LPI 701-200: DevOps Tools Engineer

Last checked November 10, 2026 against the official LPI exam page.

1. Question 1701 Software Engineering

   A team is splitting a large application into smaller services, and each service will be built, tested and deployed independently by its own team. Which architectural style does this describe?

   1. AA monolithic architecture in which all features ship together as one deployable unit
   2. BA microservices architecture in which each service can be deployed independently
   3. CA waterfall delivery model in which all features are released once at the end
   4. DA shared-database architecture in which every module writes to one common schema
   Show answer and explanationHide answer

   Correct answer: B

   Microservices split an application into small services that are owned and deployed independently. A monolith ships as one unit, waterfall is a sequential project model rather than an architecture, and a shared schema is a data design choice that tends to couple modules.

2. Question 2704 Security and Observability

   A container image runs its application as root, but the application only needs to write to one data directory. Which change best reduces the impact of a compromise?

   1. AAdd the root user to every group in the image so that file permissions stay consistent
   2. BRun the process as a dedicated non-root user that can write only to the data directory
   3. CPublish every container port on the host so that the application is easy to reach
   4. DStart the container with the privileged flag so that it can reach every host device
   Show answer and explanationHide answer

   Correct answer: B

   A non-root user with write access limited to the data directory restricts what an attacker can change after compromising the application. Root group membership, privileged mode and publishing every port each widen the attack surface.

3. Question 3702 Application Container

   A database container must keep its data when the container is removed and a new container is started from the same image. Which Docker feature provides this?

   1. AA published port that forwards database traffic to a directory on the host filesystem
   2. BThe container's writable layer, which the container engine keeps after the container is removed
   3. CAn environment variable that stores the path of the data directory inside the image
   4. DA named volume mounted at the directory where the database writes its data files
   Show answer and explanationHide answer

   Correct answer: D

   Named volumes are managed by the container engine and exist independently of any single container, so the data survives removal of the container. A writable layer is deleted together with its container, and an environment variable or port mapping does not store any data.

4. Question 4703 Kubernetes

   Which Kubernetes component stores the cluster's state and configuration data?

   1. AThe kube-scheduler, which assigns newly created pods to suitable nodes
   2. BThe kube-proxy component, which maintains the network forwarding rules on each node
   3. CThe kubelet agent, which runs and monitors the pods assigned to its node
   4. DThe etcd key-value store, which holds the cluster state and configuration
   Show answer and explanationHide answer

   Correct answer: D

   etcd is the consistent key-value store that backs the Kubernetes API and holds the cluster's state and configuration. kube-proxy handles service networking, the kubelet runs pods on one node and the scheduler chooses nodes, so none of them is the state store.

5. Question 5701 Software Engineering

   Which practice from the twelve-factor app methodology keeps deployment-specific settings such as database addresses and API keys out of the application code?

   1. ACompiling a separate binary for each environment with its settings built in
   2. BHard-coding production connection strings in the source files and excluding test values
   3. CCommitting a settings file with live credentials to the main branch of the repository
   4. DReading settings from environment variables that are supplied when the application starts
   Show answer and explanationHide answer

   Correct answer: D

   The twelve-factor methodology keeps configuration separate from code and supplies it through environment variables, so one build can run in any environment. Per-environment binaries, hard-coded values and committed credentials tie configuration to the code, which the methodology avoids.