Question bank
DevOps Foundation
40 DevOps Foundation questions with the correct answer and a written explanation, organised across 7 exam domains.
- 40 questions
- 7 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Benefits of DevOps
4 questions in this domain
- Question 1Single Choice
What is the primary business outcome of adopting DevOps as described in the DevOps Foundation curriculum?
- AAchieving a sustainable competitive advantage through high-quality, rapid, and reliable software deliveryCorrect answer
- BReducing the number of employees in the IT department to cut costs
- CEliminating the need for any manual testing or quality assurance processes
- DMigrating all applications to the cloud immediately
Why this is the answer
The primary business outcome is to achieve a sustainable competitive advantage by delivering software faster, more reliably, and with higher quality. This is a core concept from the Business Value section.
- Question 2Multiple Select
Which two of the following are key practices that directly contribute to improved agility and speed to market in a DevOps environment?
- AImplementing continuous delivery (CD) pipelines to automate the release processCorrect answer
- BRequiring all changes to go through a weekly change advisory board (CAB) meeting
- CEstablishing short feedback loops through automated testing and monitoringCorrect answer
- DIncreasing the size of each release to reduce the number of deployments
Why this is the answer
Continuous delivery pipelines and short feedback loops are key enablers of agility and speed. Large, infrequent releases and manual governance boards slow down delivery and contradict DevOps principles.
- Question 3Interactive
The following code snippet is part of a deployment script used by a DevOps team. What DevOps practice does this code primarily support?
- AImmutable infrastructure where servers are replaced rather than patched
- BConfiguration drift detection and correction
- CInfrastructure as Code (IaC) for consistent environment provisioningCorrect answer
- DManual environment setup to ensure accuracy
Why this is the answer
The code uses Terraform to define and provision cloud resources in a declarative manner. This is a quintessential example of Infrastructure as Code (IaC), which ensures environments are reproducible, reduces drift, and supports automation.
- Question 4Single Choice
According to the DevOps Foundation syllabus, how does DevOps enhance customer experience?
- ABy aligning IT operations and development to deliver features faster and more reliably based on continuous feedbackCorrect answer
- BBy eliminating the need for any customer support or helpdesk functions
- CBy focusing all efforts on reducing cloud infrastructure costs to lower prices for customers
- DBy moving all customer interactions from digital channels to phone support
Why this is the answer
DevOps enhances customer experience by creating a culture of continuous feedback and rapid delivery, ensuring that improvements reach users quickly and that issues are resolved with minimal downtime. This aligns with the Enhanced Customer Experience section.
Continuous Integration and Continuous Delivery
6 questions in this domain
- Question 5Single Choice
What is a core principle of Continuous Integration regarding commit frequency?
- ACommit at least once per dayCorrect answer
- BCommit only at the end of a sprint
- CCommit only when a feature is complete
- DCommit weekly to reduce merge conflicts
Why this is the answer
CI requires frequent commits (daily or more) to detect integration errors early. Long-lived branches violate CI principles.
- Question 6Multiple Select
Which of the following are benefits of automated testing in a CI pipeline? (Select all that apply.)
- AImmediate feedback on code changesCorrect answer
- BEliminates the need for any manual testing
- CReduces the cost of fixing defects by catching them earlyCorrect answer
- DGuarantees 100% code coverage
Why this is the answer
Automated testing provides fast feedback and reduces defect cost by shift-left. It does not replace all manual testing nor guarantee full coverage.
- Question 7Interactive
Review the following CI pipeline stage snippet. What does this stage primarily represent?
- AStatic code analysis
- BUnit test executionCorrect answer
- CIntegration testing
- DArtifact packaging
Why this is the answer
The snippet runs unit tests using JUnit and fails the pipeline if any test fails – a core CI feedback mechanism.
- Question 8Single Choice
Which deployment pattern provides instant rollback with zero downtime?
- ABlue-Green deploymentCorrect answer
- BCanary release
- CRolling update
- DFeature toggle
Why this is the answer
Blue-Green uses two identical environments; switching traffic back is instant. Canary and rolling do not offer instant full rollback.
- Question 9Multiple Select
Which of the following are recognized as key concepts or practices in Release Management for DevOps? (Select all that apply.)
- AAutomated rollback proceduresCorrect answer
- BReleasing features using feature flagsCorrect answer
- CManual approval by a Change Advisory Board for every change
- DEnvironment parity across development, testing, and productionCorrect answer
Why this is the answer
Release management includes automation, feature flags, and environment parity. CAB approval for every change is a traditional anti-pattern in DevOps.
- Question 10Interactive
Review the following feature toggle code. What capability does this enable in a release strategy?
- AIt allows decoupling deployment from releaseCorrect answer
- BIt performs automatic rollback of the entire application
- CIt eliminates the need for any testing
- DIt enforces a manual approval gate before feature activation
Why this is the answer
Feature flags let you deploy code without making it active, separating technical deployment from business release and enabling safe experimentation.
DevOps Best Practices
10 questions in this domain
- Question 11Single Choice
Which CAMS pillar emphasizes a blameless environment and learning from failures?
- ACultureCorrect answer
- BAutomation
- CMeasurement
- DSharing
Why this is the answer
Culture is the foundation of CAMS, promoting collaboration, trust, and blamelessness to enable experimentation and learning from failure.
- Question 12Multiple Select
Which of the following are pillars of the CAMS model? (Select all that apply)
- ACultureCorrect answer
- BAutomationCorrect answer
- CLean
- DMeasurementCorrect answer
Why this is the answer
CAMS includes Culture, Automation, Measurement, and Sharing. Lean is part of CALMS, not CAMS.
- Question 13Interactive
Based on the CI/CD pipeline definition, which CAMS pillar is being implemented?
- AAutomationCorrect answer
- BCulture
- CMeasurement
- DSharing
Why this is the answer
Automation is the pillar focused on reducing manual tasks using CI/CD, infrastructure as code, and automated testing.
- Question 14Single Choice
In the CALMS framework, the letter 'L' stands for what?
- ALeanCorrect answer
- BLearning
- CLeadership
- DLogistics
Why this is the answer
CALMS stands for Culture, Automation, Lean, Measurement, Sharing, where Lean focuses on waste elimination and flow.
- Question 15Multiple Select
Which two of the following are DORA metrics? (Select two)
- AServer Uptime
- BLines of Code
- CDeployment FrequencyCorrect answer
- DMean Time to RecoveryCorrect answer
Why this is the answer
DORA's four key metrics are Deployment Frequency, Lead Time for Changes, Mean Time to Recovery, and Change Failure Rate. Server uptime and lines of code are not DORA metrics.
- Question 16Interactive
The script automatically rolls back on high error rate. What crucial feedback loop step is absent?
- AA blameless post-mortemCorrect answer
- BMore automation
- CA code review
- DFaster deployment
Why this is the answer
Closing the feedback loop requires a blameless post-mortem to learn and prevent recurrence, not just automated action.
- Question 17Single Choice
What does the term 'Kaizen' mean in a DevOps context?
- ABreakthrough innovation
- BIncremental improvementsCorrect answer
- CTool standardization
- DOrganizational restructuring
Why this is the answer
Kaizen is a Japanese philosophy of continuous, incremental improvement through small daily changes.
- Question 18Multiple Select
Which of the following are considered waste (muda) in Lean? (Select all that apply)
- AHandoffsCorrect answer
- BOverproductionCorrect answer
- CDocumentation
- DWaitingCorrect answer
Why this is the answer
Common wastes include handoffs, overproduction, waiting, defects, etc. Documentation is necessary if it adds value.
- Question 19Interactive
Using the provided VSM data, identify the step with the largest waste.
- ADevelop
- BCode Review
- CTestCorrect answer
- DDeploy
Why this is the answer
The test step has the longest waiting time (lead time - process time), indicating a queue bottleneck.
- Question 20Single Choice
Which of the following completes the CAMS acronym: Culture, Automation, Measurement, and _____?
- ASharingCorrect answer
- BSecurity
- CSystem
- DStrategy
Why this is the answer
CAMS stands for Culture, Automation, Measurement, and Sharing, where Sharing means transparent dissemination of knowledge.
DevOps Culture
6 questions in this domain
- Question 21Single Choice
What is the core emphasis of the DevOps movement as defined by the DevOps Institute's Foundation certification?
- ACultural movementCorrect answer
- BToolset for automation
- CJob title
- DAgile methodology
Why this is the answer
DevOps is a cultural and professional movement that emphasizes integration and collaboration, not tools, roles, or specific methodologies.
- Question 22Multiple Select
Which of the following are the five pillars of the CALMS framework used to assess DevOps maturity? (Select all that apply)
- ACultureCorrect answer
- BAutomationCorrect answer
- CLeanCorrect answer
- DCollaboration
Why this is the answer
CALMS stands for Culture, Automation, Lean, Measurement, and Sharing. Collaboration is not one of the five pillars.
- Question 23Interactive
Based on the manual deployment script shown in the code block, which of the following DevOps practices is most clearly missing?
- AAutomationCorrect answer
- BCollaboration
- CTesting
- DMonitoring
Why this is the answer
DevOps emphasizes automation to reduce manual errors and increase speed. This entirely manual process lacks automation.
- Question 24Single Choice
What is the primary barrier to efficient software delivery in traditional IT organizations according to the DevOps Foundation?
- AOrganizational silosCorrect answer
- BInsufficient tools
- CLimited budget
- DToo many meetings
Why this is the answer
Silos between development and operations are the main inhibitors of flow, causing delays and misaligned goals.
- Question 25Multiple Select
Which of the following are part of the Three Ways principles of DevOps defined by Gene Kim? (Select all that apply)
- ASystems ThinkingCorrect answer
- BAmplify Feedback LoopsCorrect answer
- CCulture of ExperimentationCorrect answer
- DCentralized Control
Why this is the answer
The Three Ways are Systems Thinking, Amplify Feedback Loops, and Culture of Continual Experimentation and Learning.
- Question 26Interactive
The CI pipeline configuration shown in the code block lacks which crucial aspect of a DevOps culture according to the Foundation?
- AFeedback loopsCorrect answer
- BAutomated testing
- CDeployment automation
- DPerformance metrics
Why this is the answer
DevOps relies on short feedback loops to detect issues early. This pipeline lacks any steps to provide feedback.
DevOps Tools
4 questions in this domain
- Question 27Single Choice
Which tool category serves as the single source of truth for all artifacts in DevOps?
- ASource Code Management (SCM)Correct answer
- BContinuous Integration (CI)
- CContinuous Delivery (CD)
- DMonitoring and Observability
Why this is the answer
SCM tracks changes and is the single source of truth; CI builds and tests, CD deploys, monitoring observes system health.
- Question 28Multiple Select
Which two statements correctly describe DevOps CI/CD practices?
- ACI builds and tests code automatically on commitCorrect answer
- BContinuous Delivery requires manual approval before productionCorrect answer
- CContinuous Deployment requires manual approval before production
- DCI automatically deploys code to production
Why this is the answer
CI automates build/test; Continuous Delivery has manual gates; Continuous Deployment is fully automatic; CI does not deploy.
- Question 29Interactive
What principle ensures that running this Ansible playbook multiple times produces the same system state?
- AIdempotencyCorrect answer
- BDeclarative configuration
- CProcedural execution
- DMasterless architecture
Why this is the answer
Idempotency ensures repeated runs yield the same result—a core principle of configuration management tools.
- Question 30Single Choice
What type of data does Prometheus primarily collect?
- AMetrics (time-series data)Correct answer
- BLogs (textual records)
- CTraces (distributed spans)
- DEvents (discrete occurrences)
Why this is the answer
Prometheus scrapes and stores time-series metrics; logs are handled by ELK, traces by distributed tracing tools.
DevSecOps
4 questions in this domain
- Question 31Single Choice
In DevSecOps, what is the main objective of including security checks in the CI/CD pipeline?
- AReplace the need for a security team
- BDetect vulnerabilities as early as possibleCorrect answer
- CPerform a final security audit before release
- DAutomate all security decisions without human input
Why this is the answer
Detecting vulnerabilities early reduces cost and risk, aligning with the shift-left principle in DevSecOps.
- Question 32Multiple Select
Which of the following are considered shift-left security practices?
- AThreat modeling during the design phaseCorrect answer
- BStatic application security testing (SAST) during codingCorrect answer
- CDynamic application security testing (DAST) after deployment
- DPolicy as code enforcement in the CI/CD pipelineCorrect answer
Why this is the answer
Shift-left includes threat modeling, SAST, and policy as code; DAST is a later-stage test, not shift-left.
- Question 33Interactive
Review the following Java code snippet. What security vulnerability does it contain?
- ACross-site scripting (XSS)
- BSQL injectionCorrect answer
- CBuffer overflow
- DInsecure direct object reference
Why this is the answer
The code concatenates user input directly into a SQL query, leading to SQL injection vulnerability.
- Question 34Single Choice
In DevSecOps, how is compliance typically enforced to maintain agility?
- AThrough manual audits before each release
- BBy automating checks in the CI/CD pipeline using policy as codeCorrect answer
- CBy assigning a separate compliance team to review all changes
- DBy performing compliance checks only after deployment
Why this is the answer
Policy as code enforces compliance automatically in the pipeline, enabling continuous validation without slowing delivery.
Infrastructure as Code
6 questions in this domain
- Question 35Single Choice
What is the primary purpose of configuration management in DevOps?
- ATo automate the deployment of code changes
- BTo ensure system integrity over time by systematically handling changesCorrect answer
- CTo manage user credentials and access controls
- DTo monitor system performance and generate alerts
Why this is the answer
Configuration management systematically handles changes to maintain integrity over time, preventing drift and manual errors.
- Question 36Multiple Select
Which two benefits does provisioning and orchestration provide in IaC?
- AEliminates configuration driftCorrect answer
- BIncreases the amount of manual configuration
- CReduces deployment lead timeCorrect answer
- DPrevents any changes from being made to infrastructure
Why this is the answer
Provisioning and orchestration eliminate drift and reduce lead time by automating consistent, repeatable deployments.
- Question 37Interactive
In the provided code block, which concept of immutable infrastructure is directly illustrated?
- AIdempotency
- BGolden image creationCorrect answer
- CConfiguration drift detection
- DBlue-green deployment
Why this is the answer
The Dockerfile builds a golden image (a pre-configured template) that is used to create identical containers, a core practice of immutable infrastructure.
- Question 38Single Choice
What does a declarative approach specify in Infrastructure as Code?
- AThe step-by-step instructions to execute
- BThe desired end state of the infrastructureCorrect answer
- CThe programming language used for automation
- DThe vendor-specific tool commands
Why this is the answer
Declarative approaches define the desired outcome; the tool determines how to achieve it, ensuring consistency and idempotency.
- Question 39Multiple Select
Which two are benefits of using version control for infrastructure code?
- AEnables rollback to previous configurationsCorrect answer
- BEliminates the need for testing infrastructure changes
- CProvides an audit trail of all modificationsCorrect answer
- DMakes infrastructure automatically immutable
Why this is the answer
Version control provides history for rollback and audit trails, but does not replace testing or enforce immutability by itself.
- Question 40Interactive
In the code block, which property of configuration management is demonstrated?
- AOrchestration
- BIdempotencyCorrect answer
- CProvisioning
- DVersion control
Why this is the answer
The playbook ensures the package is installed; running it multiple times yields the same state (idempotency) without changing already-configured systems.
Frequently asked questions
Everything about the DevOps Foundation question bank and how to use it.