13. Describe the Principles and Benefits of a Code Review Process 200-901 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A network automation team is evaluating ways to improve their code review process. They notice that many defects are simple formatting and style issues that consume reviewer time. They want to reduce this burden. Which technique is most effective?

   • AHave the author manually check style before submitting the pull request
   • BConfigure a linter to automatically check style and formatting in the CI pipeline
   • CUse pair programming to catch style issues during development
   • DAsk reviewers to ignore style issues and only focus on logic
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which activity is part of the follow-up step in a code review process?

   • AThe author addresses the reviewer's comments and requests a re-review
   • BThe team deletes all automated tests
   • CThe project manager schedules a meeting to discuss the project budget
   • DThe reviewer writes the initial code changes
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A small network team maintains a Python library that automates device configuration backups. The original author is leaving the company, and the remaining team members have never read the code. Management wants to reduce the risk of future maintenance issues. Which approach best addresses this concern?

   • AConduct a series of code review sessions where the author walks through the library with the remaining team members
   • BRun a static analysis tool once and archive the report for future reference
   • CRequire all future changes to be made only by the original author until the team is fully trained
   • DRewrite the library from scratch using a new framework that the team already knows
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A network automation team is implementing a code review process for their Python scripts. They have a CI pipeline that runs unit tests, but they want to add a lightweight check that catches common security issues like hardcoded credentials and unsafe use of subprocess. They want to minimize false positives to avoid alert fatigue. Which tool or technique is most appropriate?

   • AA custom script that searches for the string 'password' in all files
   • BA general-purpose linter such as flake8 with default settings
   • CA security-focused static analysis tool such as Bandit configured with a focused rule set
   • DA manual security review by a senior engineer for every pull request
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A team uses pull requests for code review. After a reviewer approves a pull request, what is the next step in the process?

   • AThe pull request is closed and the changes are discarded.
   • BThe code is deployed directly to production without further testing.
   • CThe reviewer merges the pull request without checking CI results.
   • DThe author merges the pull request after addressing any final comments and ensuring CI passes.
   Reveal Solution Discussion Select an answer first