A company is adopting DevOps practices. The development and operations teams currently work in silos, with developers handing code over to operations for deployment. The company wants to improve collaboration and shared responsibility. Which cultural change best supports this goal?

Have developers write code and operations handle all deployment and monitoring without sharing information.

Create a shared on-call rotation where developers and operations engineers are both responsible for production incidents.

Automate all deployment tasks so that no human collaboration is needed.

Use a ticketing system to track all handoffs between development and operations.

Which statement accurately contrasts continuous delivery and continuous deployment?

Continuous deployment requires manual approval, while continuous delivery is fully automated

Continuous delivery is only for small projects, while continuous deployment is for large projects

Continuous delivery requires manual approval for production, while continuous deployment does not

Continuous delivery is a subset of continuous deployment

A company is adopting DevOps and wants to measure the success of its transformation. They have implemented CI/CD, automated testing, and monitoring. However, they are unsure which metrics best reflect the principles of DevOps. Which set of metrics should they focus on?

Number of alerts, number of incidents, and number of support tickets.

Number of commits, number of pull requests, and number of code reviews.

Number of servers, amount of storage, and network bandwidth.

Deployment frequency, lead time for changes, mean time to recover, and change failure rate.

A financial services company wants to release new features to production more frequently, but their compliance team requires a human to approve every production deployment. The team wants to automate everything up to that approval. Which approach should they use?

Implement continuous deployment, where the pipeline automatically deploys to production after tests pass.

Automate the production deployment but require a manual approval only for the staging deployment.

Implement continuous delivery, where the pipeline automatically deploys to staging and then pauses for a manual approval before production.

Use a CI pipeline that only builds and tests the code, with no deployment automation.

GIAC Cloud Security Automation

Domain 1Objective 1

Understanding the DevOps Workflow GCSA Practice Questions (Page 7)

Part of the DevOps and Cloud Infrastructure domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

10concepts

Questions 31–35

31application · medium
A company is adopting DevOps practices. The development and operations teams currently work in silos, with developers handing code over to operations for deployment. The company wants to improve collaboration and shared responsibility. Which cultural change best supports this goal?
Select an answer first
32foundation · easy
Which statement accurately contrasts continuous delivery and continuous deployment?
Select an answer first
33foundation · easy
Which tool is commonly used for continuous integration?
Select an answer first
34expert · hard
A company is adopting DevOps and wants to measure the success of its transformation. They have implemented CI/CD, automated testing, and monitoring. However, they are unsure which metrics best reflect the principles of DevOps. Which set of metrics should they focus on?
Select an answer first
35application · medium
A financial services company wants to release new features to production more frequently, but their compliance team requires a human to approve every production deployment. The team wants to automate everything up to that approval. Which approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCSA” is a trademark of its owner, used for identification only.