Exam Prep · SREF · Mock Exam · Set 4

SREF Mock Exam · Set 4

This is practice paper four of five for the DevOps Institute's SRE Foundation (SREF) exam, and it is built with a different temperament from the first three. An earlier paper might ask "what is an error budget?" This one hands you a specific SLO and a specific number of incident minutes and expects you to work out, on the spot, whether the error-budget policy has actually triggered — the same two-step arithmetic the real exam leans on far more than a glossary quiz would suggest. Forty questions, weighted across the SREF syllabus's eight modules, each with an instant explanation the moment you commit to an answer. Sit Set 1 through Set 3 first if you haven't — they carry the recall-heavy foundation this paper assumes you already have — and keep Set 5 sealed as your final cold run before the real exam.

☺ Explain it like I'm 10

Knowing your times tables is one skill. Using them instantly to work out whether you have enough allowance left for the thing you want is a harder skill built on top of the first one. Papers one through three taught you the times tables of SRE — what an SLI is, what toil means, what an error budget is. This paper hands you a shopping list and a clock and asks you to actually do the math: given this SLO and this month's incidents, can the team still ship, or does the policy say stop? Almost every question here expects you to combine at least two facts before you can even look at the four answers.

🦥🐢Your hosts for this topic: Sol the Sloth & Timmy the Turtle — Sol insists on doing every calculation slowly and correctly instead of fast and wrong, and Timmy won't let a number count until it's been checked twice.

Where Set 4 fits among the five SREF papers

☺ Like you're 10: Four practice papers built the same way, but this one is the one where knowing the vocabulary stops being enough by itself.

All five SREF papers on this site draw from the same eight-module syllabus and use the same 40-question, 60-minute shape as the real exam, so a score on one is genuinely comparable with a score on another — what changes across the set is the kind of question, not the topics. Sets 1 through 3 lean toward definitions and single-fact recall: what an SLI is, what toil means, what blameless actually requires. Set 4 leans toward scenarios where you're handed two or three numbers and have to combine them correctly before an answer even makes sense. Set 5 is held back as the closest thing to a cold, exam-conditions dress rehearsal.

PaperCharacterBest sat
Set 1Recall and definitions — the vocabulary of the syllabusEnd of your first pass through the eight domain pages
Set 2 & Set 3Mixed reinforcement across the same eight modulesIn between, spaced a few days apart
Set 4 (this one)Multi-step reasoning — error-budget triggers, burn-rate math, ratios, timelinesOnce the vocabulary is solid, a week or two before the real sitting
Set 5Sealed — the closest thing to a genuine cold runDays before your real exam, exam conditions, no peeking beforehand

If you haven't yet worked through the concept reference and at least one earlier paper, this is the wrong page to start on — you'll score badly for the wrong reason and learn little from it. Start with the study plan and how a SREF question is built before sitting anything timed.

Sitting it under real exam conditions

☺ Like you're 10: One clock, no notes, every question answered — the same rules the real exam actually uses.

A mock paper only measures what the conditions you sit it under allow it to measure. The real SREF exam is closed-book — no documentation tab, no second screen, no notes — so a paper worked with a browser tab open somewhere else has measured your search skills, not your readiness.

  1. One 60-minute timer, started once. Don't pause it for a phone call or a question you'd rather think about later — the real clock won't pause either.
  2. Leave the domain chips on "All 40". Filtering by module during a sitting turns one mixed paper into eight easy little ones; use the chips afterward, for revision, not during.
  3. Answer every question. An unanswered question is a guaranteed zero; a considered guess between two options is a coin flip you were offered for free.
  4. Commit before you read the explanation. The reveal is instant and generous — read it before choosing and you've converted a test into a reading exercise.
  5. Write down every question that surprised you — including ones you got right by luck. Right-for-the-wrong-reason is a gap that will find you again on exam day, in different wording.
  6. Don't immediately re-sit. Go and re-derive the arithmetic on the two or three questions that stalled you, then come back and use Shuffle / reset — question order and option order both reshuffle, so you can't pass by remembering which button was green.
⚠ What's published, and what isn't — verify before you book

Per the certifications overview on this site, the SREF exam is 40 questions, 60 minutes, multiple-choice and closed-book, with a 65% pass mark and no formal prerequisite, issued by the DevOps Institute. Those figures are stated plainly throughout this page. What is not published, unlike the CNCF's blueprints for its own certifications, is a percentage weighting per syllabus module — the DevOps Institute's official syllabus lists eight learning-objective modules without stated point values. The 40-question split used on this page and its sibling papers is this course's own study convention, not a figure sourced from the vendor. Exam details change over time — duration, question count, pass mark, price, and retake terms all get revised — so confirm everything at the DevOps Institute's official SRE Foundation page before you register.

How the 40 questions are weighted across the syllabus

☺ Like you're 10: The topic with the trickiest arithmetic gets the most questions, because that's where candidates report the real exam leaning hardest.

With no official percentage weighting to match, this paper's 40 questions are split across the syllabus's eight modules by a study convention rather than a vendor figure: the two modules candidates most often report as arithmetic-heavy on the real exam — Service Level Objectives & Error Budgets and Anti-Fragility & Learning from Failure — carry the largest shares, and the remaining six divide the rest roughly by how much syllabus ground each one covers.

ModuleQuestions hereWhere to revise
🦉 SRE Principles & Practices5SRE Principles & Practices
🦥 Service Level Objectives & Error Budgets8SLOs & Error Budgets
🦫 Reducing Toil4Reducing Toil
🐘 Monitoring & Service Level Indicators6Monitoring & SLIs
🐿️ SRE Tools & Automation3SRE Tools & Automation
🦊 Anti-Fragility & Learning from Failure7Anti-Fragility & Learning from Failure
🐦 Organizational Impact of SRE4Organizational Impact of SRE
🧭 SRE, Other Frameworks & the Future3SRE, Other Frameworks & the Future
Total40All eight module pages
40 questions · 8 modules · 60 minutes Principles 5 SLOs & Budgets 8 Toil 4 Monitoring 6 Tools 3 Anti-Fragility 7 Org Impact 4 Future 3 SLOs & Error Budgets and Anti-Fragility together are 15 of the 40 — more than a third of the paper. Not a vendor figure The DevOps Institute publishes eight syllabus modules with no stated percentages. This split is a study convention built around candidate-reported exam emphasis — verify at the source.

What makes Set 4 harder: multi-step reasoning, not recall

☺ Like you're 10: Almost every question here makes you do two things in your head before you're even allowed to look at the four answers.

Every question on this paper falls into one of five recurring shapes. Learn to name the shape in the first few seconds and you buy yourself real thinking time, because the arithmetic itself is never hard — the only way to lose marks is to skip a step or mix up which number goes where.

🦥 Sol's arithmetic checklist · 2 min

Before you touch the options on any calculation question, write down four things in order: the SLO as a percentage, the window converted into a base unit (minutes, requests, hours), the resulting budget, and the number given in the question you're meant to compare it against. Only then look at the four answers. Doing this on paper turns almost every "hard" question on this paper into simple subtraction — the difficulty was never the arithmetic, it was skipping straight to the options before doing it.

The alerting rules behind the burn-rate questions on this paper aren't abstract — they're the same shape a real Prometheus alerting rule takes once an SLO is defined. A fast-burn rule for a 99.9% SLO (allowed error fraction 0.001) commonly compares a 1-hour rate against a 5-minute rate, both against a 14.4× multiplier:

- alert: ErrorBudgetFastBurn
  expr: |
    (
      sum(rate(http_requests_total{status=~"5.."}[1h]))
      /
      sum(rate(http_requests_total[1h]))
    ) > (14.4 * 0.001)
    and
    (
      sum(rate(http_requests_total{status=~"5.."}[5m]))
      /
      sum(rate(http_requests_total[5m]))
    ) > (14.4 * 0.001)
  for: 2m
  labels:
    severity: page
  annotations:
    summary: "Fast error-budget burn on checkout — budget gone in ~2 days at this rate"

See multi-window, multi-burn-rate alerting for the full design, and Prometheus for the query language this rule is written in.

The paper — 40 questions

☺ Like you're 10: Pick an answer. It turns green or red right away and tells you why yours was wrong too.

Click an option to lock it in — the correct answer is marked, your mistake (if any) is marked, and the explanation appears underneath immediately. Each explanation covers both the right answer and the most tempting wrong one, because on a reasoning-heavy paper the near-miss is exactly what's worth understanding. The counter and bar above the questions track your progress and score; the chips filter by module for revision afterward; Shuffle / reset reshuffles both the questions and the options and starts a fresh attempt. Your best score is remembered on this device only — nothing is sent anywhere.

Module
0 / 0 answered · 0 correct

Scoring yourself, honestly

☺ Like you're 10: Write down your score per module, not just the one big number at the top.

The counter gives you a raw percentage against the real SREF bar of 65% — 26 out of 40. Treat that number as a thermometer, not a verdict: this paper's wording is ours, not the DevOps Institute's, and it isn't calibrated to the real exam's actual difficulty. What matters more than the headline figure is the shape underneath it.

Where you landWhat it usually meansThe next move
Under 55%The recall foundation isn't solid yet — a reasoning paper amplifies a shaky base rather than causing the problem itself.Go back to Set 1 and the concept reference before returning to arithmetic-heavy questions.
55–65%The vocabulary is there; the two-step combination is where marks are leaking. Check whether your misses cluster on burn-rate or composite-SLO questions specifically.Re-read SLIs, SLOs & error budgets and multi-window burn-rate alerting, then re-sit just those chips.
65–80%At or above the real pass mark. What's left is usually one under-revised module or a habit of reaching for the naive average on composite questions.Spend an afternoon on whichever module scored lowest, then work the SLO & error-budget drill for hands-on repetition.
Over 80%Comfortable with the reasoning, not just the vocabulary.Move on to Set 5 under full exam conditions, then book the real exam.
◆ Key idea

Score your modules separately, not just your total. A 70% built from "strong everywhere except SLOs & Error Budgets" is a worse position than the same 70% built from "solid everywhere, weak on one small module," because SLOs & Error Budgets is the single largest share of this paper and, by most candidates' account, of the real exam too.

What to do with the wrong answers

☺ Like you're 10: Keep a list of what you got wrong and why your answer was wrong — that list becomes your whole revision plan.

Whatever you scored, the paper has only done its job if it produces a list. For every miss, write — in your own words — why the option you picked was wrong, not why the correct one was right. That's a different sentence, and a harder one, and it's the sentence that stops you repeating the mistake once the real exam changes the numbers on you.

mkdir -p ~/sref-revision
cat > ~/sref-revision/set4-wrong-answers.md <<'EOF'
# SREF Mock Set 4 — wrong answers

| Q | Module | What I picked | Why MY answer was wrong | Page to re-read |
|---|--------|----------------|--------------------------|------------------|
|   |        |                |                          |                  |
EOF
open ~/sref-revision/set4-wrong-answers.md

After a few papers, sort the rows by module. If most of your misses sit in one module, that's your next afternoon. If they're spread evenly but share a shape — every burn-rate question, say, or every question where you reached for a naive average — you've found something cheaper to fix than a syllabus gap: a habit.

The fastest way to make an error-budget number permanently intuitive is to compute one for a real, if toy, service instead of only ever seeing it in a question stem. Pick any endpoint you can measure locally, decide an SLO for it, and run the arithmetic against a real day of traffic:

SLO=99.9
WINDOW_DAYS=30
python3 -c "
slo = $SLO / 100
window_min = $WINDOW_DAYS * 24 * 60
budget_min = (1 - slo) * window_min
print(f'Window: {window_min:.1f} min, budget: {budget_min:.2f} min')
"

Then compare that budget figure against your own service's actual downtime for the month, exactly like question 7 on this paper — the calculation stops being an exam trick the moment it's attached to a number you watched happen.

Where each module is taught

☺ Like you're 10: Every question here traces back to one of eight pages. Go back to the page, not to a search engine.

Nothing on this paper is examined that isn't taught somewhere in this course. The eight module pages below are the answer key at exam depth.

Around them sits the rest of the SREF kit: the study plan for pacing, the practice-question bank and answer triage for technique, know it cold and the closed-book strategy for the final week, and the shared course tools — the flashcards, the exam simulator, and the glossary for anything a question assumed you already knew. For hands-on repetition rather than more multiple choice, work the SLO & error-budget drill, the capacity-forecast drill, and the chaos-experiment-design drill.

🎬 At the Reliability Watch
🐦

Pip the Hummingbird: Question 7 got me. 99.9% SLO, 51 minutes of incidents this month — I picked "close to budget, keep shipping."

🦥

Sol the Sloth: ...Let's work it through properly. Thirty days is forty-three thousand two hundred minutes. Zero point one percent of that is forty-three point two.

🐦

Pip: Fifty-one is bigger than forty-three point two, though. That's not close, that's already over.

🦥

Sol: ...Right. Not "approaching the limit." Already past it, with days still left in the window. The policy doesn't wait for the number to feel dramatic.

🐢

Timmy the Turtle: So what actually happens the moment that arithmetic comes out over budget?

🦥

Sol: Freeze the risky releases. Reliability work gets priority until the window rolls forward and the budget refills. No vote, no debate — the policy already answered that question before this month started.

🐦

Pip: That's the part I kept skipping — I was reading "51 minutes" as a vibe instead of comparing it to an actual number.

🐢

Timmy: Write the four numbers down every time. That's the whole fix.

🐢 Timmy's checkpoint

Answer these without scrolling back. 1. A 99.9% SLO over a 30-day window allows how many minutes of downtime, and what's the arithmetic? 2. That same service has logged 51 minutes of downtime this month with 9 days left — has the error-budget policy triggered, and what should happen next? 3. What is the DevOps Institute's official percentage weighting per SREF module, and where should you go to confirm the real exam's current format? 4. Why is a naive average the wrong way to blend two endpoints' success rates into one composite figure? 5. What's the difference between MTTD and MTTR, and why does collapsing them into one "total incident time" figure lose useful information? 6. What are the published facts about the real SREF exam — question count, duration, and pass mark?

Check your answers
  1. 43.2 minutes. A 30-day window is 30 × 24 × 60 = 43,200 minutes; the error budget is (100% − SLO) × window = 0.1% × 43,200 = 43.2 minutes.
  2. Yes — 51 minutes already exceeds the 43.2-minute budget, so the policy has triggered even with 9 days still left in the window. The correct response is to freeze risky feature releases and shift priority to reliability work until the window rolls forward and the budget refills.
  3. None is published — the DevOps Institute lists eight syllabus modules with no stated percentages, unlike blueprints such as the CNCF's CNPA. Confirm the current exam format at the DevOps Institute's official SRE Foundation page.
  4. Because a naive average treats both endpoints as if they carried equal traffic. The correct blended figure weights each endpoint's failure count by its actual request volume — total successes divided by total requests — so the higher-traffic endpoint correctly dominates the result.
  5. MTTD is mean time to detect (from user-facing impact starting to the team being alerted); MTTR is mean time to restore (from that alert to confirmed resolution). Collapsing them into one total-duration figure hides whether a slow response was a detection problem or a remediation problem — and those two problems have completely different fixes.
  6. 40 questions, 60 minutes, multiple-choice and closed-book, with a 65% pass mark and no formal prerequisite — all stated on this site's certifications overview, sourced from the DevOps Institute. Re-verify at the vendor's own page before booking, since exam terms are revised over time.
⏱ The five SREF papers

Set 1 · Set 2 · Set 3 · Set 4 (you are here) · Set 5. This is the reasoning-heavy paper of the five — if you clear it comfortably without notes, the remaining work is mostly logistics rather than knowledge. See the study plan for where each paper belongs in the weeks before your sitting, and the exam guide for the real thing.