Infosys Certified AWS DevOps Engineer Professional
Practice with real exam-pattern questions for Infosys Certified AWS DevOps Engineer Professional. Each question includes a detailed explanation to help you understand the concept, not just memorise the answer. Try 10 questions free — no login required.
Full question bank for this exam + 1,357+ others. Cancel anytime.
Join Premium10 Infosys Certified AWS DevOps Engineer Professional practice questions with answers
Real Lex exam-pattern multiple-choice questions for the Infosys Certified AWS DevOps Engineer Professional certification. Each question includes the correct answer. The full question bank is available to Premium members.
- Question 1
You are managing multiple AWS accounts in your enterprise. Several applications are deployed across Dev, Test and Production environments created in these AWS accounts. You want to minimize the management effort of infrastructure provisioning and deletion across these AWS accounts. Choose the two options that can together address these requirements.
- ✓
Create an AWS Organization and add the AWS accounts under Organizational Units.
Correct - B
Create CloudFormation stack in each of these accounts and use to manage the infrastructure provisioning and deletion.
- C
Create CloudFormation stack sets and deploy resources across AWS accounts in the AWS organization automatically.
- D
Create a Terraform template to deploy the AWS resources in each AWS account.
- ✓
- Question 2
John is exploring CICD operations on AWS environment. He is looking for Junit testing for a Java based application. Which of the following help to test the code in AWS?
- ✓
Code Commit
Correct - B
Code Build
- C
Code Test
- D
Code Deploy
- ✓
- Question 3
James is using AWS CodePipeline pipeline to set up a continuous delivery pipeline and provision the AWS Developer Tools for CI/CD. He has to implement a blue/green deployment with AWS CodeDeploy and wants to use docker images as source code.
How should he trigger a pipeline update for Docker images in AWS?
- ✓
Amazon Elastic Container Registry can be used as a source provider in AWS CodePipeline. Initiate an AWS CodePipeline pipeline update by uploading a new image to Amazon ECR.
Correct - B
Use AWS Lambda function to trigger the docker images upload to AWS Code Commit as source code files. Initiate an AWS CodePipeline pipeline update whenever images are pushed into AWS Code Commit
- C
Use Elastic Container Service to deploy containerized application in place of Code Deploy.
- D
Use Elastic Beanstalk in the deploy stage to implement a blue/green deployment for Docker containers.
- ✓
- Question 4
A team of developers is using Git repository to store application code and maintain versions. The developers push the application code to the repository which is merged into the main branch. This further triggers the continuous integration to build the project artifacts.
Which of the following services/components are ideal to be used as per the DevOps process?
- ✓
Configure CodeCommit repository and follow the development process to submit your code changes to the main branch.
Correct - B
Use Amazon EventBridge to trigger a sanity check build of CodeBuild to compile and analyze the pull request code
- C
A new continuous integration build is triggered by the Event Handler Lambda for merging the pull request to the main branch
- D
All of the mentioned options
- ✓
- Question 5
You are using AWS developer tools such as CodeCommit, CodeBuild, CodeDeploy to host your workload and to deploy frequent revisions of the application. You are asked to follow best practices to minimize the issues in deployment process. Choose the options that are regarded as best practices?
- ✓
Avoid associating multiple deployment groups with a single Amazon EC2 Auto Scaling group
Correct - B
Make sure AWS CodeDeploy agent is installed on all running instances.
- C
Perform log analysis to investigate deployment failures on instances.
- D
All of the given options.
- ✓
- Question 6
A company has containerized all of its in-house quality control applications. The company is running Jenkins on Amazon EC2, which requires patching and upgrading. The Compliance Officer has requested a DevOps Engineer to begin encrypting build artifacts since they contain company’s intellectual property.
What should the DevOps Engineer do to accomplish this in the MOST maintainable manner?
- ✓
Use AWS CodeBuild with artifact encryption to replace the build process using Jenkins instance.
Correct - B
Leverage AWS CodePipeline with a build action and encrypt the artifacts using AWS Secrets Manager.
- C
Deploy Jenkins to an Amazon ECS cluster and copy build artifacts to an Amazon S3 bucket with default encryption enabled
- D
Automate patching and upgrading using AWS Systems Manager on EC2 instances and encrypt Amazon EBS volumes by default.
- ✓
- Question 7
The resources for a business-critical, three-tier web application are expressed in a series of AWS CloudFormation templates. The application is using Amazon RDS for data and Amazon ElastiCache for session state. Users have reported degraded performance in the application. A DevOps Engineer notices that the T2 instance type is being used for the application tier and CPU usage is at 100% in Amazon CloudWatch.
What process should the DevOps Engineer follow to restore operations with the LEAST amount of disruption to the end users?
- ✓
Write a new CloudFormation template to include Amazon CloudFront in the environment, launch the stack, and update the Amazon Route 53 A record
Correct - B
Launch a new CloudFormation stack for the application tier using the M4 instance type, run acceptance tests against the new stack, and update the Amazon Route 53 A record
- C
Update the CloudFormation stack for the application tier using the T2 Unlimited option, run acceptance tests against the new stack, and update the Amazon Route 53 A record
- D
Launch a new CloudFormation stack for all tiers of the application in a different region, run acceptance tests against the new stack, and update the Amazon Route 53 A record
- ✓
- Question 8
A DevOps Engineer must ensure all IAM entity configurations across multiple AWS accounts in AWS Organizations are compliant with corporate IAM policies.
Which combination of steps will accomplish this? Select two options.
- ✓
Apply an SCP in Organizations to ensure compliance of IAM entities
Correct - B
Deploy AWS Config rules to all accounts in Organizations that match the corporate IAM policies.
- C
Enable AWS Trusted Advisor in Organizations for all accounts to report on noncompliant IAM entities.
- D
Configure an AWS Config aggregator in the Organizations master account for all accounts.
- E
Deploy AWS Config rules to the master account in Organizations that match corporate IAM policies.
- ✓
- Question 9
A DevOps engineer after joining a media startup has been tasked with assessing the current deployments by the company on the AWS Cloud. There is no central governance setup by the company yet. The DevOps engineer must assess and prepare a report for resources not complying with the following requirements-
- EC2 Instances are running only on company approved AMIs.
- Amazon EBS Volumes are encrypted.
- EC2 Instances have an Environment Tag.
- Root login over SSH is disabled on EC2 Instances.
Which services can the DevOps engineer use to perform this assessment with least effort? (SELECT TWO)
- ✓
AWS GuardDuty.
Correct - B
AWS Config.
- C
AWS Systems Manager.
- D
AWS Inspector.
- E
AWS Directory Service.
- Question 10
You have leveraged AWS CloudFormation to deploy your resources in AWS for experimental workload. When you tried deleting the stack, you observe that the stack deletion is failing. Which of the following are the reasons for the failure?
- ✓
S3 bucket created using the CloudFormation template is not emptied. Hence it couldn’t be deleted resulting in error.
Correct - B
IAM policies for your user account limit you from deleting CloudFormation stack.
- C
CloudFormation stack has termination protection enabled.
- D
All of the given options.
- ✓
More in Cloud
Infosys Certified Google Professional Cloud Security Engineer
Infosys Certified AWS Cloud Beginner
Infosys Certified Google Cloud Digital Leader
Pay once. Clear every cert this year.
One subscription, full Telegram channel access, every PDF posted during your membership.
- Full access to all 1,357+ certifications
- Monthly updated question banks
- Telegram private channel access
- Cancel anytime
- Everything in Monthly
- Save ₹2,100 vs monthly billing
- Priority answer key requests
- Best for increasing DQ score fast
- Everything in Quarterly
- Lifetime channel access — no renewals
- All future certifications included
- Priority response from admin team
Common questions, straight answers.
A monthly-updated Telegram channel where we post real exam-pattern question banks and detailed answer keys for 1,357+ Infosys Lex certifications. You join once, you get every PDF posted during your membership.
Right after payment on our Graphy page, you'll receive a private invite link to the Telegram channel. Access is instant — usually under 30 seconds.
We compile question banks from the actual Lex test pattern, sourced and verified by 180K+ community members who've recently cleared these exams. Match rate is consistently 85–95%.
Every single month. When Infosys rolls out new versions of certifications, we post updated dumps within 7–10 days. You'll see channel activity weekly.
Clearing certifications is one of the highest-weighted DQ factors. Members typically clear 3–5 certifications in their first 3 months, which moves DQ scores up by a full band.