Download ITGSS Certified DevOps Engineer Ultimate Exam and more Exams Technology in PDF only on Docsity!
Engineer Ultimate Exam
Question 1. Which Agile scaling framework explicitly defines roles such as Release Train Engineer and Product Owner for coordinating multiple Scrum teams? A) Scrum of Scrums B) SAFe C) LeSS D) Nexus Answer: B Explanation: The Scaled Agile Framework (SAFe) introduces the Release Train Engineer (RTE) and Product Owner roles to synchronize work across many Scrum teams. Question 2. In Value Stream Mapping, the ratio of Lead Time to Cycle Time primarily helps identify which of the following? A) Resource utilization B) Bottleneck severity C) Team velocity D) Defect density Answer: B Explanation: A high Lead Time relative to Cycle Time indicates work is waiting in queues, revealing bottlenecks in the process. Question 3. Which Git workflow encourages developers to commit directly to the main branch, relying on feature flags for incomplete work? A) Gitflow B) Forking workflow C) Trunk-Based Development D) GitHub Flow Answer: C Explanation: Trunk-Based Development promotes short-lived branches or direct commits to the main trunk, using feature flags to hide unfinished features.
Engineer Ultimate Exam
Question 4. In a monorepo strategy, what is the primary advantage when compared to polyrepo management? A) Independent versioning per service B) Simplified cross-project refactoring C) Reduced repository size per team D) Easier access control per microservice Answer: B Explanation: A monorepo stores all code in a single repository, making cross-project changes and refactoring straightforward. Question 5. Which tool is best suited for rendering Markdown documentation directly from a Git repository as a static website? A) Confluence B) Docusaurus C) SharePoint D) Javadoc Answer: B Explanation: Docusaurus converts Markdown files in a repo into a static documentation site, supporting versioning and theming. Question 6. In Jenkins pipeline syntax, which keyword defines a stage that runs only when a specific condition is met? A) when B) onlyIf C) condition D) when { expression } Answer: D Explanation: The when directive with an expression controls conditional execution of stages in Declarative Pipelines.
Engineer Ultimate Exam
Question 10. In a Blue/Green deployment, how is zero-downtime typically achieved? A) By stopping all containers simultaneously B) By updating DNS records after the new version is fully ready C) By scaling down the old version before scaling up the new one D) By using a load balancer to switch traffic from blue to green environment instantly Answer: D Explanation: A load balancer can instantly redirect traffic from the blue (current) environment to the green (new) environment without interrupting service. Question 11. Which artifact repository is commonly used for storing Docker container images? A) Nexus Repository OSS B) Artifactory C) JFrog Container Registry D) All of the above Answer: D Explanation: Nexus, Artifactory, and JFrog’s native Container Registry all support Docker image storage and distribution. Question 12. Terraform’s “state lock” feature primarily prevents what scenario? A) Unauthorized user access to the state file B) Concurrent modifications that could corrupt infrastructure state C) Accidental deletion of provider plugins D) Execution of plans on the wrong cloud provider Answer: B Explanation: State locking ensures only one Terraform process can modify the state at a time, avoiding race conditions.
Engineer Ultimate Exam
Question 13. When modularizing Terraform code, which directory structure best follows best practices? A) All resources in a single main.tf file B) Separate modules per logical component under a modules/ directory C) Duplicate resources across multiple files for redundancy D) Place provider blocks inside each resource file Answer: B Explanation: Grouping reusable components into modules under modules/ promotes DRY code and easier maintenance. Question 14. In Ansible, which file type defines reusable configuration snippets that can be included in multiple playbooks? A) inventory file B) role C) task file D) vars file Answer: B Explanation: Roles encapsulate tasks, variables, handlers, and defaults, allowing reuse across playbooks. Question 15. Which Kubernetes object ensures that a specified number of pod replicas are always running? A) Service B) Deployment C) ConfigMap D) PersistentVolume Answer: B Explanation: A Deployment manages replica sets to maintain the desired number of pod replicas. Question 16. What does a Kubernetes Ingress resource primarily provide?
Engineer Ultimate Exam
A) allow B) deny C) reject D) No explicit deny; policies are whitelist-based Answer: D Explanation: Kubernetes NetworkPolicies are additive whitelists; any traffic not allowed by a policy is implicitly denied. Question 20. Which serverless platform executes functions in response to events without provisioning servers? A) Docker Swarm B) AWS Lambda C) Kubernetes DaemonSet D) OpenShift BuildConfig Answer: B Explanation: AWS Lambda runs code on-demand in a fully managed, serverless environment. Question 21. FinOps primarily focuses on which aspect of cloud operations? A) Security compliance B) Cost visibility and optimization C) Application performance monitoring D) Continuous delivery pipelines Answer: B Explanation: FinOps (Financial Operations) aims to provide financial accountability and cost optimization for cloud usage. Question 22. Which tool can automatically shut down idle development environments to reduce cloud spend? A) Terraform
Engineer Ultimate Exam
B) Cloud Custodian C) Jenkins D) SonarQube Answer: B Explanation: Cloud Custodian enforces policies such as terminating idle resources, helping control cloud costs. Question 23. In the context of Shift-Left security, which testing type is executed earliest in the pipeline? A) DAST B) Penetration testing C) SAST D) Runtime application self-protection (RASP) Answer: C Explanation: Static Application Security Testing (SAST) analyzes source code early, before compilation or deployment. **Question 24. Software Composition Analysis (SCA) primarily helps with which risk? ** A) Logic errors in custom code B) Vulnerabilities in third-party open-source components C) Misconfigured cloud IAM policies D) Inefficient SQL queries Answer: B Explanation: SCA scans dependency manifests to identify known vulnerabilities and license issues in open-source libraries. Question 25. Which Open Policy Agent (OPA) data format is used to represent policies that evaluate Terraform plans? A) JSON
Engineer Ultimate Exam
C) Logstash D) Beats Answer: C Explanation: Logstash ingests, filters, and transforms log data, often converting it to JSON for Elasticsearch. Question 29. Distributed tracing tools like Jaeger rely on which data format to propagate trace context across services? A) OpenTelemetry Protocol (OTLP) B) W3C Trace-Context headers C) Zipkin v2 JSON D) All of the above Answer: D Explanation: Modern tracing implementations support multiple propagation formats, including OTLP, W3C Trace-Context, and Zipkin. Question 30. An SLO defines a target for which type of metric? A) Business-level KPI B) Service Level Indicator (SLI) C) Error budget D) Incident count Answer: B Explanation: An SLO (Service Level Objective) sets a goal for an SLI, such as 99.9% availability. Question 31. What is the primary purpose of an error budget in SRE? A) To allocate financial resources for tooling B) To define a maximum acceptable number of bugs per release C) To balance the amount of downtime allowed against feature development speed D) To measure code coverage percentages
Engineer Ultimate Exam
Answer: C Explanation: An error budget quantifies tolerated unreliability, enabling teams to decide when to prioritize reliability over new features. Question 32. Which of the following is a key characteristic of a blameless post-mortem? A) Assigning individual fault for the outage B) Focusing on systemic improvements rather than personal blame C) Publishing the incident details publicly without consent D) Ignoring root-cause analysis to save time Answer: B Explanation: Blameless post-mortems emphasize learning and process improvement, avoiding finger-pointing. Question 33. In GitHub Actions, which keyword defines a reusable workflow that can be called from other workflows? A) uses B) workflow_call C) run D) needs Answer: B Explanation: workflow_call allows a workflow to be invoked as a reusable component from other workflows. Question 34. Which CI tool natively supports “pipeline as code” using a Groovy DSL? A) Travis CI B) Jenkins C) CircleCI D) GitLab CI
Engineer Ultimate Exam
Explanation: Linting and static analysis catch style and security issues early, preventing wasteful builds. Question 38. Which Kubernetes controller automatically replaces failed pods to maintain the desired replica count? A) StatefulSet controller B) ReplicaSet controller C) DaemonSet controller D) Job controller Answer: B Explanation: ReplicaSets monitor pod health and create new pods when existing ones terminate unexpectedly. Question 39. What is the purpose of a “golden image” in configuration management? A) To store source code versions B) To provide a pre-configured, immutable base OS or container image for deployments C) To archive old database backups D) To define network topology diagrams Answer: B Explanation: A golden image is a vetted, repeatable base image that includes all required OS and middleware configurations. Question 40. Which Terraform command refreshes the state file without modifying any real infrastructure? A) terraform apply B) terraform plan C) terraform refresh D) terraform import Answer: C
Engineer Ultimate Exam
Explanation: terraform refresh updates the state file to reflect the current real-world resources. Question 41. In a CI/CD pipeline, which artifact storage strategy best supports reproducible builds across environments? A) Storing only the final binary B) Archiving the complete source tree, build scripts, and dependencies C) Using a shared network drive D) Relying on developers’ local caches Answer: B Explanation: Archiving source, scripts, and dependency manifests ensures builds can be reproduced exactly elsewhere. Question 42. Which of the following is a common metric collected by Prometheus for Kubernetes pods? A) HTTP response body size B) CPU usage in millicores C) Disk fragmentation percentage D) Number of Git commits Answer: B Explanation: Prometheus scrapes CPU usage (often expressed in millicores) from kube-state-metrics or cAdvisor. Question 43. What does the “dead-letter queue” pattern help achieve in event-driven architectures? A) Faster message delivery B) Automatic scaling of consumers C) Isolating messages that cannot be processed after retries D) Encrypting all messages at rest Answer: C
Engineer Ultimate Exam
Explanation: Both Secrets Manager and Parameter Store can store secrets, with IAM policies governing access. Question 47. Which of the following is an example of a “canary metric” used to validate a new release? A) Total number of users B) Error rate for a specific API endpoint C) Disk space on build agents D) Number of pull requests opened Answer: B Explanation: Monitoring error rates for a targeted endpoint during a canary rollout helps detect regressions early. Question 48. In GitOps, which component continuously reconciles the desired state defined in a Git repo with the actual state of a Kubernetes cluster? A) Helm B) Argo CD C) Terraform D) Jenkins Answer: B Explanation: Argo CD (or Flux) watches Git for changes and applies them to the cluster, ensuring drift-free environments. Question 49. Which of the following is NOT a typical responsibility of a Site Reliability Engineer (SRE)? A) Designing highly available system architectures B) Writing application business logic features C) Implementing monitoring and alerting D) Managing error budgets Answer: B
Engineer Ultimate Exam
Explanation: SREs focus on reliability, performance, and operations, not on core business feature development. Question 50. Which Kubernetes object is best suited for running a one-time batch job that must complete successfully? A) Deployment B) DaemonSet C) Job D) CronJob Answer: C Explanation: A Job creates pods that run to completion, ensuring the task finishes successfully. Question 51. What does the “immutable infrastructure” principle advocate? A) Updating servers in place with patches B) Replacing entire servers or images rather than modifying them after deployment C) Storing configuration files in mutable databases D) Using shared NFS volumes for all services Answer: B Explanation: Immutable infrastructure treats servers/images as unchangeable; updates are performed by redeploying new instances. Question 52. Which of the following CI/CD practices helps prevent “dependency hell” in builds? A) Using global shared libraries across all projects B) Pinning exact versions of dependencies in lock files C) Allowing the latest version of every library at each build D) Storing dependencies in a single large monolithic repository Answer: B
Engineer Ultimate Exam
Explanation: Amazon ECR provides built-in image scanning that can be invoked during CI to detect known CVEs. Question 56. Which of the following is a primary advantage of using Helm over raw kubectl manifests? A) Automatic scaling of pods B) Template-based parameterization and versioned releases C) Built-in service mesh integration D) Real-time log aggregation Answer: B Explanation: Helm packages charts with templating, allowing configurable deployments and version tracking. Question 57. Which policy-as-code engine can evaluate Terraform plans for compliance with custom Rego rules? A) Conftest B) Sentinel C) OPA D) All of the above Answer: D Explanation: Conftest, Sentinel, and OPA all support evaluating Terraform plans against Rego policies. Question 58. In a microservices architecture, which pattern reduces inter-service latency by caching frequent read-only data close to the service? A) Circuit breaker B) Sidecar proxy C) Cache-aside D) Bulkhead Answer: C
Engineer Ultimate Exam
Explanation: The cache-aside pattern stores data in a local cache, reducing repeated remote calls. Question 59. Which of the following is a key metric for measuring the effectiveness of a CI pipeline? A) Mean Time to Recovery (MTTR) B) Lead Time for Changes C) Number of open pull requests D) CPU usage of build agents Answer: B Explanation: Lead Time for Changes quantifies how quickly code moves from commit to production, reflecting pipeline efficiency. Question 60. Which GitHub feature allows you to enforce that all commits to a protected branch must pass a required status check? A) Branch protection rules B) CODEOWNERS file C) GitHub Pages D) Pull request template Answer: A Explanation: Branch protection rules can require status checks (e.g., CI builds) before allowing merges. Question 61. Which Azure service provides serverless execution of code triggered by events? A) Azure Functions B) Azure Container Instances C) Azure Kubernetes Service D) Azure DevOps Pipelines Answer: A
