Free EXIN DevOps Professional Practice Questions

Sample Practice Questions

Try these 10 sample questions from the EXIN DevOps Professional practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1What deployment capability is central to continuous delivery when the business decides when to release?

   1. A.Deploy a validated change reliably whenever neededCorrect answer: A
   2. B.Deploy only at a fixed annual release window
   3. C.Deploy only when every code change is released immediately
   4. D.Deploy only after rebuilding a new untested package

   Explanation: Google Cloud describes continuous delivery as making deployment a "reliable, low-risk process that can be performed on demand at any time." This capability lets the team release when needed while maintaining a reliable process.

   Reference: DevOps capabilities — Technical capabilities, Continuous delivery

2. 2A team wants to recreate its deployment environment automatically from shared version control. Which collection of assets is essential for this goal?

   1. A.Provisioning scripts and environment configurationCorrect answer: A
   2. B.Application source and unit tests without environment definitions
   3. C.A release package and changelog without provisioning inputs
   4. D.Deployment logs and monitoring snapshots without setup files

   Explanation: DORA identifies the needed scripts and configuration as a prerequisite for reproducibility. "A prerequisite for achieving this goal is having the scripts and configuration information that are required to provision an environment stored in a shared, accessible system."

   Reference: Version control — Critical requirements, Reproducibility

3. 3A team wants to follow a single user request through several services and identify where time was spent. Which telemetry signal is most useful?

   1. A.A distributed traceCorrect answer: A
   2. B.An aggregate error counter
   3. C.A deployment frequency metric
   4. D.A single service's utilization gauge

   Explanation: Spans can show timing and paths across multiple services. "Traces are composed of spans, which are used to follow an event or user action through a distributed system."

   Reference: Monitoring and observability — Whitebox monitoring, Traces

4. 4Which Simian Army tool was designed to simulate degradation by introducing delays into service communication?

   1. A.Latency MonkeyCorrect answer: A
   2. B.Doctor Monkey
   3. C.Janitor Monkey
   4. D.Conformity Monkey

   Explanation: This tests how upstream services respond to slow dependencies. "Latency Monkey induces artificial delays in our RESTful client-server communication layer to simulate service degradation"

   Reference: The Netflix Simian Army — Latency Monkey

5. 5What does shifting security left mean in a software delivery lifecycle?

   1. A.Address security concerns earlier in the lifecycleCorrect answer: A
   2. B.Concentrate security checks at the release stage
   3. C.Defer security evaluation until operations monitoring
   4. D.Review security primarily after responding to incidents

   Explanation: DORA describes earlier integration of security work. "concerns, including security concerns, are addressed earlier in the software development lifecycle"

   Reference: Pervasive security — Pervasive security, introduction

6. 6A team's Kanban column has reached its work-in-progress limit. What should happen before another card is pulled into that column?

   1. A.A card in the column moves to the next stageCorrect answer: A
   2. B.A new card is added at a higher priority
   3. C.The column's limit is automatically increased
   4. D.All cards in the column are returned upstream

   Explanation: DORA states: "After the WIP limit is reached, no more cards can be added to the column" and the team must wait for a card to move on before pulling another. The limit constrains concurrent work rather than changing automatically.

   Reference: Work in process limits — How to implement work in process limits, Specify limits

7. 7Why should a deployment pipeline promote the same package through test and production while keeping environment-specific configuration separate?

   1. A.To let each environment compile a different binary
   2. B.To ensure production receives the package that was testedCorrect answer: B
   3. C.To remove the need to configure target environments
   4. D.To prevent test environments from using deployment scripts

   Explanation: DORA recommends separating configuration so the tested artifact is the one deployed. "That way, you know that the packages you are deploying to production are the same ones that you tested."

   Reference: Deployment automation — How to implement deployment automation

8. 8A team needs a timestamped record of a specific application event to investigate an incident. Which telemetry signal should it inspect?

   1. A.A log entryCorrect answer: A
   2. B.A utilization gauge
   3. C.An aggregate request rate
   4. D.A latency percentile

   Explanation: A log can record an event with time and other context. "Logs can be thought of as append-only files that represent the state of a single thread of work at a single point in time."

   Reference: Monitoring and observability — Whitebox monitoring, Logs

9. 9Which Simian Army failure simulation represents an outage of an entire availability zone?

   1. A.Chaos GorillaCorrect answer: A
   2. B.Doctor Monkey
   3. C.Janitor Monkey
   4. D.Security Monkey

   Explanation: It tests whether services rebalance across zones. "Chaos Gorilla is similar to Chaos Monkey, but simulates an outage of an entire Amazon availability zone."

   Reference: The Netflix Simian Army — Chaos Gorilla

10. 10How can preapproved security libraries help integrate preventative controls into development?

    1. A.They give developers reusable code with InfoSec inputCorrect answer: A
    2. B.Replace application-specific security testing with library approval
    3. C.Assume every use of an approved library is secure
    4. D.They remove the need to update controls as threats change

    Explanation: Preapproved components scale security guidance into routine development. "Providing developers with preapproved libraries and tools that include input from the InfoSec team can help standardize developer code."

    Reference: Pervasive security — Develop security-approved tools