Font size
WorksheetsINFRA Final Exam
Total questions: 92
Worksheet time: 1hrs 5mins
You are tasked with creating identical development environments for three teams. What is the key benefit of using Terraform in this situation?
It automatically installs required applications.
It enables repeatable, declarative infrastructure deployment.
It guarantees 100% uptime of deployed services.
It replaces the need for virtual machines.
Which Terraform command checks your configuration files for syntax errors and builds an execution plan?
terraform init
terraform apply
terraform plan
terraform validate
When storing Terraform state files remotely, which Azure resource would be most appropriate?
Azure Virtual Machine
Azure Blob Storage
Azure SQL Database
Azure Function App
Your team has deployed a web application and wants to monitor HTTP request failures. Which Azure Monitor feature should you use?
Log Analytics Agent
Azure Resource Health
Application Insights
Network Watcher
You’ve created an alert rule that triggers on high CPU usage. What action can you attach to notify your team?
Create a new VM
Send an email or trigger a Logic App
Delete the resource group
Reboot the server automatically
What is the purpose of using Azure Monitor Logs?
To schedule backups of resources
To query and analyze telemetry data
To install applications on VMs
To provision alert rules
You want to write a script that checks disk usage and emails a warning if usage exceeds 90%. Which tool is most appropriate?
PowerShell
Bash script using df and mail
Python script using Flask
Azure CLI with terraform apply
In a Bash script, what does #!/bin/bash signify?
It is a comment for documentation
It tells the system to use Bash to interpret the script
It initiates the script loop
It defines a variable name
Which command is used to append the output of a script to a log file?
A. >
B. cat
C. >>
D. print
What PowerShell cmdlet creates a new virtual machine in Azure?
New-VM
Start-AzVM
New-AzVM
az vm create
Which PowerShell command displays all currently running services?
Get-AzVM
Get-Service | Where-Object {$_.Status -eq 'Running'}
Show-Services
List-RunningServices
You need to automate login to Azure in your script. What should you use?
Manual login prompt
Service Principal authentication
SSH key authentication
Azure AD login link
What is the Shared Responsibility Model in cloud computing?
The cloud provider manages all security
Cloud provider and customer share responsibility for security and operations
The customer handles all infrastructure
Only users are responsible for data breaches
Which AWS service controls access to other AWS resources?
S3
EC2
IAM
Lambda
In Azure, which role allows full access to all resources?
Reader
Contributor
Owner
Developer
You want to automate application deployment whenever code is pushed to a GitHub repository. Which service should you use?
Azure Key Vault
AWS CloudWatch
GitHub Actions
Azure Sentinel
What is the purpose of a staging environment in a CI/CD pipeline?
To store logs before production
To test code before releasing to production
To auto-scale virtual machines
To create database backups
Which file format is typically used to define CI/CD workflows in GitHub Actions?
.json
.yaml
.html
.ps1
What is the purpose of a Python try/except block?
To define an array
To comment out code
To catch and handle errors gracefully
To format strings
Which Python library is commonly used for making HTTP API requests?
json
requests
httpd
pyapi
You wrote a script to gather metrics from Azure. What is one way to schedule it daily?
Use git push
Call it manually each morning
Schedule it with a cron job or Azure Function timer
Attach it to a VM boot process
Which tool is used for configuration management across multiple machines?
GitHub
Ansible
Terraform
Bash
What language is used for writing Ansible playbooks?
Python
YAML
JSON
PowerShell
You are automating software installation across multiple Linux servers. What is one benefit of using Ansible?
It requires an agent on each server
It uses SSH and is agentless
It can only be used in AWS
It is limited to one server at a time
A deployed web app is returning 403 Forbidden errors. What is the most likely root cause?
Database outage
Misconfigured permissions or access policies
Server hardware failure
VM is too small
What is a first step in performing a root cause analysis?
Add new firewall rules
Redeploy the entire application
Review logs and monitor metrics
Change environment variables
Your team discovers increased latency on your site. What tool helps you visualize performance over time?
GitHub
Visual Studio Code
Azure Monitor or AWS CloudWatch
Bicep
Your Azure bill has increased suddenly. What tool can help you analyze the cost by service?
Azure Backup
Azure Marketplace
Azure Cost Management + Billing
Azure DevOps
How can you reduce cloud costs on underused VMs?
Add more CPUs
Use auto-shutdown schedules or right-size the VM
Increase VM tiers
Duplicate the VM
Which Terraform feature helps enforce cost efficiency across environments?
Terraform Registry
Terraform Apply
Terraform Policies (Sentinel or Azure Policy)
Terraform Import
Your organization is migrating resources from Azure to AWS. Which IaC tool offers multi-cloud support?
ARM Templates
Terraform
CloudFormation
Azure DevOps Pipelines
You’re setting up infrastructure provisioning across GCP and AWS. What makes Terraform well-suited for this?
It can only be run from AWS
It uses providers to abstract cloud-specific logic
It only works with YAML
It depends on manual approvals
You want to deploy a serverless app using Python. What tool can help manage the deployment across multiple cloud environments?
Azure Key Vault
Serverless Framework
VirtualBox
GitLab CI
Which of the following is an advantage of using GitHub Actions over manual scripting?
Higher costs
Integrated CI/CD with version control
Less flexibility
No support for branching
You need to detect drift between Terraform configuration and actual cloud resources. What command helps?
terraform init
terraform plan
terraform validate
terraform destroy
Your team is deploying resources across AWS and Azure using a single automation tool. What tool can manage both environments?
AWS CloudFormation
Terraform
Azure Resource Manager
Azure CLI
The benefit of using remote backends for Terraform state is:
Enables collaboration and state locking
Reduces the need for version control
Increases manual configuration
Prevents infrastructure automation
In a multi-cloud deployment, what is a major challenge when using platform-native IaC tools (like ARM or CloudFormation)?
Cost
Version control
Lack of cross-platform compatibility
Performance limitations
You want to assign specific permissions to a group of users in Azure. What should you use?
Access Control Lists
Role-Based Access Control (RBAC)
Security Groups
Admin Console
What is the least privilege principle?
Denying all access by default
Granting only the permissions required to perform a task
Allowing admin access to all
Removing read permissions by default
In AWS, what IAM entity is best for applications that need temporary access?
User
Role
Group
Root
What Azure resource is used to filter traffic to and from virtual machines?
Firewall
Network Security Group (NSG)
Load Balancer
Application Gateway
Which AWS component is used for routing traffic within a VPC?
Route Table
Security Group
Elastic Load Balancer
Subnet
Which AWS component is used to control the flow of traffic within a VPC?
Route 53
Security Group
Route Table
Internet Gateway
What is the primary benefit of using a Virtual Private Network (VPN)?
Faster connection
Secure, encrypted communication over public networks
Serverless deployment
Free domain hosting
What Azure service aggregates logs and metrics from multiple resources?
Azure Monitor Alerts
Log Analytics Workspace
Azure Advisor
Application Gateway
Which AWS service provides centralized logging across accounts?
CloudWatch Logs
AWS CloudTrail
EC2 Logs
AWS Lambda Insights
What is a benefit of implementing centralized logging?
Faster VM performance
Simplified troubleshooting and compliance tracking
Reduced costs
Hides audit records
Which Windows tool allows you to manage services and check system logs?
Event Viewer
Power BI
Disk Cleanup
Netstat
In Windows Server, what is Active Directory used for?
Managing cloud deployments
Centralized user authentication and resource management
Encrypting hard drives
Monitoring CPU
What is an effective way to ensure recovery after a data center outage?
Change access policies
Use geo-redundant backups
Shut down idle resources
Increase VM size
Which service provides backup and restore capabilities for VMs in Azure?
Azure DevOps
Azure Blob Storage
Azure Backup
Azure Policy
What is RTO (Recovery Time Objective)?
Time to install new resources
Maximum acceptable downtime after failure
Cost of storage
Number of backups made
Which tool would you use in Azure to store and manage secrets?
Blob Storage
Azure Monitor
Azure Key Vault
Azure Batch
What is a best practice for managing secrets in source code?
Use environment variables or secret management services
Store them in plaintext
Which of the following is a benefit of using managed identities?
Requires manual credential rotation
Automatically handles authentication between services
Stores keys in GitHub
Increases billing cost
What is the purpose of Azure Policy?
Scheduling backups
Creating monitoring dashboards
Enforcing governance rules on resources
Launching virtual machines
Which AWS service helps manage compliance and auditing?
CloudWatch
AWS Config
AWS VPC
EBS
Why is tagging resources important for compliance?
It reduces costs
It helps track ownership, environment, and purpose
It improves network speed
It replaces identity roles
You used AI to review Terraform code for cost inefficiencies. What type of AI use case is this?
Natural language processing
Intelligent cost optimization
Chatbot integration
Computer vision
Which Azure tool helps estimate the cost of proposed resources?
Azure Key Vault
Azure Pricing Calculator
You want to use AI to generate architectural diagrams from code. What type of AI task is this?
Conversational AI
Generative AI
Sentiment analysis
Classification
During your capstone, your infrastructure wouldn’t deploy due to a quota limit. What should you do?
Delete resources
Contact support immediately
Modify resources or request a quota increase
Use a different cloud provider
You used Bicep for deploying infrastructure. Why choose Bicep over ARM templates?
Bicep has more features
Bicep is simpler and more readable than JSON-based ARM
Bicep can only deploy Linux
ARM doesn’t support Azure resources
Which of the following best demonstrates your understanding of cloud troubleshooting?
Documenting failed deployments
Adding animations to slides
Explaining why the failure happened and how to fix it
Asking ChatGPT to fix it
What is one benefit of using Markdown for documentation?
Lightweight formatting for easy readability and sharing
It runs scripts
It hides secrets
It creates databases
What tool is commonly used to track bugs and project tasks in tech teams?
Outlook
Jira
Why is writing retrospectives or reflections valuable?
It replaces need for documentation
It helps capture lessons learned and continuous improvement
It reduces team size
It automatically fixes bugs
What is the function of a CI/CD pipeline agent?
Hosts cloud infrastructure
Provides monitoring dashboards
Executes automation tasks during pipeline runs
Encrypts data in transit
Which tool can trigger builds and deployments from GitHub?
Notepad++
GitHub Actions
Visual Studio Code
Wireshark
How does using a version control system improve DevOps workflow?
Increases cost
Makes code proprietary
Enables collaboration, rollback, and audit trails
Removes the need for documentation
Which of the following best describes Infrastructure as Code?
Manual configuration
Declarative definition of resources using code
AI-generated documentation
PowerShell modules
What is the default port for HTTP traffic?
443
80
Which cloud service model includes OS-level control?
SaaS
PaaS
IaaS
FaaS
Which of the following best describes Azure DevOps?
A. A cloud storage platform
B. A set of development tools for CI/CD and collaboration
C. A DNS resolver
D. A Kubernetes clone
Why should you avoid using hardcoded credentials?
They reduce deployment time
They increase security risk if exposed
They help automation
They speed up boot time
What is a benefit of multifactor authentication (MFA)?
It provides additional security beyond just a password
It saves cost
It enables admin access
It improves encryption speed
You need to allow public read-only access to a static website on Azure. What should you configure?
Azure Function
Azure AD Role
Blob Storage static website with anonymous access
Virtual Network
What is a common benefit of separating front-end and back-end in a cloud app?
It uses less bandwidth
Improves scalability and security
Reduces storage needs
Simplifies billing
What is a load balancer used for?
Encrypting VMs
Writing code
Distributing traffic across multiple instances
Caching DNS records
Which of the following would make a good cloud capstone goal?
Uploading a picture
Automating VM deployment, securing access, and reducing cost
Editing a video
Installing software manually
What is the purpose of tagging your resources in Azure?
Gives them new IPs
Deletes them faster
Helps manage costs and ownership
Improves encryption
Which of the following tools can be used to deploy Bicep templates?
GitHub CLI
Azure CLI
Jenkins
VS Code only
Which option best supports zero-downtime deployments?
Manual upload
Blue/Green Deployment Strategy
Static hosting
DNS cache flushing
What’s one way to showcase professionalism in a final cloud project presentation?
Using bright colors
Clear, well-organized explanation with evidence and polished design
Apologizing for bugs
Reading slides verbatim
In your Terraform project, you have accidentally deleted an EC2 resource outside of Terraform, and now you need to remove it from Terraform's state file to avoid conflicts. Which Terraform command should you use to remove the resource from the state file?
terraform state remove aws_instance.example
terraform state rm aws_instance.example
terraform state delete aws_instance.example
terraform state clean aws_instance.example
Your organization has been managing AWS resources manually or with another tool, and now you are transitioning to using Terraform for infrastructure as code. You need to reference existing VPCs, subnets, and security groups that were created outside of Terraform to avoid duplicating infrastructure and ensure consistency. Which option is most suitable?
By storing state files remotely.
By defining output variables.
By using version control for configuration files.
By using data sources
How would you define Terraform?
A configuration management tool
An orchestration tool
An infrastructure as code tool
A continuous integration tool
A large part of cloud operations is automated. The process is known as
Orchestration
Web Service
Component
Management
You have a devops team in your current organization structure. They are keen to know if there is any service available in AWS which can be used to manage infrastructure as code. Which of the following can be met with such a requirement.?
Using AWS Cloudformation
Using AWS Config
Using AWS Inspector
Using AWS Trusted Advisor
Describe your new role - the job title, your job duties and specific technical skills that are directly related to your job.
In your visit to the company you will be working for, they described 5 Service Groups and 5 Client Groups. What are they?
