Top 30 DevOps & Cloud Concepts Quiz
30 multiple-choice questions on the DevOps & Cloud fundamentals, drawn from 30 bites in the DevOps & Cloud library. Answer them here or read straight down. Every question carries the correct option, why it is correct, and a link to the bite it came from.
Infrastructure, containers, CI/CD, and cloud
30 questions. Pick an answer, or open “Show the answer” to read it.
Answers are graded in your browser. Nothing is saved, and no XP or streak is earned here. The app keeps score.
Question 1 of 30
What is the core philosophy behind Site Reliability Engineering (SRE)?
Show the answer
Answer: b · To treat operational challenges as software problems that can be solved through engineering.
SRE's fundamental principle is to approach operations as a software problem, using engineering to automate and manage systems, as stated in the card. Option D is incorrect because SRE was developed as a new approach to overcome the limitations of traditional operations.
Read the full bite: Site Reliability Engineering (SRE): Ops as a Software Problem
Question 2 of 30
What problem does cloud computing primarily solve for businesses launching new digital services?
Show the answer
Answer: c · The high upfront costs and risks of owning physical IT infrastructure.
The card states cloud computing was created to solve "huge upfront capital costs, long procurement times, and the risk of buying too much or too little capacity" associated with owning physical servers. While cloud computing can help with IT personnel challenges (A) and high availability (D), these are not its primary foundational purpose.
Read the full bite: Cloud Computing: Renting Someone Else's Computer
Question 3 of 30
A developer needs to deploy a microservices application with minimal resource usage and fast startup times. Which technology is generally preferred and why?
Show the answer
Answer: a · Containers, because they share the host OS kernel, reducing overhead.
Containers are preferred for microservices due to their low overhead and fast startup times, achieved by sharing the host OS kernel. VMs, while offering strong isolation, incur significant resource overhead by emulating a full OS.
Read the full bite: VMs vs. Containers: Houses vs. Apartments
Question 4 of 30
Which characteristic is most crucial for an effective build automation process?
Show the answer
Answer: c · It consistently transforms source code into a runnable application, regardless of the environment.
The card emphasizes that build automation makes the process "repeatable, reliable" and ensures "the same result every time, no matter who pushes the 'start' button." Option C directly reflects this core benefit. Option D describes the "it works on my machine" problem that build automation aims to eliminate, not a desired characteristic.
Question 5 of 30
Which statement best describes a core benefit of adopting public cloud for a new business?
Show the answer
Answer: c · It enables rapid resource scaling and avoids large upfront capital investments.
Option C is correct because the card emphasizes public cloud's ability to turn rigid capital expense into flexible operational expense, allowing rapid scaling without large upfront hardware purchases. Option D is incorrect as the card notes that public cloud may not be cost-effective for stable, high-utilization workloads and uncontrolled usage can lead to higher costs.
Read the full bite: Public Cloud: Renting, Not Owning, Your Datacenter
Question 6 of 30
Which of the following best exemplifies 'toil' in an engineering context?
Show the answer
Answer: c · Manually running a script to provision resources for each new customer
Option C perfectly matches the definition of toil: it is manual, repetitive, automatable, tactical, provides no lasting value, and scales linearly with service growth. Option A, attending meetings, is explicitly categorized as 'overhead' rather than toil, as it doesn't scale with service load in the same way.
Read the full bite: Toil: The Repetitive Work That Kills Engineering Velocity
Question 7 of 30
What is Docker's primary method for resolving the 'Works on My Machine' problem?
Show the answer
Answer: a · It bundles the application with all its specific dependencies into a portable, consistent unit.
The card explicitly states Docker solves this by "packaging an application with all of its dependencies... into a single, isolated unit called a container image." This ensures the environment is consistent everywhere. While related to isolation, containers are distinct from full virtual machines, which are heavier and emulate entire hardware systems.
Question 8 of 30
What is the key feature that distinguishes a private cloud from a traditional, on-premises data center?
Show the answer
Answer: d · It offers on-demand, self-service access to resources through a management software layer.
A private cloud's defining characteristic is the cloud management software stack that provides self-service, on-demand access and automation, differentiating it from a traditional data center which may also own its hardware and use virtualization but lacks these cloud-like capabilities. While option B is often true for private clouds, it's also true for traditional data centers, so it's not the distinguishing factor.
Read the full bite: Private Cloud: Cloud Computing on Your Terms
Question 9 of 30
What is a key advantage of automated testing in modern software development?
Show the answer
Answer: a · It allows for rapid and confident deployment of code changes by detecting regressions early.
The card highlights that automated testing "provides the confidence needed to deploy changes frequently" and is "the foundation for catching regressions." Option B is incorrect because the card explicitly states automated testing is "not suited for exploratory testing... or for assessing subjective user experience."
Read the full bite: Automated Testing: Catch Bugs Before They Ship
Question 10 of 30
Which statement accurately describes a key characteristic of Linux namespaces?
Show the answer
Answer: c · They enable processes to have isolated views of system resources while sharing the host's single kernel.
Linux namespaces provide isolated environments for resources like process IDs and network interfaces, but they all share the host's single kernel. This is a fundamental difference from virtual machines, which run their own independent kernels. The card explicitly states that namespaces are not a sole security boundary for untrusted code.
Read the full bite: Linux Namespaces: A Virtual Slice of the OS
Question 11 of 30
What does it signify if an SRE team consistently operates well within its allocated error budget?
Show the answer
Answer: b · The team is being overly cautious, potentially sacrificing innovation for unnecessary stability.
The card explicitly states that having too much error budget left over signals being "too conservative and slowing innovation," indicating that resources might be better spent on new features or calculated risks. Option D is tempting but incorrect because the card notes that users often cannot perceive the difference between high and extreme reliability, making excessive investment in stability pointless.
Read the full bite: Embracing Risk: Reliability Is a Budget, Not a Goal
Question 12 of 30
Which scenario best demonstrates the appropriate use of an artifact repository?
Show the answer
Answer: a · Publishing a newly built Java .jar file to be consumed by other internal projects.
An artifact repository is designed to store and share binary outputs like compiled code (.jar files) from a build process for consumption by other systems or teams. Storing source code is for version control systems, while archiving unstructured logs or serving static assets are roles for general file storage or web servers, not artifact repositories.
Read the full bite: Artifact Repository: Your CI/CD's Private Library
Question 13 of 30
What is the primary problem that Linux cgroups were designed to solve in a multi-tenant server environment?
Show the answer
Answer: c · Preventing a single application from consuming all available CPU or memory, thus starving other processes.
The card explicitly states that cgroups were introduced because 'a single runaway process could consume all available CPU or memory, starving every other process and crashing the system.' While cgroups are related to container isolation, their primary role is resource limiting, not network traffic isolation or secure communication.
Read the full bite: Linux cgroups: Resource Fences for Processes
Question 14 of 30
Which characteristic is most crucial for an effective Service Level Indicator (SLI)?
Show the answer
Answer: c · It directly reflects the user's experience or perception of service performance.
The card explicitly states that an effective SLI measures what matters to the user, focusing on their experience rather than internal system metrics. Option D describes a common pitfall, as system metrics are causes, not symptoms felt by users, and should not be primary SLIs.
Read the full bite: Service Level Indicators: Measuring What Matters
Question 15 of 30
In an Infrastructure as a Service (IaaS) model, which aspect of the computing environment is the user primarily responsible for managing?
Show the answer
Answer: b · The operating system, applications, and data.
The card states that in IaaS, "you're still responsible for managing the OS and all software" and compares it to bringing your "OS, applications, and data." Option D describes a Platform as a Service (PaaS) or Serverless model, which IaaS is explicitly contrasted with for users who want to avoid server management.
Read the full bite: Infrastructure as a Service (IaaS): Renting the Data Center
Question 16 of 30
What is the typical immediate consequence when a service's error budget is exhausted?
Show the answer
Answer: c · All non-essential feature releases are temporarily halted to prioritize reliability work.
The card states that exhausting the error budget typically triggers a freeze on non-essential releases, redirecting focus to reliability work. The Service Level Objective (SLO) is the target from which the budget is derived; exhausting the budget means the service is failing to meet the SLO, not that the SLO itself should be changed.
Read the full bite: Error Budgets: Balancing Reliability and Innovation
Question 17 of 30
Which component in a Kubernetes node is directly responsible for pulling container images and setting up their isolated execution environment?
Show the answer
Answer: a · The container runtime, which executes containers based on instructions from the kubelet
The container runtime is the low-level engine that directly pulls images and creates isolated container environments using features like namespaces and cgroups. The kubelet acts as a 'transmission,' translating Kubernetes commands into instructions for the runtime, but does not perform the execution itself.
Read the full bite: Container Runtime: The Engine That Runs Your Containers
Question 18 of 30
A development team prioritizes rapid deployment of their custom web application and wants to avoid managing servers or operating systems. Which cloud service model best fits their needs?
Show the answer
Answer: b · Platform as a Service (PaaS), as it abstracts away infrastructure, allowing focus on code and quick deployment.
PaaS is designed for rapid development and deployment by abstracting away the underlying infrastructure like servers and operating systems, allowing developers to focus solely on their application code. While IaaS offers control, it requires managing those underlying components, which the team wants to avoid.
Read the full bite: Platform as a Service (PaaS): Focus on Code, Not Infrastructure
Question 19 of 30
What is the primary problem Infrastructure as Code (IaC) aims to solve in managing IT infrastructure?
Show the answer
Answer: a · Preventing configuration drift and ensuring consistent, repeatable environments.
The card explicitly states IaC was created to combat 'configuration drift' and ensure 'consistent, repeatable environments.' While IaC can contribute to cost efficiency, its main purpose is not cost reduction, and it does not eliminate all human involvement, but rather automates the provisioning process through code, not GUIs.
Read the full bite: Infrastructure as Code: Manage Servers with Code, Not Clicks
Question 20 of 30
A team avoids public Docker images in their non-Docker runtime, believing the format is proprietary to Docker. Which statement corrects this misunderstanding?
Show the answer
Answer: a · Docker images are OCI-compliant bundles that run on any compliant runtime without conversion.
The card calls this belief a footgun, emphasizing that Docker images are OCI-compliant bundles executable by any compliant runtime, much like USB-C devices work with any compliant charger. Option C invents a translation step that the standard eliminates, and option B confuses interface compatibility with performance guarantees.
Question 21 of 30
Which core principle defines the 'blameless' approach in a postmortem?
Show the answer
Answer: b · Human errors are symptoms of systemic issues, and everyone involved acted with good intentions.
The card explicitly states that a blameless postmortem 'assumes that everyone involved in an incident acted with good intentions' and 'treats human error not as the cause of failure, but as a symptom of a deeper, systemic issue.' Option A describes a blame-focused approach, which is the antithesis of a blameless postmortem.
Read the full bite: Blameless Postmortems: Fix Systems, Not Blame
Question 22 of 30
What is a key advantage of adopting a Software as a Service (SaaS) model?
Show the answer
Answer: c · Transferring the burden of software maintenance, hosting, and updates to the vendor.
SaaS shifts the responsibility for hosting, maintenance, and updates from the customer to the software provider, which is a primary advantage. While SaaS offers cost-effectiveness, it involves recurring subscription fees rather than eliminating all expenses.
Read the full bite: SaaS: Renting Software Instead of Owning It
Question 23 of 30
What is the primary advantage of implementing a Blue-Green deployment strategy?
Show the answer
Answer: d · It ensures continuous service availability and provides immediate rollback capabilities during deployments.
The card states that Blue-Green deployment enables "zero-downtime releases and instant rollbacks," which directly translates to continuous service availability and immediate rollback. Option C is incorrect because this strategy temporarily doubles infrastructure costs.
Read the full bite: Blue-Green Deployment: Zero-Downtime Releases
Question 24 of 30
What is the primary distinction between a canary release and A/B testing?
Show the answer
Answer: a · A canary release primarily validates the technical stability and performance of a new version, whereas A/B testing evaluates user engagement and business outcomes.
The card states that a canary's goal is to quickly validate stability, while an A/B test is a longer-running experiment to test a business hypothesis. Option B describes a feature of canary releases but not its primary distinguishing purpose from A/B testing.
Read the full bite: Canary Release: Test New Code on Real Users, Safely
Question 25 of 30
What is the primary reason a service provider's internal Service Level Objective (SLO) is typically set higher than its external Service Level Agreement (SLA)?
Show the answer
Answer: a · To provide a safety margin for the engineering team before contractual penalties are triggered.
The card explicitly states that "The buffer between the SLO and SLA gives engineering a margin for error before a failure costs the company money." This means the higher SLO acts as an internal target that, if met, ensures the external, contractually binding SLA is also met, thus avoiding financial penalties. Option D describes a potential positive outcome, but not the primary strategic reason for the buffer from the provider's perspective.
Read the full bite: Service Level Agreement (SLA): The Contract Behind Uptime
Question 26 of 30
What is the primary reason Union File Systems, like Docker's OverlayFS, can exhibit performance overhead for write-intensive applications?
Show the answer
Answer: a · Each modification to an existing file from a lower layer triggers a copy-on-write operation.
The card states that "The copy-on-write mechanism adds performance overhead for every initial write to a file that exists in a lower layer." This means files from read-only layers must first be copied to the writable layer before they can be modified, which is an extra I/O operation. Distractor A is incorrect because lower layers are read-only and not re-merged on write; changes are isolated to the top writable layer.
Read the full bite: Union File Systems: Docker's Layered Magic
Question 27 of 30
Which is the primary advantage of Pipeline as Code over configuring CI/CD processes via a graphical user interface?
Show the answer
Answer: a · It enables version control, peer review, and auditability of the build and deployment logic.
The core benefit of Pipeline as Code is treating the pipeline definition as a version-controlled file, which allows for reviewable changes and a complete audit history. Option D is incorrect because Pipeline as Code explicitly involves defining the pipeline through code, such as a Jenkinsfile.
Read the full bite: Pipeline as Code: Versioning Your Build Process
Question 28 of 30
The OCI Runtime Spec primarily standardizes container execution by defining:
Show the answer
Answer: d · The structure of a filesystem bundle and a config.json for runtime instructions.
The OCI Runtime Spec defines the 'filesystem bundle' (a directory containing the root filesystem and a config.json) and the config.json file itself, which specifies how a low-level runtime should execute the container. Option B describes the OCI Image Spec, while options C and D refer to higher-level abstractions or user-facing tools, which the Runtime Spec is explicitly not.
Read the full bite: OCI Runtime Spec: The 'How to Run' Standard for Containers
Question 29 of 30
Which scenario best illustrates the primary financial advantage of adopting a cloud-based OpEx model compared to traditional CapEx?
Show the answer
Answer: c · A startup needing to quickly deploy a new service with fluctuating user demand without significant upfront hardware purchases.
Option C is correct because the OpEx model allows startups to avoid large upfront hardware purchases and enables rapid scaling for fluctuating demand, directly aligning with the financial advantages described. Option D is a tempting distractor, but the card explicitly states that pure OpEx can be more expensive for predictable, stable workloads over the long term, meaning it doesn't always guarantee overall cost reduction.
Read the full bite: CapEx vs. OpEx: The Cloud's Financial Shift
Question 30 of 30
Which cloud strategy combination best addresses predictable monthly user growth and unpredictable, short-duration traffic spikes?
Show the answer
Answer: b · Implement scalability for the monthly growth and elasticity for the celebrity-induced spikes.
Scalability is ideal for planned, long-term growth, while elasticity efficiently handles unpredictable, short-term demand fluctuations by automatically adjusting resources. Relying only on elasticity for steady growth is inefficient, as it would constantly make small adjustments instead of operating from a stable baseline.
Read the full bite: Cloud Scalability vs. Elasticity: Planned Growth vs. Real-Time Reaction
Could you explain these out loud?
That is what an interview actually tests. Tezvyn gives you questions like these with what the interviewer is really checking, the answer that lands, and the mistake that ends the conversation, in the four minutes before your next meeting.
The iPhone app is on the way
We are building it. Until it lands, nothing here is held back from you: every interview card, your saved cards, streaks and the job board all work in Safari, plus hundreds of free practice quizzes of thirty questions each. Sign in and it all carries over to the app the day it arrives.
Want it as an icon? Tap Share at the bottom of Safari, then Add to Home Screen. It opens full screen and the cards you have read stay available offline.