AutoOps+ practice questions
CompTIA · AT0-001 · 200 questions
Original practice questions for the CompTIA AutoOps+ AT0-001 exam, covering automation coding concepts, system configuration, continuous integration, and continuous delivery. Content is original practice material aligned to the official exam domains and framed in civic and municipal scenarios such as city / county IT automation, 311 and permits portals, water / transit / utilities ops, public-health records pipelines, courts and clerk workflows, and school-district or housing-authority systems. This is not a brain-dump of actual exam questions.
This course contains the use of artificial intelligence.
About the AT0-001 exam
- Time allowed
- 1 hour
- Questions
- Maximum of 60
- Passing score
- 600 (scale of 100-900)
- Languages
- English
- Format
- Multiple-choice and performance-based questions
Exam details published by the vendor, checked 6 November 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Browse by Domain
Study specific topics at your own pace.
Automation Coding Concepts · 62 questions
- A city 311 routing script declares a queue name at module scope, then a helper function assigns the same name to a temporary overflow queue. Overnight tickets land in the overflow queue citywide. What change keeps the helper from overwriting the citywide ticket queue name?
- A county permits portal must send weekend submissions to an on-call clerk queue instead of the weekday planner queue. Which conditional pattern correctly implements that after-hours routing?
- A county assessor job must apply the same valuation patch to a fixed list of parcel identifiers already loaded in memory. Which loop construct is most appropriate?
- A water-utility meter sync job hard-codes a single plant ID inside the sync function. Crews need the same function for three plants next quarter. Why should the plant ID become a function parameter instead?
- A library Wi-Fi guest-access script should record whether voucher creation succeeded or failed. Which logging practice best meets that goal without exposing resident PII?
- Courts clerk exports arrive as semi-structured email text containing case numbers like CV-2026-01482 mixed with free-form notes. What is the best use of regex in the intake automation?
- Housing-authority automation must send a waitlist status update to an HTTP API and also keep human-editable runtime settings for batch size and retry count. Which representation pairing is most appropriate?
- A parks reservation script multiplies pavilion capacity (an integer) by remaining open days. A developer concatenates the capacity value with a string status code before the math runs, producing nonsense totals. What went wrong?
- School-district wireless controller logs are large text files. Technicians need only lines that show failed DHCP renewals. Which CLI approach best fits?
- A daily 311 export is a delimited text file with a category column. Analysts want a quick per-category ticket count on the jump host. Which tool is the best fit?
- Transit AVL automation scripts still reference a deprecated hostname after a depot rename. Operators need a reliable in-place string replacement across many script files. Which CLI helper is the appropriate choice?
- An open-data portal returns nested JSON for streetlight outage records. A night job must pull only the outage status field from each object. Which CLI tool is designed for that extraction?
- County IT needs a repeatable inventory of services on Windows jump hosts used for after-hours admin. Which approach best fits PowerShell automation?
- An EMS CAD status poller retries after transient timeouts. A naive retry calls the 'create incident ticket' API again and duplicates tickets. What must a safe retrying function ensure?
- Developers validating an elections ballot-dropbox sensor parser cannot reach live hardware in the lab. How should they still unit-test the parse logic?
- Several city departments import a shared module that syncs SSO group membership. The module's maintainers need a practice that keeps updates safe for every consumer. Which choice is best?
- A public-health lab automation job expects a CSV of specimen rows. Occasionally the file arrives with a valid header but zero data rows. What is the safest automation behavior?
- A fire-station printer deploy script can change device settings across many sites. Operators want a preview of intended changes before anything is applied. Which parameter pattern best supports that?
- A sanitation route-optimization job should record routine completion and also highlight API authentication failures. How should log levels be used?
- A maintenance-window script must accept a list of library branch codes from a config file. Which YAML form correctly represents that list as script input?
- Building services wants a reproducible way to package a permits plan-review helper and its OS-level dependencies for every county runner. What role does a Dockerfile play?
- County build agents install Python libraries for an assessor geocode utility. Last month an unpinned dependency floated to a breaking release overnight. What should the team do?
- Courts IT considers bumping a major version of a library used by the e-filing notifier before the next production cut. Why does that change need careful review?
- City Linux automation runners need a container base image policy. Which practice best matches a minimal trusted base image approach?
- A transit GTFS validator must produce the same dependency tree on every CI agent. How do lockfiles differ from floating version ranges for that goal?
- A school-district automation team maintains shared Python modules used by several campus scripts. Installs from the public PyPI index keep failing authentication for those private modules. What should the team configure?
- A city open-data team containerizes an ETL helper. Build tools and compilers are needed during image creation but must not remain in the image that runs in production. Which Dockerfile practice best meets that goal?
- A county jump host needs the jq command available in interactive shells and cron jobs, not as an importable Python library. How should jq be provided?
- A municipal platform engineer finishes local edits to 311 bot playbooks and wants those changes recorded in Git before anyone else reviews them. Which local sequence is correct?
- A laptop clone of the city’s GitLab automation repo is behind the remote main branch. The engineer needs remote-tracking refs updated and the local branch integrated with the remote’s latest commits. Which approach is appropriate?
- The city’s permits API client library removes a response field that calling scripts previously required. Which semantic version bump should the maintainers publish?
- A parks department developer is fixing a reservation bug and must keep work isolated until peer review. What source-control practice should they follow?
- County finance needs a stabilized cut of the tax portal for a quarterly hotfix window while feature work continues elsewhere. Which branching approach fits that need?
- County IT wants Git branch names that support audit reviews of who changed which automation ticket. Which naming convention best supports that goal?
- Housing-authority casework scripts briefly contained a cloud API key in a working-tree file. What source-control control best stops that secret from being committed?
- Public-works IoT automation jobs must meet a shared Python style guide before code reaches CI. Which practice enforces that earliest?
- Clerk workflow automations need Git history that auditors can understand months later. Which commit practice best supports that?
- Several technicians share an elections-office workstation used for Git commits to automation repos. Commits have been attributed to the wrong person. What should each technician configure before committing?
- The library catalog sync tool reached a build the team wants to mark as releasable for operations. How should that milestone be recorded in Git?
- The city’s IaC monorepo protects main so infrastructure changes receive review. Why are direct commits to main typically blocked?
- A developer updates a 311 feature branch that diverged from remote main and plans to rebase onto the latest mainline commits. What should they do first?
- The open-data portal client library adds a new optional endpoint while keeping all existing endpoints behaviorally unchanged. Which SemVer bump is appropriate?
- Maintainers fix a typo in generated text inside an EMS runbook generator without changing any API contracts or observable behavior for callers. Which SemVer bump applies?
- City automation teams struggle with painful merges after weeks of isolated work. Which branching practice reduces that merge pain?
- Multiple city departments need the same VPC networking pattern in IaC. Copy-pasting the networking code into each department repo has caused drift. What IaC approach should they adopt?
- Permits web nodes were patched by SSH hotspot edits, and each server now differs. Leadership wants immutable infrastructure practices instead. What change aligns with immutability?
- A library kiosk lockdown configuration must be safe to apply repeatedly during nightly automation. What IaC property ensures repeat runs converge to the same end state without compounding changes?
- County security wants firewall baselines expressed as the end state the devices should have, leaving the tool to calculate required changes. Which IaC style is that?
- EMS needs a brand-new jump box built once before any declarative agent can manage it. Which approach is still appropriate for that first bootstrap?
- School-lab account automation must create a standard student user when missing but must not error if the account already exists on a re-run. Which semantics should the job use?
- A transit authority wants AVL worker nodes that never accumulate one-off SSH patches. Which IaC immutability practice should the ops team follow?
- A parks department needs identical Wi-Fi SSID definitions across twelve park sites without copying the same block into twelve separate files. What IaC reusability approach should they use?
- A 311 platform team wants the worker replica count expressed as desired state rather than scaling pods by hand during every storm surge. Which approach matches declarative IaC?
- After a weekend emergency, a county engineer discovers undocumented console changes on the permits firewall. How should the team treat the IaC repository going forward?
- An assessor import job exits immediately with a parser complaint and never opens the county GIS API. What class of code life-cycle problem is this?
- A public-health notification script fails with an undefined-variable error after someone renamed the LABFEEDURL environment variable but not every reference. What should the technician conclude?
- A courts e-filing notifier starts cleanly, then crashes when the API returns an unexpected null for a docket field. How does this differ from a syntax failure?
- Two city engineers edited the shared Ansible inventory for library branches and a pull request now shows conflict markers. What does that indicate for the integration?
- A librarian checks out an old catalog-sync tag to compare behavior and then makes a new commit that never appears on any branch tip. What Git state explains this?
- A municipal platform engineer cannot push playbook updates; the remote returns authentication failure. What is the most likely cause among code life-cycle Git issues?
- A permits portal workflow YAML shows conflict markers after two hotfixes landed on the same lines. What should the engineer do before the pipeline can run again?
- A sanitation route job finds its CSV on a technician's laptop via a relative path but fails on the municipal CI agent with a missing-file runtime error. What should the team recognize?
System Configuration · 50 questions
- After an overnight emergency change, a county wants to know whether the web proxy still matches the approved baseline. Which configuration-management capability should they use first?
- Library kiosk SSH banners were edited by hand and no longer match the approved text. What drift remediation should config management perform?
- A water utility needs config management to remember which packages must exist on SCADA jump hosts across applies. What concept does that require?
- Permits portal backends must not serve expired TLS certificates after staff leave for the weekend. Which configuration-management action best addresses this?
- A housing authority wants share permissions on case-file folders limited to assigned caseworkers. How should ACL automation help?
- Fire stations keep drifting to random public NTP servers after local troubleshooting. What should config management ensure?
- A school district wants lab PCs locked to an approved security posture without visiting each classroom. Which configuration-management practice fits?
- City VPN concentrator certificates will expire during a holiday freeze. What certificate-oriented configuration practice should ops schedule?
- Clerk-VLAN devices should reach the records API but must not open lateral admin ports on neighboring systems. Which ACL intent matches that goal?
- Parks PCs show unauthorized local administrator accounts after a contractor visit. What should the next config-management converge do?
- EMS CAD printer mappings keep changing after night-shift troubleshooting. What drift-detection output helps the platform team?
- Transit garage Windows clients must trust a newly issued municipal root CA. How should configuration management help?
- Open-data ETL nodes must keep a logging agent installed and running after every reboot and package churn. Which state-management semantics should config management use?
- A city 311 stack must keep the application tier from talking freely to the database tier. Which workload configuration should automation enforce?
- County IT is standing up public-facing proxies for the permits portal. Where should those proxies be placed in the virtual network design?
- Library branches must send private traffic back to the city data center rather than out a local internet breakout. Which virtual-network control should automation configure?
- Citizen traffic to the 311 web frontends must be spread across healthy redundant nodes. Which virtual-network component should the city automate?
- The health department portal must reach a lab results API, but nothing else on that lab network should be reachable from the portal tier. Which firewall posture should automation apply?
- Courts IT is cutting the e-filing hostname to a new frontend pair. Which virtual-network change must be included so citizens reach the new endpoints?
- A school district needs classroom egress to traverse an inspection path before reaching the internet. Which virtual-network role should automation place in that path?
- City hall wireless must keep staff devices from sharing a broadcast domain with public guest Wi-Fi. What virtual-network design should automation implement?
- Housing authority application servers sit behind a load balancer. What configuration ensures citizens stop hitting a node that has failed its readiness probe?
- Elections tabulation systems sit on a high-sensitivity VLAN. Which firewall posture should automation enforce for that segment?
- Before migrating the tax portal to new addresses, county DNS operators want client caches to notice the cutover quickly. Which DNS practice should they apply ahead of the change?
- Library IT must repeatedly enforce kiosk lockdown settings across dozens of branches. Which automation approach best fits ongoing converge versus a one-time laptop run?
- County ops must remotecfg Windows print servers without installing a third-party agent on each host. Which remote management channel fits that Windows-centric approach?
- Fire-station clocks must always use the approved municipal NTP servers even after local troubleshooting. Which automation style should config management prefer?
- Network ops will push approved baselines to newly installed firehouse switches from a central controller. Which provisioning model does that describe?
- School lab PCs run an agent that periodically fetches the latest approved baseline from a central store. Which automation model is in use?
- When a resident uploads a new 311 case attachment to object storage, the city wants an automated virus-scan and metadata tag without a standing poller. Which approach fits?
- Parks backup jobs should alert operators and kick a retry runbook when a job fails. Which event-driven pattern supports that response?
- A clerk workstation needs a disk-cleanup script: sometimes an admin watches it live, sometimes it must run overnight unattended. Which local-execution distinction matters?
- Transit AVL hosts stay online continuously and need frequent policy refreshes. Which remote automation approach fits best?
- EMS appliances are constrained devices that rarely change and cannot run a heavyweight config agent. How should rare remote tweaks be performed?
- An automation job must list currently open code-enforcement cases from a municipal REST API without changing any records. Which HTTP method should it use?
- Parks staff need automation to create a brand-new work-order resource in the maintenance API. Which HTTP method is appropriate?
- Housing staff must change only the contact-phone field on a waitlist entry without replacing the entire record. Which HTTP method fits that partial update?
- Clerk automation must replace an entire calendar resource with a new authoritative representation from the scheduling system. Which HTTP method matches that full replace?
- An open-data portal must retire an obsolete dataset registration so clients stop discovering it. Which REST method should the automation use?
- A public-health lab integration must send an API credential on each request. Where should that credential be carried in a typical REST call?
- A county engineer on a jump host needs a fast CLI way to probe CRUD endpoints on the permits API during an outage. Which tool fits that need?
- School-district automation receives HTTP 401 when calling the SSO-protected roster API after a token lifetime ends. What does that status primarily indicate?
- Courts e-filing clients suddenly receive HTTP 503 during a filing rush. How should AutoOps interpret that status?
- A 311 intake bot posts a new service request and the API responds with HTTP 201. What does that response communicate?
- A library kiosk lockdown playbook fails to parse after an edit, and the runner reports a YAML structure error near a nested task. What is the most likely cause?
- Config agents fail TLS handshakes to the municipal API gateway after a holiday weekend. Logs show certificate verify errors. What should ops investigate first?
- An open-data feed validator rejects a published JSON document after a manual edit. The file is otherwise complete but includes a trailing comma in an object. What is the problem?
- After a network change, county config agents stop checking in to the configuration server though their local services still run. What should troubleshooting prioritize?
- Sanitation route hosts suddenly stop writing application logs after a config push. The logging agent package is installed, but its INI file has a mistyped section name. What is the likely root cause?
- A permitting application begins timing out on database connections immediately after a security change that tightened host ACLs. What is the most likely configuration root cause?
Continuous Integration · 48 questions
- A city CI pipeline needs API tokens for a 311 chatbot deploy job. Where should those secrets live?
- County cloud deploys should avoid long-lived static access keys in CI. Which secrets practice best matches that goal?
- A parks CI pipeline token may have been exposed in a job log. What secrets action should the team take first?
- Housing and public-health CI fixtures must exercise workflows without storing raw resident identifiers. Which practice supports that requirement?
- Municipal CI service accounts should follow a Zero Trust-aligned secrets stance. Which choice best reflects that?
- City platform teams need a controlled place to store container images produced by CI. What fulfills that role?
- Tax-portal releases must ensure production always pulls the exact build that was tested. Which artifact practice supports that?
- Permits-portal CI must record which components shipped in each build for later vulnerability response. What should the pipeline generate?
- School-district CI pulls packages through an external open-source cache. What control should guard that access?
- Elections tooling builds must start from clean machines each run to avoid leftover credentials and packages. What CI environment approach fits?
- EMS automation jobs retrieve vault credentials that stop working after a configured interval even though nobody revoked them. What CI secrets concept explains this?
- School applications accidentally promoted a nonprod image tag into the production pull path. How should artifact registries be organized to reduce that mistake?
- Housing authority CI must prevent unsigned build outputs from entering the production promote path. Which control belongs there?
- Public-works IaC jobs fail because runners lack Terraform and cloud CLIs. What CI environment practice fixes that?
- Clerk automation CI must stop merges when a pull request embeds an API key. Which pipeline control does that?
- The city library catalog release must keep an inventory of shipped components with each versioned artifact. What practice meets that need?
- Utilities NOC builders are air-gapped and cannot reach the public Internet for packages. How should CI obtain approved dependencies?
- Municipal CI secrets for parks, clerk, and public health must stay isolated. Which vault design supports that?
- 311 API unit suites are independent and CI wall-clock time is too long. Which orchestration choice helps?
- Courts CI must apply a schema migration before integration tests that query the new tables. How should the workflow be ordered?
- Transit CI should deploy only from tagged builds on the main branch, not from feature branches. Which workflow concept applies?
- Parks deploy stage completes but post-deploy smoke checks fail. What workflow response should CI take?
- Open-data integration tests occasionally flake on transient timeouts. Which failure-handling approach is appropriate?
- Transit mobile-backend pull requests must not merge until security findings are reviewed. Which pipeline enhancement belongs there?
- Public-health CI jobs produce different results on different agents because tool versions drift. What practice improves consistency?
- City IaC repositories keep regressing on style and complexity rules. Which CI enhancement should block those merges?
- Municipal CI agents keep failing with intermittent out-of-memory errors that are hard to spot in raw logs. What enhancement helps?
- City chatbot CI must lint, then unit-test, then package—never package before tests finish. How should the pipeline express that?
- County PowerShell automation must be verified on multiple supported OS images. Which orchestration approach fits?
- Fire/EMS CI scans a container base image and finds a critical CVE. What should the pipeline do?
- A canary release for the assessor portal burns the error budget. Which CI workflow action should follow?
- Elections build pipelines fail overnight with nobody watching the CI UI. What failure-handling practice helps?
- Documentation-only PRs for the permits portal still trigger expensive load tests. What workflow change is appropriate?
- Permits automation scripts accumulate duplicated logic that slows future changes. Which CI enhancement flags that before merge?
- City Jenkins should start a pipeline automatically when developers push to the municipal Git remote. Which trigger mechanism fits?
- Library staff need a quick way to re-run a failed CI pipeline from chat without opening the CI console. What trigger helps?
- Open-data validators should rebuild every night even when no one pushed that day. Which trigger type fits?
- Tax-portal production deploy stages must not start until an authorized operator confirms. Which pipeline trigger practice applies?
- A public-health lab pipeline must load staging credentials on feature branches and production credentials only on main. Which Git variable practice applies?
- County release jobs must name permits-portal artifacts from the SemVer Git tag that triggered the build. What should drive that naming?
- City 311 builds must record immutable provenance so support can map a production binary to exact source. Which metadata should be stamped?
- City infrastructure lint and test stages for the water-utility repo should live as versioned pipeline code in Jenkins. Where should that definition live?
- County GIS tile builds need a versioned GitLab CI pipeline with build and publish stages. Which definition format fits?
- Parks reservation automated tests must run as a GitHub Actions workflow versioned with the app. Which file defines that pipeline?
- A hot clerk-portal bug fix was just pushed and must be validated immediately—not after tonight's nightly job. Which trigger choice is correct?
- Municipal CI receives Git webhooks for the housing portal. How should the pipeline reject forged start requests?
- A change to the elections-office CI pipeline definition is proposed. What municipal change-control practice applies?
- Library documentation-only commits still run full site deploys. What controlled approach should operators use?
Continuous Delivery · 40 questions
- A city wants the new 311 web UI seen by only about 5% of citizen traffic before a wider rollout. Which delivery technique fits?
- The permits portal weekend release should swap citizen traffic from the live environment to a fully prepared standby in one cutover. Which strategy is that?
- Library catalog search pods must be replaced gradually so some healthy instances always serve patrons. Which deployment pattern applies?
- A single EMS reporting VM must be upgraded on the existing host rather than swapping to a parallel fleet. Which delivery approach is that?
- Municipal operators need the fastest traffic switchback if a tax-site release fails. Which strategy best prioritizes instant rollback?
- A small school-district cluster cannot afford to run a full duplicate green environment during upgrades. Which strategy fits the capacity constraint?
- Housing-portal canary traffic should grow only when error rate and latency stay within limits. What controls that expansion?
- After a tax-site blue-green cutover, why keep the prior (blue) environment as an idle standby?
- Transit API workers are updated with a rolling strategy. What should batch or surge settings ensure?
- An in-place upgrade is planned for a sealed public-health appliance with no parallel standby. What risk should operators accept?
- Citizen permit forms use sticky sessions, and a canary may skew results if the same users always hit one version. What caveat applies?
- Courts case-management plans a blue-green app swap, but the database schema is also changing. What caution still applies?
- Open-data API pods are rolled out gradually. How should new instances receive traffic only when ready?
- For a parks reservation app, how does a canary release differ from blue-green delivery?
- Before go-live of a new county payments page, operators must prove the site handles peak tax-season traffic. Which test type fits?
- After a clerk-workflow refactor, city IT wants proof that existing case-status and document-upload paths still work. Which test suite best catches those broken existing paths?
- Municipal ops needs confidence that a 311 intake change still works with the GIS parcel lookup service. Which testing approach best validates that cross-service behavior?
- Right after a library catalog deploy, the release engineer needs a fast check that search, hold, and login still respond. What should run first?
- Public-health IT wants ongoing proof that the health-portal login path stays healthy in production after releases. Which practice fits?
- Election-night reporting jobs fail and county IT must ship a fix quickly. Which continuous-delivery practice is appropriate?
- Post-deploy smoke tests for the public-works portal cannot create a work order. What should the delivery pipeline do?
- Before launching a text-to-911 pilot, the city must know the channel can handle expected peak message rates. Which QA activity applies?
- The permits portal calls an external payment provider during renewals. Which test best protects that municipal integration?
- A housing-authority casework bug needs an urgent hotfix. Auditors still expect a record of the change. What should operators do?
- City platform teams set an internal 30-day target that the 311 API succeed on at least 99.5% of requests. What kind of service-level concept is that?
- County email operations hold a written uptime commitment with the gateway vendor, including credits if availability falls short. What does that describe?
- Parks IT reports that the reservation site was available 99.9% of the month for citizen bookings. Which service-level idea is being measured?
- After a failed transit AVL deploy, leadership asks how long it typically takes to restore vehicle-location service. Which metric answers that?
- Library network ops tracks how long Wi-Fi controllers typically run between outages. Which reliability metric is that?
- Citizen reports about broken permit uploads are reviewed weekly and turned into backlog items for the next release. What continuous-delivery practice is this?
- Tax-portal reliability is within its monthly error budget, so product asks to ship a new filing feature this week. What service-level thinking supports that decision?
- A vendor email gateway misses its contracted uptime, while an internal 311 SLO miss only triggers a city team review. How should the AutoOps practitioner distinguish these?
- Municipal platform engineers want shorter outages after bad deploys of the clerk portal. Which practice most directly reduces MTTR?
- City IT announces a Sunday maintenance window for the assessor site and wants that planned downtime excluded from monthly availability. What service-level practice applies?
- City cloud deploys must use the provider CLI without leaving long-lived secrets on shared jump hosts. Which practice best secures that connection?
- Housing-authority automation jobs use a cloud SDK to update case queues. How should those jobs obtain credentials?
- CI must deploy a transit AVL update into the transit cloud account. Which IAM design is appropriate for the deploy role?
- Parks delivery pipelines currently inject static API keys from environment variables; security wants a stronger pattern for cloud deploys. Which comparison is correct?
- Municipal backups write assessor exports to object storage. How should the delivery pipeline authenticate to that storage?
- A legacy EMS uploader still uses long-lived IAM access keys. What hygiene step should AutoOps operators take?
These questions are original practice material and are NOT actual exam questions or brain-dump content. All vendor marks are trademarks of their respective owners. This site is not affiliated with, endorsed by, or sponsored by CompTIA.