NEW
Font size
WorksheetsAWS & DevOps Quiz
Total questions: 40
Worksheet time: 30mins
A production application experiences sudden spikes in database connections during deployments, causing connection exhaustion. Which AWS service best mitigates this without changing application code?
AWS DMS
Amazon RDS Proxy
Amazon Aurora Serverless
Amazon ElastiCache
A Kubernetes cluster must guarantee that at least 3 replicas of a critical service are always running during node failures or upgrades. Which feature enforces this?
ReplicaSet
HorizontalPodAutoscaler
PodDisruptionBudget
NodeAffinity
Terraform plans show unexpected resource recreation during minor configuration updates. What is the MOST common cause?
Provider version mismatch
Remote backend failure
Immutable resource attributes changed
State file corruption
A Lambda function triggered by SQS is processing messages too slowly and the queue backlog keeps growing. What is the BEST first action?
Enable DLQ
Increase Lambda reserved concurrency
Increase SQS visibility timeout
Increase Lambda timeout
A company wants to restrict developers from creating public S3 buckets across all AWS accounts. Which control is the MOST effective?
AWS Config rules
IAM permission boundaries
Service Control Policy (SCP)
S3 bucket policies
During a Kubernetes rolling deployment, old pods terminate before new pods are ready, causing downtime. Which Deployment setting prevents this?
terminationGracePeriodSeconds
revisionHistoryLimit
maxSurge = 0
maxUnavailable = 0
A Docker image contains secrets that accidentally leaked into the image layers. What is the BEST remediation?
Delete the image from the registry
Squash the image layers
Rotate the secrets and rebuild with multi-stage builds
Add .dockerignore entries
A multi-region application requires automatic failover with DNS routing based on health checks. Which Route 53 policy is most appropriate?
Weighted routing
Failover routing
Geolocation routing
Latency routing
An EKS cluster shows nodes scaling correctly, but pods remain pending even after new nodes join. What is the MOST likely reason?
Pod node affinity constraints
CNI plugin failure
Node security groups block traffic
Cluster Autoscaler misconfiguration
A Terraform team wants to prevent accidental deletion of critical resources. Which feature provides this protection?
Backend locking
Lifecycle ignore_changes
prevent_destroy lifecycle rule
State encryption
A web application requires sub-second global failover for HTTP traffic. Which AWS solution provides the FASTEST failover?
Route 53 health checks
AWS Global Accelerator
Application Load Balancer multi-AZ
CloudFront origin failover
A Jenkins pipeline occasionally deploys outdated artifacts due to race conditions between builds. What is the MOST effective fix?
Increase pipeline timeout
Run builds sequentially
Use immutable artifact versioning
Add build retries
A Kubernetes service must expose HTTPS externally and route traffic to multiple backend services by path. Which resource is required?
Ingress with Ingress Controller
NetworkPolicy
Service (LoadBalancer)
EndpointSlice
An application writes logs locally on EC2 instances and disks frequently fill up. What is the BEST long-term solution?
Implement log rotation only
Disable debug logging
Increase EBS volume size
Stream logs to CloudWatch Logs
A company wants to enforce encryption for all newly created EBS volumes automatically. Which AWS mechanism ensures this at scale?
CloudTrail monitoring
AWS Config remediation
IAM policy deny rules
Account-level EBS encryption by default
A containerized workload needs guaranteed CPU but flexible memory usage. Which Kubernetes configuration is appropriate?
Set CPU requests and no memory limits
Set both requests and limits equal
Set CPU requests and memory limits
Set only CPU limits
A Step Functions workflow must retry a failed Lambda task with exponential backoff. Where is this behavior configured?
Lambda function configuration
Step Functions state definition
EventBridge rule
IAM retry policy
An AWS account shows unexpected API calls creating EC2 instances at night. Which service should be checked FIRST?
AWS CloudTrail
GuardDuty
AWS Config
CloudWatch Logs
A Kubernetes cluster needs to restrict pods from running as root users. Which feature enforces this?
RBAC
Pod Security Admission
NetworkPolicy
ResourceQuota
A Terraform module must output a value for use by another root module. Which construct is required?
local
output
data
variable
A CloudFront distribution must block traffic from specific countries. Which feature should be used?
AWS Shield
Security Groups
Route 53 routing
Geo restriction
A Kubernetes pod frequently restarts without crashing. Logs show readiness probe failures. What is happening?
Pod is being evicted
Liveness probe is failing
Traffic is removed but pod continues restarting
Kubelet restarts container on readiness failure
An Auto Scaling Group must replace unhealthy instances automatically. Which feature handles this?
Health checks with ELB integration
Instance refresh
Capacity rebalance
Scheduled scaling
A company wants to encrypt all data in transit between microservices inside EKS. Which approach is MOST appropriate?
Implement a service mesh with mTLS
Use HTTPS at the application layer only
Use Security Groups between pods
Enable VPC Flow Logs
A Lambda function occasionally times out when accessing RDS in a VPC. What is the MOST common root cause?
Lambda memory too low
Missing IAM permissions
Exhausted RDS connections
No NAT Gateway for outbound access
A team wants all infrastructure changes reviewed before execution in Terraform. Which workflow enforces this?
terraform import
terraform plan + manual approval
terraform fmt
terraform refresh
An application requires exactly-once message processing semantics. Which AWS service is BEST suited?
SQS Standard
EventBridge
SNS
SQS FIFO
A Kubernetes node is under memory pressure and starts evicting pods. Which pods are evicted FIRST?
Burstable pods
System pods
BestEffort pods
Guaranteed QoS pods
A CI/CD pipeline must deploy the same artifact to dev, staging, and prod. What is the BEST practice?
Use environment-specific builds
Promote the same immutable artifact
Tag artifact differently per stage
Rebuild artifact per environment
A CloudFormation template must create resources only if a parameter is set to true. Which feature supports this?
Outputs
Conditions
Mappings
Transform
A Kubernetes cluster needs to limit total CPU usage per namespace. Which resource enforces this?
HPA
ResourceQuota
PodDisruptionBudget
LimitRange
An EC2 instance should never be terminated accidentally by automation. Which protection should be enabled?
Stop protection
Termination protection
Instance lock
Deletion lifecycle rule
A Lambda function is throttled even though concurrency limits are high. What is the MOST likely cause?
Downstream service throttling
Memory exhaustion
Reserved concurrency too low
Timeout misconfiguration
A container image must be signed and verified before deployment. Which tool or feature supports this?
AWS Inspector
Docker Content Trust / Notary
Clair
Trivy
A Kubernetes service must route traffic only to healthy pods. Which mechanism ensures this?
Readiness probes
HPA
ReplicaSet
Liveness probes
A company wants centralized logging across hundreds of AWS accounts. Which architecture is MOST scalable?
Central logging account with cross-account log subscriptions
Export logs manually
Use CloudWatch per account only
Each account stores logs locally
A Terraform state file becomes corrupted. What is the SAFEST recovery method?
Rebuild infrastructure manually
Delete and re-apply
Restore from remote backend versioning
Import all resources again
A Kubernetes Deployment must ensure new pods start before old ones stop. Which strategy achieves this?
RollingUpdate with maxSurge > 0
Canary
Recreate
Blue/Green
An API experiences sudden traffic surges and must throttle abusive clients automatically. Which AWS solution is MOST appropriate?
AWS Shield Advanced
API Gateway usage plans and throttling
CloudFront caching
Application Load Balancer
A DevOps team wants every infrastructure change recorded, auditable, and reversible. Which combination BEST satisfies this?
Manual provisioning + CloudTrail
CloudFormation only
Terraform + Git version control
Ansible playbooks only
