A company's CI/CD pipeline builds a container image and pushes it to a private registry. The pipeline then deploys the image to a Kubernetes cluster. They want to ensure that only images built by the pipeline are deployed, and that the image has not been tampered with after being built. Which combination of controls should they implement?

Store the image in a public registry and use a checksum in the deployment manifest.

Use a unique tag for each build and rely on the tag to ensure the image is correct.

Use image signing with a private key held by the CI system, and verify the signature in the Kubernetes admission controller.

Use a shared secret to authenticate to the registry, and rely on the registry's access controls.

What is the purpose of an artifact repository in a CI/CD pipeline?

To run automated tests on the code

To monitor the performance of deployed applications

To store source code and manage branches

To store build artifacts with versioning so they can be retrieved for deployment

A CI/CD pipeline deploys to staging and production. The team wants to ensure that only code that has passed all tests in staging can be deployed to production. What is the best way to enforce this?

Deploy to production directly from the build stage.

Allow developers to manually trigger the production deployment at any time.

Use the same environment for staging and production.

Add a gate in the pipeline that requires the staging deployment to have completed successfully before the production deployment is allowed.

A CI pipeline runs unit tests and integration tests. The team wants to reduce pipeline time while still catching regressions. They have a large test suite that takes 30 minutes. They also want to ensure that security scans run on every build. What is the best approach?

Run only integration tests and skip unit tests.

Run security scans before tests and fail the pipeline if scans fail.

Run tests sequentially and skip security scans to save time.

Run unit tests in parallel with integration tests and run security scans after tests pass.

What is the role of a CI/CD tool like Jenkins, GitLab CI, or GitHub Actions?

To replace the need for version control systems

To orchestrate the pipeline stages by executing defined jobs and managing their dependencies

To write the application source code automatically

To provide a runtime environment for the deployed application

CiscoCertified Network Associate Automation (CCNA Automation)

Domain 4Objective 4

4. Describe Components for a CI/CD Pipeline in Application Deployments 200-901 Practice Questions (Page 4)

Part of the 4.0 Application Deployment and Security domain, which accounts for 15% of the 200-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

15%of the exam

Questions 16–20

16expert · hard
A company's CI/CD pipeline builds a container image and pushes it to a private registry. The pipeline then deploys the image to a Kubernetes cluster. They want to ensure that only images built by the pipeline are deployed, and that the image has not been tampered with after being built. Which combination of controls should they implement?
Select an answer first
17foundation · easy
What is the purpose of an artifact repository in a CI/CD pipeline?
Select an answer first
18application · medium
A CI/CD pipeline deploys to staging and production. The team wants to ensure that only code that has passed all tests in staging can be deployed to production. What is the best way to enforce this?
Select an answer first
19expert · hard
A CI pipeline runs unit tests and integration tests. The team wants to reduce pipeline time while still catching regressions. They have a large test suite that takes 30 minutes. They also want to ensure that security scans run on every build. What is the best approach?
Select an answer first
20foundation · easy
What is the role of a CI/CD tool like Jenkins, GitLab CI, or GitHub Actions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-901” is a trademark of its owner, used for identification only.