capped usage over a specific time such as a month is called _____________-based. (one word in singular form, case insensitive, zero point if misspelled or incorrect form) - ANSWER subscription In the future of DevOps, with the implementation of a successful continuous deployment pipeline, the frequency of deployments should go up. Eventually, high velocity of changes will become continuous change, and fundamentally change the testing and monitoring of the system. Organizations may be reliant on _______________________ environment canary testing and intelligent
monitoring rather than time-consuming ________________ testing. first blank is one word and second blank contains one term of three words, both in singular form and case insensitive, zero point if misspelled or incorrect form) - ANSWER production end-to-end In this course, DevOps has been defined as a collection of _______________________ intended to reduce the time between committing ______________ and placing that code into normal production. The best and most effective way to achieve normal production is to decrease the number of ______________ that slip through the deployment process. FIRST contains one word in plural form, SECOND is one word in singular form and THIRD contains one word in plural form, they are all case insensitive, zero point if misspelled or incorrect form) - ANSWER processes code errors
