GISI ADO Level study guide
GISI ADO Level · Work through your exam, one topic at a time.
The GISI ADO Level (also written ADO Level or GIAC ADO) is a DevOps-focused certification aimed at practitioners who build, ship, and operate software rather than at pure managers. It suits developers, build and release engineers, site reliability engineers, system administrators, and security staff who are moving into pipeline and platform work. The GISI ADO Level study guide has 8 sections and about 3,107 words.
01Introduction to DevOps
The Introduction to DevOps domain tests whether you can describe DevOps as a socio-technical system rather than a toolchain: its roots in Agile and lean manufacturing, the CALMS framing, the Three Ways, value-stream thinking, and the four DORA delivery metrics. Expect questions that classify a practice, interpret a metric, or pick the intervention that actually removes a bottleneck.
391 words, about 2 min02Version Control with Git
Version Control with Git tests command-level understanding of Git's data model and judgement about history on shared branches: the three trees, branches as pointers, merge versus rebase, undo operations, and collaboration workflows such as trunk-based development versus GitFlow. Git stores snapshots, not diffs.
403 words, about 2 min03Continuous Integration
Continuous Integration tests whether you can design a pipeline that integrates every change into trunk quickly and reliably: trunk-based development, build-once artefact flow, fail-fast staging, test-pyramid economics, artefact repositories and pipeline health as a first-class concern. CI means every developer integrates with trunk at least daily; long-lived feature branches are the opposite of CI.
388 words, about 2 min04Continuous Delivery and Deployment
Continuous Delivery and Deployment tests the distinction between always-releasable software and automatic production release, plus the deployment strategies and data-migration rules that make releases uneventful. Continuous Delivery: every change is production-ready and release is a business decision.
362 words, about 2 min05Infrastructure as Code
Infrastructure as Code tests declarative provisioning: idempotency, state management, drift, immutability, module reuse and safe change preview. Questions often ask you to read a plan, choose between declarative and imperative approaches, or diagnose a state problem.
384 words, about 2 min06Configuration Management and Automation
Configuration Management and Automation tests desired-state tooling for servers and middleware: convergence, idempotent resources, inventories, templating, execution order and testing. Expect questions on Ansible task behaviour and on agent-based tools such as Puppet and Chef.
402 words, about 2 min07Monitoring, Logging, and Observability
Monitoring, Logging, and Observability tests whether you can instrument a system and alert on what users actually feel: metrics, logs and traces, golden signals, SLIs and SLOs, error budgets and alert design. Three pillars: metrics (aggregatable time series), logs (discrete structured events), traces (request paths across services with spans and correlation IDs).
393 words, about 2 min08Security and Compliance in DevOps
Security and Compliance in DevOps tests how controls move into the delivery pipeline: automated scanning, secret management, least privilege, supply-chain integrity, policy as code and continuous evidence for auditors. Shift left: threat modelling at design, SAST on commit, software composition analysis on dependencies, DAST against a running environment, image scanning before push.
384 words, about 2 min