📘 AWS DevOps Interview MCQs
Scenario-Based Questions
Author: Zayan Ahmed | Estimated Reading time: 5 mins
🔹 Question 1: CI/CD with AWS CodePipeline
Your team is using AWS CodePipeline for deployments. The pipeline needs to deploy to
production only after a manual approval step. What should you do?
A) Add a Lambda function to pause the pipeline
B) Add a manual approval action after the build stage
C) Use Amazon CloudWatch to pause the pipeline
D) Add a CodeBuild project with sleep commands
🔹 Question 2: EC2 Auto Scaling Health Checks
Your EC2 Auto Scaling Group is scaling in instances that are still serving traffic via an ALB.
This causes brief outages. What’s the best fix?
A) Change ASG health check type to ELB
B) Use EC2 status checks only
C) Decrease the cooldown period
D) Increase the instance size
🔹 Question 3: ECS Deployment Strategy
You are deploying a new version of a containerized app in ECS using CodePipeline. How
can you ensure zero downtime during deployment?
A) Use the REPLACE deployment type
B) Use Rolling Update with minimumHealthyPercent set to 100
C) Enable Auto Scaling during deployment
D) Use an S3 bucket for blue/green deployments
🔹 Question 4: S3 and Static Website
You're hosting a React frontend in an S3 bucket. The issue is that deep links return 404
errors. How do you fix this?
A) Enable S3 versioning
B) Set error document to index.html
C) Disable bucket logging
D) Use CloudFront with signed URLs
🔹 Question 5: IAM Role Delegation
You want to allow a Jenkins server running on EC2 to access S3 for artifacts. What’s the
most secure way?
A) Store credentials in Jenkins
B) Attach a user with full S3 access
C) Use an instance profile with an IAM role
D) Use S3 public access for Jenkins
🔹 Question 6: CloudFormation Drift Detection
You used CloudFormation to deploy infrastructure. Months later, someone manually changes
a security group. How do you detect this?
A) Check the EC2 instance logs
B) Use CloudTrail to view changes
C) Use drift detection in CloudFormation
D) Use Trusted Advisor
🔹 Question 7: EBS Volume Performance
Your application on EC2 is facing high I/O latency. You're using gp2 EBS volumes. What’s
your next step?
A) Upgrade to st1
B) Convert to io2 volumes
C) Switch to instance store
D) Add a swap file
🔹 Question 8: CloudWatch Alarm Automation
You want to automatically reboot an EC2 instance if its memory usage goes beyond 90%.
How can you do this?
A) Use CloudWatch with CPU metric
B) Use CloudTrail to trigger reboot
C) Use CloudWatch Agent and an alarm with an SNS-to-Lambda trigger
D) Reboot manually via SSH
🔹 Question 9: Deployment Rollbacks
You pushed a bad change through CodeDeploy to EC2 instances. What feature helps you
auto rollback to the previous version?
A) EC2 Auto Scaling
B) CodeDeploy automatic rollback
C) CloudFormation template rollback
D) ECS blue/green deployment
🔹 Question 10: Parameter Store Best Practice
You're using AWS Systems Manager Parameter Store for secrets. Which is the
recommended way to store sensitive data?
A) As plain text parameters
B) In a JSON file in S3
C) As SecureString with KMS encryption
D) As environment variables in Lambda
✅ Correct Answers:
# Correct Answer Explanation
1 B Manual approval action
pauses pipeline until
someone approves it.
2 A ASG should use ELB health
checks to align with ALB
status.
3 B Rolling update with
minHealthyPercent = 100
avoids downtime.
4 B React SPAs require setting
error doc to index.html to
handle routing.
5 C IAM role attached via
instance profile is secure
and recommended.
6 C Drift detection shows
resources changed outside
CloudFormation.
7 B io2 is designed for
consistent high IOPS
workloads.
8 C Custom CloudWatch metric
+ Lambda = automation on
memory usage.
9 B CodeDeploy supports
automatic rollback on
failure.
10 C SecureString ensures
encryption using KMS.
🤔
😊
Loved THAT !
FOLLOW FOR MORE
LinkedIn
