MLflow EKS Deployment Quiz
Multiple Choice Questions
- What is the main EKS self-hosting trade-off?
- A) Always lower cost than managed services
- B) Reuse Kubernetes patterns while operating servers, stores, and access controls
- C) Managed services cannot track experiments
- D) S3 and databases are created automatically
Show Answer
Answer: B
Compare operational work, features, supported versions, and measured load.
- Which SQLite concurrency statement is accurate?
- A) The second user always breaks it immediately
- B) Multiple processes and serialized writes are possible, with writer/locking/shared-file limits
- C) It is not relational
- D) Separate Pod-local files automatically form one shared DB
Show Answer
Answer: B
Distinguish SQLite capabilities from multi-Pod storage topology.
- What is the reviewed community chart 1.11.7 metadata default?
- A) Mandatory RDS PostgreSQL
- B) S3 objects
- C) backendStore.defaultSqlitePath is :memory:
- D) An automatically provisioned durable PVC
Show Answer
Answer: C
The chart override differs from the upstream CLI’s new SQLite-file default.
- Does an external tracking PostgreSQL database automatically share every other state?
- A) Yes, every auth DB and cache
- B) Yes, all worker memory
- C) Yes, every session secret
- D) No; inspect separate auth DBs, secrets, queues, and caches
Show Answer
Answer: D
Check shared state for enabled features before increasing replicas.
- How should chart, image, and source versions be handled?
- A) They always share one number
- B) A source tag guarantees the OCI package exists
- C) Verify each and download/render the actual package
- D) A latest tag removes the need to review image digests
Show Answer
Answer: C
The reviewed upstream chart source and appVersion also differed.
- Does ServiceAccount IAM access to S3 automatically allow PostgreSQL login?
- A) Always
- B) No; separately configure DB networking, TLS, users/credentials or IAM DB auth
- C) Only if the bucket name matches
- D) Put the DB password in the image
Show Answer
Answer: B
These are separate authorization and authentication layers.
- What does EKS Pod Identity require?
- A) Unconditional support for all Fargate and Windows Pods
- B) Only a ServiceAccount name
- C) Linux EC2 workers, Agent, association, supported SDK, and related setup
- D) A static root access key
Show Answer
Answer: C
Check IRSA and Pod Identity support and configuration separately.
- Do SecretKeyRef and allowed_hosts alone complete security?
- A) They eliminate environment exposure and implement all user authorization
- B) No; review secret delivery and application authentication/authorization separately
- C) They automatically back up databases
- D) All CORS origins must be allowed
Show Answer
Answer: B
Understand runtime secret injection and host-validation boundaries.
Short Answer Questions
- Does /health returning 200 prove RDS and S3 are healthy?
Show Answer
No. The verified implementation returns OK, 200 for HTTP process responsiveness. Check ongoing database, S3, authorization, and actual workload paths separately.
- What matters when assessing frequent logging and Aurora Serverless v2?
Show Answer
Measure batching, transactions, metric history, trace payloads, and pools across replicas/workers. Aurora has capacity, connection, I/O, and transaction limits; unlimited burst absorption or minimum cost is not guaranteed.