question: 1
A company needs to automate its deployment process. Which AWS service enables blue/green deployments?
A. AWS CloudFormation
B. AWS CodeDeploy
C. AWS Elastic Beanstalk
D. AWS OpsWorks
correct answer: B
explanation: 🟩 AWS CodeDeploy supports blue/green and in-place deployments, minimizing downtime during code releases.

question: 2
Which AWS service allows you to define infrastructure as code using Python or TypeScript?
A. AWS CloudFormation
B. AWS CDK
C. AWS Config
D. AWS OpsWorks
correct answer: B
explanation: 💻 AWS CDK (Cloud Development Kit) lets you define cloud infrastructure using familiar programming languages.

question: 3
What is the best way to automatically roll back a deployment in AWS CodeDeploy upon failure?
A. Use SNS notifications
B. Enable auto rollback in deployment settings
C. Monitor with CloudTrail
D. Set alarms in CloudWatch
correct answer: B
explanation: 🔁 AWS CodeDeploy has built-in auto rollback settings to revert failed deployments without manual intervention.

question: 4
Which AWS service lets you automate patching for Amazon EC2 instances?
A. AWS CloudTrail
B. AWS Systems Manager Patch Manager
C. AWS Config
D. Amazon Inspector
correct answer: B
explanation: 🛠️ AWS Systems Manager Patch Manager automates OS and software patching across instances.

question: 5
How can you automatically test infrastructure changes before deploying them?
A. Use AWS CloudFormation change sets
B. Use AWS Config
C. Use AWS Trusted Advisor
D. Use AWS Artifact
correct answer: A
explanation: 🔍 CloudFormation change sets let you preview changes to your infrastructure before applying them.

question: 6
Which service helps track changes to AWS resources for auditing and compliance?
A. AWS CloudTrail
B. AWS Config
C. AWS Shield
D. AWS Trusted Advisor
correct answer: A
explanation: 📜 AWS CloudTrail records API activity and changes, crucial for auditing and governance.

question: 7
Which AWS service continuously monitors compliance and resource configurations?
A. AWS CloudTrail
B. AWS Trusted Advisor
C. AWS Config
D. AWS Systems Manager
correct answer: C
explanation: 🧾 AWS Config tracks and evaluates configurations, useful for compliance and drift detection.

question: 8
Your CI/CD pipeline should trigger whenever a code change is pushed to GitHub. What service helps automate this?
A. AWS CodePipeline
B. AWS CodeCommit
C. AWS CodeBuild
D. AWS CodeStar
correct answer: A
explanation: 🚀 AWS CodePipeline can integrate with GitHub to automatically start builds and deployments on code pushes.

question: 9
What is the benefit of using AWS Systems Manager Parameter Store?
A. It stores metrics
B. It stores secrets and configuration data securely
C. It runs shell scripts
D. It manages EC2 tags
correct answer: B
explanation: 🔐 Parameter Store is a secure storage system for environment variables and secrets.

question: 10
How can you ensure a Lambda function is deployed in a repeatable and version-controlled way?
A. Use AWS Elastic Beanstalk
B. Use AWS CodeDeploy with Lambda deployment groups
C. Use AWS Systems Manager
D. Use Amazon S3
correct answer: B
explanation: 🧩 CodeDeploy can handle Lambda deployments, allowing versioning and rollback features.

question: 11
A team wants to simulate infrastructure failures in production to test resilience. What AWS feature should they use?
A. AWS Fault Injection Simulator
B. AWS Config
C. AWS X-Ray
D. AWS CloudTrail
correct answer: A
explanation: 💥 AWS Fault Injection Simulator introduces failures to test system robustness.

question: 12
Which AWS service enables centralized logging from multiple services and accounts?
A. Amazon S3
B. Amazon CloudWatch Logs
C. AWS X-Ray
D. AWS CloudTrail
correct answer: B
explanation: 📘 CloudWatch Logs can aggregate logs from across accounts and regions using cross-account log groups.

question: 13
What is the best way to deploy a multi-region, high-availability architecture?
A. Use one large EC2 instance
B. Use Route 53 with health checks
C. Use AWS CloudFormation StackSets
D. Use AWS Snowball
correct answer: C
explanation: 🌍 StackSets enable infrastructure deployment across multiple regions and accounts consistently.

question: 14
How can you minimize downtime during database patching on Amazon RDS?
A. Use manual patching
B. Use Multi-AZ deployment
C. Use AWS Config
D. Use Read Replicas
correct answer: B
explanation: 🔁 Multi-AZ enables failover during maintenance, reducing impact on application availability.

question: 15
A team wants to encrypt application secrets. Which combination should they use?
A. EC2 and S3
B. CodePipeline and CloudWatch
C. Systems Manager Parameter Store and KMS
D. CloudFormation and CloudTrail
correct answer: C
explanation: 🔐 Parameter Store integrated with AWS KMS enables encrypted storage of secrets and config data.

question: 16
What is the purpose of AWS CodeBuild in a CI/CD pipeline?
A. Deploy applications
B. Store artifacts
C. Compile source code and run tests
D. Manage code repositories
correct answer: C
explanation: 🏗️ CodeBuild compiles code, runs unit tests, and produces artifacts for deployment.

question: 17
Which AWS service visually maps microservice call traces?
A. CloudTrail
B. CloudWatch
C. AWS X-Ray
D. Config
correct answer: C
explanation: 🔍 AWS X-Ray provides service maps, showing latency and trace data between microservices.

question: 18
To monitor EC2 CPU usage and disk I/O, you should use:
A. AWS Config
B. AWS CloudTrail
C. Amazon CloudWatch
D. AWS Trusted Advisor
correct answer: C
explanation: 📈 CloudWatch monitors performance metrics like CPU, memory, and I/O usage.

question: 19
How do you automate deployments to multiple environments (dev, test, prod) from the same CodePipeline?
A. Use multiple repositories
B. Use CloudFormation nested stacks
C. Use different deployment stages in CodePipeline
D. Use Lambda functions
correct answer: C
explanation: 🧱 CodePipeline supports defining multiple deployment stages for different environments.

question: 20
What’s the benefit of using Elastic Beanstalk for DevOps teams?
A. More granular control over EC2 instances
B. Manual configuration of services
C. Fast and automated deployment of web apps
D. Real-time backup
correct answer: C
explanation: 🚀 Elastic Beanstalk simplifies deployment by handling infrastructure, scaling, and monitoring automatically.

question: 21
A developer wants to use a private Docker image in AWS CodeBuild. Where should this image be stored?
A. Docker Hub
B. Amazon S3
C. Amazon ECR
D. AWS Lambda
correct answer: C
explanation: 🐳 Amazon Elastic Container Registry (ECR) is the AWS-native way to store and retrieve container images securely.

question: 22
Which AWS service helps detect infrastructure drift?
A. AWS Systems Manager
B. AWS CloudTrail
C. AWS Config
D. AWS Lambda
correct answer: C
explanation: 🧾 AWS Config continuously monitors configurations and alerts when they deviate from the desired state.

question: 23
What is the benefit of using Canary deployments?
A. Increases deployment speed
B. Deploys only to non-production environments
C. Reduces risk by rolling out to a subset first
D. Requires manual rollback
correct answer: C
explanation: 🐤 Canary deployments send new changes to a small portion of users first, making it easier to catch issues early.

question: 24
Which service allows storing encrypted credentials and injecting them into containers at runtime?
A. CloudTrail
B. Secrets Manager
C. Systems Manager Automation
D. CloudFormation
correct answer: B
explanation: 🔐 AWS Secrets Manager is purpose-built for managing, rotating, and injecting secrets into workloads securely.

question: 25
What tool can you use to perform automated security checks in AWS pipelines?
A. CodePipeline
B. AWS Inspector
C. Amazon GuardDuty
D. AWS CodeGuru Reviewer
correct answer: B
explanation: 🕵️ AWS Inspector can be integrated into CI/CD to automatically scan EC2 instances and containers for vulnerabilities.

question: 26
Which AWS service enables rollback for stateful infrastructure changes?
A. AWS Config
B. AWS CodeDeploy
C. AWS CloudFormation
D. AWS Trusted Advisor
correct answer: C
explanation: 🔁 CloudFormation can rollback infrastructure deployments automatically if stack creation fails.

question: 27
Which tool allows you to define application infrastructure across multiple AWS accounts and regions?
A. CloudFormation StackSets
B. Elastic Beanstalk
C. OpsWorks
D. CodePipeline
correct answer: A
explanation: 🌍 StackSets allow deploying CloudFormation stacks across multiple accounts and regions from a central administrator account.

question: 28
What’s the purpose of CodeDeploy’s lifecycle hooks?
A. Encrypt source code
B. Schedule deployments
C. Run custom scripts at key points
D. Create S3 buckets
correct answer: C
explanation: 🔁 Lifecycle hooks let you run scripts before, during, or after deployment phases to customize app behavior.

question: 29
Which AWS service can centralize operational data and provide a unified dashboard?
A. CloudWatch Logs
B. AWS Systems Manager OpsCenter
C. AWS Inspector
D. AWS Config
correct answer: B
explanation: 📋 OpsCenter in Systems Manager provides a centralized view of operational issues, streamlining resolution.

question: 30
What feature in CodeBuild ensures environments are isolated and consistent?
A. Shared AMIs
B. Buildspec files
C. Managed build environments (Docker)
D. EC2 instances
correct answer: C
explanation: 🧪 Each CodeBuild job runs in its own isolated Docker container, ensuring clean and reproducible builds.

question: 31
Which service helps you visualize service-to-service communication in a microservices app?
A. AWS X-Ray
B. CloudTrail
C. CloudWatch
D. Systems Manager
correct answer: A
explanation: 🎯 X-Ray provides a service map of request flows between microservices and helps identify performance bottlenecks.

question: 32
Which service is best for a Git-based, AWS-native code repository?
A. GitHub
B. AWS CodeCommit
C. AWS CodeBuild
D. AWS Cloud9
correct answer: B
explanation: 📁 CodeCommit is AWS’s fully managed source control service that hosts private Git repositories.

question: 33
How can you enforce tagging policies across accounts?
A. Use IAM
B. Use AWS Config rules
C. Use CloudTrail
D. Use CloudFormation
correct answer: B
explanation: 🏷️ AWS Config rules can be created to ensure resources meet tagging compliance policies.

question: 34
What ensures a Lambda function has the least privilege?
A. Attaching a full-access IAM role
B. Creating a Lambda execution role with only required permissions
C. Using default policies
D. Giving it admin access for logging
correct answer: B
explanation: 🔐 Always follow the principle of least privilege — give Lambda only the permissions it needs.

question: 35
Which AWS tool allows you to test infrastructure before deploying into production?
A. CloudFormation Drift Detection
B. CloudFormation Change Sets
C. AWS Trusted Advisor
D. AWS Shield
correct answer: B
explanation: ⚙️ Change Sets let you preview what CloudFormation will change before applying it.

question: 36
How can you prevent secrets from being exposed in a build log?
A. Use IAM to restrict logs
B. Store secrets in Git
C. Mask environment variables and use Parameter Store
D. Use plain text in the buildspec file
correct answer: C
explanation: 🛡️ Parameter Store masks secret values automatically, preventing accidental log exposure.

question: 37
Which AWS service helps you define runbooks for operational procedures?
A. AWS Step Functions
B. AWS Config
C. Systems Manager Automation
D. CloudTrail
correct answer: C
explanation: 🔁 Systems Manager Automation allows the creation of runbooks to automate operational tasks.

question: 38
You need to rotate database credentials automatically. Which service should you use?
A. AWS Systems Manager
B. AWS IAM
C. AWS Secrets Manager
D. Amazon S3
correct answer: C
explanation: 🔄 AWS Secrets Manager supports automatic rotation of credentials for databases and other services.

question: 39
Which AWS service automatically scans EC2 and ECR for vulnerabilities?
A. AWS Inspector
B. GuardDuty
C. Config
D. X-Ray
correct answer: A
explanation: 🛡️ Inspector can run automated vulnerability assessments on EC2 and ECR images.

question: 40
Which is the best AWS-native tool for tracking deployments and revisions?
A. CloudWatch Logs
B. AWS CodePipeline
C. AWS CodeDeploy
D. AWS CloudFormation
correct answer: C
explanation: 🧾 CodeDeploy tracks application revisions and allows rollback, making it ideal for deployment tracking.