Download PrepIQ Beingcert Certified DevOps Ultimate Exam and more Exams Technology in PDF only on Docsity!
Ultimate Exam
Question 1. What is the primary purpose of the “First Way” in the Three Ways of DevOps? A) To automate security testing B) To increase the speed of feedback loops C) To optimize the flow of work from development to operations D) To enforce strict change-approval processes Answer: C Explanation: The First Way emphasizes creating a smooth, fast flow of value from concept to delivery, reducing hand-offs and delays. Question 2. Which metric best reflects the speed at which new code reaches production? A) Mean Time to Recovery (MTTR) B) Deployment Frequency C) Change Failure Rate D) Lead Time for Changes Answer: D Explanation: Lead Time for Changes measures the elapsed time from code commit to production deployment, directly indicating delivery speed. Question 3. In a DevOps culture, which practice most directly breaks down silos between development and operations? A) Mandatory daily stand-ups B) Separate version-control repositories for each team C) Shared ownership of production incidents D) Quarterly performance reviews Answer: C Explanation: When both developers and operators share responsibility for incidents, collaboration increases and silos diminish. Question 4. Which of the following best describes immutable infrastructure? A) Servers are patched in place B) Infrastructure is rebuilt from scratch for every change C) Configuration files are edited on running instances D) State is stored in a central database Answer: B Explanation: Immutable infrastructure never changes after deployment; any modification triggers a full rebuild, ensuring consistency.
Ultimate Exam
Question 5. Terraform stores the current state of resources in a “state file.” What is a key reason to keep this file in a remote backend? A) To enable parallel runs without conflicts B) To reduce the size of the repository C) To encrypt the Terraform code D) To allow usage of the local CLI only Answer: A Explanation: Remote backends lock the state during operations, preventing concurrent runs from corrupting the file. Question 6. Which Terraform command is used to preview changes before they are applied? A) terraform init B) terraform plan C) terraform apply D) terraform destroy Answer: B Explanation: terraform plan calculates and displays the execution plan without making any modifications. Question 7. When using CloudFormation, what is the purpose of a “Change Set”? A) To store secret values securely B) To define resource dependencies C) To preview the impact of a stack update D) To roll back a failed deployment automatically Answer: C Explanation: A Change Set shows the modifications that will occur if the stack update proceeds, enabling safe review. Question 8. In Ansible, which module would you use to ensure a package is installed on a target host? A) copy B) yum C) lineinfile D) service Answer: B Explanation: The yum (or apt for Debian) module manages package installation, ensuring the desired state.
Ultimate Exam
Question 13. Which Jenkins feature enables pipelines to be defined as code? A) Shared Libraries B) Blue Ocean C) Declarative Pipeline D) Matrix Project Answer: C Explanation: Declarative Pipeline syntax allows the entire CI/CD workflow to be stored in a Jenkinsfile within source control. Question 14. In GitLab CI/CD, what does the needs: keyword allow a job to do? A) Skip all tests B) Run before the before_script C) Define explicit job dependencies D) Access secret variables without encryption Answer: C Explanation: needs: creates a directed acyclic graph (DAG) of jobs, letting downstream jobs start as soon as required upstream jobs finish. Question 15. Which artifact repository is optimized for storing Docker images? A) Nexus B) Artifactory C) JFrog Bintray D) Amazon ECR Answer: D Explanation: Amazon Elastic Container Registry (ECR) is a fully managed Docker registry integrated with AWS services. Question 16. When building a Docker image, which instruction should be placed last to minimize layer churn for frequently changing files? A) FROM B) COPY.. C) RUN apt-get update D) CMD Answer: B Explanation: Placing COPY. . (or any source code copy) toward the end ensures that changes to source do not invalidate earlier layers like OS package installations. Question 17. What is the purpose of a Docker “volume”? A) To store environment variables B) To persist data outside the container’s writable layer C) To define network ports D) To specify the base image
Ultimate Exam
Answer: B Explanation: Volumes provide persistent storage that survives container recreation and is not part of the image’s layered filesystem. Question 18. In Kubernetes, which object ensures that a specified number of pod replicas are always running? A) Service B) Deployment C) ConfigMap D) Ingress Answer: B Explanation: A Deployment manages ReplicaSets, which enforce the desired replica count for a pod template. Question 19. **What does a Kubernetes Service of type “LoadBalancer” do? ** A) Exposes the service on a cluster-internal IP only B) Creates an external load balancer in the cloud provider C) Routes traffic based on HTTP host headers D) Provides DNS round-robin without external IP Answer: B Explanation: In supported environments, the LoadBalancer type provisions a cloud provider’s external LB and assigns a public IP. Question 20. Which Kubernetes object is best suited for storing non-confidential configuration data that should be consumed as environment variables? A) Secret B) ConfigMap C) PersistentVolumeClaim D) ServiceAccount Answer: B Explanation: ConfigMaps hold configuration data that can be injected into pods as env vars or mounted as files. Question 21. In a microservices architecture, what pattern helps prevent cascading failures when a downstream service becomes unavailable? A) Monolithic deployment B) Circuit breaker C) Tight coupling D) Direct database sharing
Ultimate Exam
Explanation: RPO defines the maximum acceptable data loss measured in time (how far back you can recover). Question 26. If a system’s RTO is 30 minutes, what does that imply? A) Backups must be taken every 30 minutes B) The system must be fully restored within 30 minutes after a failure C) Users experience a 30-minute latency D) Monitoring alerts must fire within 30 minutes Answer: B Explanation: Recovery Time Objective (RTO) is the target time to restore service after an outage. Question 27. Which Prometheus component is responsible for pulling metrics from monitored targets? A) Alertmanager B) Pushgateway C) Exporter D) Scraper (server) Answer: D Explanation: The Prometheus server scrapes configured endpoints at defined intervals to collect metrics. Question 28. In Grafana, what is a “dashboard” primarily used for? A) Storing raw log files B) Visualizing time-series data with panels C) Managing user authentication D) Deploying Kubernetes resources Answer: B Explanation: Dashboards aggregate multiple panels (graphs, tables) to present observability data in a single view. Question 29. Which ELK component parses incoming log data into structured JSON? A) Elasticsearch B) Logstash C) Kibana D) Beats Answer: B Explanation: Logstash receives raw logs, applies filters, and outputs structured events for indexing.
Ultimate Exam
Question 30. What is the main benefit of using distributed tracing (e.g., Jaeger) in a microservices environment? A) Reduces CPU usage of services B) Provides end-to-end request latency visibility across service boundaries C) Encrypts all inter-service traffic D) Automatically scales services horizontally Answer: B Explanation: Distributed tracing propagates trace IDs across services, allowing operators to see the full request path and latency breakdown. Question 31. Which alerting principle helps avoid “alert fatigue”? A) Alert on every minor metric deviation B) Use static thresholds only C) Prioritize alerts by severity and add suppression rules D) Send alerts to all on-call engineers simultaneously Answer: C Explanation: Prioritizing, deduplicating, and suppressing noisy alerts ensures teams focus on truly critical events. Question 32. In a DevSecOps pipeline, at which stage is a Software Composition Analysis (SCA) scan typically performed? A) After deployment B) During source code checkout C) In the CI build before unit tests D) During runtime monitoring Answer: C Explanation: SCA examines third-party dependencies for known vulnerabilities early, before artifacts are packaged. Question 33. Which tool is specifically designed for secret management and can generate dynamic database credentials? A) HashiCorp Vault B) AWS IAM C) Azure Key Vault D) Kubernetes ConfigMap Answer: A Explanation: Vault provides secure secret storage, leasing, and dynamic credential generation for databases and cloud services.
Ultimate Exam
Question 38. What is the primary role of a “Service Mesh” such as Istio? A) To replace Kubernetes as the orchestration platform B) To provide secure, observable, and resilient service-to-service communication without changing application code C) To store Docker images D) To automate Terraform state management Answer: B Explanation: Service meshes inject a sidecar proxy into each pod, handling traffic routing, security, and telemetry transparently. Question 39. In a CI pipeline, which of the following is an example of a “gate” that must pass before promotion to the next stage? A) Code checkout B) Unit test coverage threshold C) Dockerfile syntax check D) Git push notification Answer: B Explanation: A gate enforces a quality rule—e.g., minimum unit test coverage—before allowing the build to advance. Question 40. Which Kubernetes object can be used to enforce that a pod is only scheduled on nodes that meet specific criteria (e.g., GPU enabled)? A) Toleration B) NodeSelector C) ServiceAccount D) PodSecurityPolicy Answer: B Explanation: nodeSelector (or node affinity) directs the scheduler to place pods on nodes with matching labels. Question 41. What does “idempotent” mean in the context of an IaC tool command? A) The command can only be run once B) The command will always produce a different result C) Running the command multiple times yields the same end state D) The command requires manual approval each time Answer: C
Ultimate Exam
Explanation: Idempotency ensures that repeated executions converge to the desired state without side effects. Question 42. Which of the following is a common reason to choose a “rolling update” over a “recreate” strategy in Kubernetes? A) To guarantee zero downtime B) To reduce the number of pods required overall C) To avoid using health probes D) To simplify the deployment YAML Answer: A Explanation: Rolling updates replace pods incrementally, keeping a portion of the old version alive, which minimizes downtime. Question 43. In the context of continuous delivery, what does “artifact promotion” refer to? A) Deleting old Docker images B) Moving a built artifact from a test repository to a production repository C) Changing the version number of a binary D) Scaling the number of replicas after release Answer: B Explanation: Promotion moves a verified artifact through stages (e.g., dev → QA → prod) without rebuilding it. Question 44. Which of the following is NOT a typical responsibility of a “Site Reliability Engineer (SRE)”? A) Designing alerting thresholds B) Writing application business logic C) Automating incident response D) Capacity planning Answer: B Explanation: SREs focus on reliability, automation, and operations; business logic is primarily a developer’s domain. Question 45. What is the purpose of a “Pod Disruption Budget” in Kubernetes? A) To limit the number of concurrent pod restarts during voluntary disruptions B) To define CPU limits for a pod C) To set network policies D) To schedule cron jobs inside a pod
Ultimate Exam
Question 49. In a CI pipeline, which artifact type typically requires a “signing” step before it can be published? A) Log files B) Container images C) Binary executables D) Markdown documentation Answer: C Explanation: Signing binaries (e.g., using GPG) verifies integrity and authenticity, which is essential for downstream consumers. Question 50. What does the “principle of least privilege” dictate for secret management? A) All services should share a single secret B) Secrets should be rotated daily regardless of usage C) Each component receives only the permissions it strictly needs D) Secrets should be stored in plaintext for easier access Answer: C Explanation: Limiting permissions reduces the blast radius if a secret is compromised. Question 51. Which AWS service can be used to automatically remediate non-compliant resources based on Config Rules? A) AWS GuardDuty B) AWS Security Hub C) AWS Systems Manager Automation D) AWS CloudTrail Answer: C Explanation: Systems Manager Automation can execute remediation actions when Config Rules detect drift. Question 52. In Kubernetes, which object provides a stable DNS name for a set of pods? A) ConfigMap B) Service C) Deployment D) PersistentVolume Answer: B Explanation: A Service creates a virtual IP and DNS entry that routes to the backing pods. Question 53. What is the effect of setting restartPolicy: Never in a pod spec? A) The pod will be restarted indefinitely B) The pod will not be
Ultimate Exam
restarted after exit C) The pod will restart only on node failure D) The pod will restart only when a new image is available Answer: B Explanation: Never tells the kubelet not to restart the container after it terminates. Question 54. Which of the following is a typical characteristic of a “hot-swap” deployment? A) Requires complete downtime B) Swaps code without restarting the process C) Only works with Java applications D) Needs a load balancer reboot Answer: B Explanation: Hot-swap replaces code or configuration while the process remains running, minimizing disruption. Question 55. What does “canary analysis” usually involve? A) Running a full regression suite on every commit B) Monitoring key metrics of a small traffic subset after a new version is released C) Deploying the new version to all users simultaneously D) Disabling all alerts during a release Answer: B Explanation: Canary analysis tracks performance and error rates of a limited user group to detect regressions early. Question 56. In the context of monitoring, what does the term “high cardinality” refer to? A) Metrics with a large number of distinct label values B) Metrics that are collected infrequently C) Metrics that only have boolean values D) Metrics stored in a relational database Answer: A Explanation: High cardinality labels (e.g., user IDs) can explode the number of time series, impacting storage and query performance.
Ultimate Exam
Explanation: Artifact repositories act as a central, versioned store for build outputs, enabling reproducible deployments. Question 61. Which of the following is a benefit of using “immutable tags” (e.g., SHA digests) for Docker images in production? A) Allows developers to edit the image in place B) Guarantees the exact same image is deployed every time C) Reduces the size of the image D) Enables automatic scaling of containers Answer: B Explanation: Immutable tags uniquely identify an image’s content, preventing accidental drift between environments. Question 62. What is a “sidecar container” in Kubernetes commonly used for? A) Providing primary business logic B) Adding auxiliary functionality such as logging, proxying, or security to a pod C) Replacing the main container when it fails D) Managing the pod’s lifecycle events Answer: B Explanation: The sidecar pattern runs a secondary container alongside the main app to handle cross-cutting concerns. Question 63. Which of the following best describes “Chaos Engineering”? A) Writing unit tests for all functions B) Intentionally injecting failures into production to test system resilience C) Using static code analysis tools D) Automating database migrations Answer: B Explanation: Chaos Engineering validates that a system can survive unexpected faults by deliberately causing them. Question 64. When configuring a Prometheus alert rule, which field defines the condition that must be true for the alert to fire? A) for B) expr C) labels D) annotations
Ultimate Exam
Answer: B Explanation: expr contains the PromQL expression evaluated to determine if the alert condition is met. Question 65. What is the primary advantage of using “feature flags” in a CI/CD workflow? A) They replace the need for automated testing B) They allow selective activation of new functionality without redeploying code C) They automatically generate documentation D) They enforce code style guidelines Answer: B Explanation: Feature flags enable toggling features at runtime, facilitating gradual rollouts and quick rollbacks. Question 66. Which of the following is a key difference between “stateful” and “stateless” services in Kubernetes? A) Stateless services cannot scale horizontally B) Stateful services require persistent storage and stable network identities C) Stateless services are always faster D) Stateful services do not need health checks Answer: B Explanation: Stateful services need durable storage (e.g., PVC) and stable DNS/IDs, while stateless services can be freely replicated. Question 67. In Git, what does the command git rebase -i typically allow a developer to do? A) Merge two branches automatically B) Interactively edit, reorder, squash, or drop commits C) Push changes to a remote repository D) Create a new branch from HEAD Answer: B Explanation: Interactive rebase lets users rewrite commit history before sharing it.
Ultimate Exam
Explanation: Runtime hardening enforces restrictions on system calls and capabilities during container execution. Question 72. Which of the following is a typical characteristic of a “serverless” function regarding scaling? A) Requires manual addition of instances B) Scales automatically per request, often to zero when idle C) Only scales vertically D) Cannot be used with containers Answer: B Explanation: Serverless platforms automatically provision compute per invocation and can scale down to zero. Question 73. What is the purpose of a “ServiceAccount” in Kubernetes? A) To provide an IP address for a service B) To assign an identity to pods for API authentication C) To store configuration files D) To define network policies Answer: B Explanation: ServiceAccounts issue tokens that pods can use to authenticate against the Kubernetes API. Question 74. Which of the following is a recommended practice when storing Terraform state in an S3 bucket? A) Disable versioning B) Enable server-side encryption and versioning C) Keep the bucket public for easy access D) Store the state file in the same bucket as application data Answer: B Explanation: Encryption protects sensitive data, and versioning allows rollback to previous states. Question 75. In a CI pipeline, what does “flaky test” refer to? A) A test that always passes B) A test that fails intermittently without code changes C) A test that runs slower than others D) A test that checks UI responsiveness Answer: B
Ultimate Exam
Explanation: Flaky tests produce nondeterministic results, often due to timing, environment, or external dependencies. Question 76. Which Kubernetes resource is used to limit the number of concurrent pods that can be evicted during a voluntary disruption? A) PodDisruptionBudget B) HorizontalPodAutoscaler C) ResourceQuota D) NetworkPolicy Answer: A Explanation: A PDB specifies minAvailable or maxUnavailable to control eviction rates. Question 77. What does the term “observability” encompass beyond basic monitoring? A) Only logging B) Ability to infer internal state from external outputs (metrics, logs, traces) C) Manual debugging procedures D) Automated code formatting Answer: B Explanation: Observability combines metrics, logs, and traces to understand system behavior without intrusive instrumentation. Question 78. When using Helm, what is the effect of the --atomic flag during an install or upgrade? A) It disables all hooks B) It rolls back the release automatically if any part fails C) It forces a reinstall of all dependencies D) It updates the chart repository before proceeding Answer: B Explanation: --atomic ensures that a failed release is automatically rolled back to the previous stable state. Question 79. Which of the following best describes “Infrastructure as Code” (IaC) testing? A) Running unit tests on application code only B) Validating that the generated infrastructure plan matches expected outcomes C) Checking UI responsiveness D) Monitoring network latency after deployment
