312-97 sample questions

Question 1

A traditional financial institution is transitioning from a Waterfall SDLC to a DevOps methodology. The organization currently suffers from long release cycles and frequent deployment failures due to misaligned environments. Which of the following represents the most critical cultural shift the organization must achieve to successfully implement DevOps principles?

Accepted Answer

Transitioning from siloed departmental responsibilities to a model of shared responsibility across development and operations.

Answer

Replacing all on-premises infrastructure with cloud-native services.

Answer

Implementing Jenkins for automated code compilation.

Answer

Ensuring the security team signs off on all releases before production deployment.

Question 2

When distinguishing between the core components of CI/CD, which statement accurately differentiates Continuous Delivery from Continuous Deployment?

Accepted Answer

Continuous Delivery ensures that code can be safely deployed to production at any time, whereas Continuous Deployment automatically deploys every validated change to production.

Answer

Continuous Delivery automates the release to production without human intervention, while Continuous Deployment requires a manual approval gate.

Answer

Continuous Delivery focuses on automated testing, while Continuous Deployment focuses on automated code compilation.

Answer

There is no difference; the terms are synonymous in modern DevOps frameworks.

Question 3

True or False: In a mature DevOps culture, the development team assumes sole responsibility for application functionality and code quality, while the operations team assumes sole responsibility for infrastructure uptime and scalability.

Accepted Answer

False

Answer

True

Question 4

An organization is migrating its on-premises CI/CD pipeline to a fully cloud-native architecture on AWS. They need to replace their self-hosted Jenkins server and local Git repositories with managed AWS services. Which TWO of the following AWS services should the architect select to achieve this? (Select TWO)

Accepted Answer

AWS CodeCommit

Accepted Answer

AWS CodePipeline

Answer

Amazon CloudFront

Answer

AWS CloudTrail

Answer

Amazon Macie

Question 5

A large healthcare provider is attempting to modernize its software delivery by adopting DevOps. Currently, they operate in strict silos: Developers write code and throw it over the wall to QA, who tests it manually for 3 weeks. Once approved, it is handed to the Security team, who performs a 2-week audit. Finally, Operations schedules a deployment window over a weekend.

The CIO wants to reduce the lead time from 6 weeks to 2 days. The Security Director is highly resistant, claiming that faster releases will inherently compromise HIPAA compliance and increase the risk of data breaches. The Operations Manager is concerned about deployment failures causing downtime.

As the lead DevSecOps architect, you must propose an initial strategy that addresses the cultural resistance while technically enabling the CIO's goal. Which approach represents the BEST initial step to break down these silos and accelerate the pipeline without sacrificing security?

```mermaid
flowchart LR
Dev[Development] -->|Code Handoff| QA[QA Manual Testing]
QA -->|Approval| Sec[Security Audit]
Sec -->|Sign-off| Ops[Ops Deployment]
style Dev fill:#f9f,stroke:#333,stroke-width:2px
style QA fill:#ff9,stroke:#333,stroke-width:2px
style Sec fill:#f96,stroke:#333,stroke-width:2px
style Ops fill:#9cf,stroke:#333,stroke-width:2px
```

Accepted Answer

Form a cross-functional platform team including members from Dev, QA, Sec, and Ops to build an automated CI/CD pipeline, integrating security scanning tools (SAST/SCA) early in the developer workflow.

Answer

Mandate that the Security team stops manual audits immediately and replace them entirely with DAST tools in the production environment to meet the 2-day deadline.

Answer

Bypass the Security team entirely by having Developers write their own security tests, allowing the pipeline to deploy directly to production without oversight.

Answer

Implement a fully automated CI/CD pipeline using Jenkins but retain the 2-week manual security audit at the end of the pipeline to ensure HIPAA compliance.

Question 6

The principle of "Shift-Left" is foundational to DevSecOps. Which of the following best defines this concept?

Accepted Answer

Integrating security practices and testing as early as possible in the software development lifecycle.

Answer

Moving production workloads from right-coast data centers to left-coast data centers for disaster recovery.

Answer

Shifting all security responsibilities exclusively to the development team, eliminating the need for a dedicated security team.

Answer

Delaying security audits until after the software is deployed to production to ensure faster time-to-market.

Top vendors

Top exams

Free 312-97 sample questions

When distinguishing between the core components of CI/CD, which statement accurately differentiates Continuous Delivery from Continuous Deployment?

True or False: In a mature DevOps culture, the development team assumes sole responsibility for application functionality and code quality, while the operations team assumes sole responsibility for infrastructure uptime and scalability.

The principle of "Shift-Left" is foundational to DevSecOps. Which of the following best defines this concept?

6 more free samples are waiting