Task Statement 1.1: Implement CI/CD Pipelines. DOP-C02 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In AWS CodePipeline, what is the role of a source action that uses a version control trigger?

   • AIt defines the target environment for deployment.
   • BIt stores the build output in an artifact repository.
   • CIt detects changes in the repository and starts the pipeline execution.
   • DIt compiles the source code into an executable artifact.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company's CI/CD pipeline uses AWS CodeBuild to run integration tests that require access to a test database. The database credentials are stored in AWS Secrets Manager. The team wants to ensure that the credentials are not exposed in the build logs and that they are rotated regularly. Which approach should be used?

   • AUse the secrets-manager parameter in the buildspec to retrieve the credentials as environment variables, and enable automatic rotation in Secrets Manager.
   • BHave the build script call the AWS CLI to retrieve the secret and write it to a file, then delete the file after use.
   • CStore the credentials in the buildspec file and use sed to mask them in the logs.
   • DUse AWS Systems Manager Parameter Store with the SecureString parameter type and reference it in the buildspec.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is transitioning from a Waterfall model to a DevOps model for its software development. The team wants to reduce the time between code commit and production deployment. Which practice is most aligned with the DevOps model?

   • AConducting a full regression test suite manually before every release.
   • BCreating detailed documentation before any code is written.
   • CImplementing a CI/CD pipeline that automatically builds, tests, and deploys code to production after passing automated tests.
   • DRequiring a change advisory board to approve all production deployments.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A development team uses AWS CodeBuild to build a Docker image and push it to Amazon ECR. The buildspec must authenticate to ECR before the docker push command. The team wants to avoid hardcoding credentials in the buildspec. Which approach should the team use?

   • AUse the aws ecr get-login-password command in the buildspec and pipe it to docker login, relying on the CodeBuild service role's IAM permissions.
   • BUse AWS Systems Manager Parameter Store to store the ECR password and retrieve it in the buildspec.
   • CStore the ECR credentials in AWS Secrets Manager and use the secrets-manager parameter in the buildspec to retrieve them.
   • DSet the ECR credentials as environment variables in the CodeBuild project and reference them in the buildspec.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company uses AWS CodeBuild to compile a Java application. The build process downloads dependencies from a central repository. The team wants to store these dependencies in AWS CodeArtifact to reduce external network calls and improve build speed. Which configuration should be used?

   • AUse Amazon ECR to store the dependencies as container images.
   • BStore the dependencies in an S3 bucket and use the AWS CLI to download them in the buildspec.
   • CCreate a CodeArtifact repository and configure the buildspec to use it as the Maven repository by setting the MAVEN_REPO_URL environment variable.
   • DUse AWS Systems Manager Parameter Store to store the dependency JAR files and retrieve them in the build.
   Reveal Solution Discussion Select an answer first