4.11 Describe Components of a CI/CD Pipeline 350-201 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security team is implementing a CI/CD pipeline for a web application. They want to automatically scan the source code for known vulnerabilities and enforce a policy that blocks the build if critical vulnerabilities are found. Which stage should perform this scan?

   • ABuild stage, after compiling the code and before running tests.
   • BPost-deployment stage, after the application is live.
   • CManual review stage, performed by a security analyst.
   • DDeploy stage, just before releasing to production.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which deployment strategy involves deploying a new version to a small subset of users before rolling it out to the entire user base?

   • ARolling deployment
   • BCanary deployment
   • CRecreate deployment
   • DBlue-green deployment
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which statement best describes the purpose of a CI/CD pipeline?

   • ATo monitor application performance in production and automatically scale resources based on traffic patterns.
   • BTo provide a graphical interface for developers to manually review and approve every code change before it is merged.
   • CTo replace the need for version control by automatically saving snapshots of the codebase at regular intervals.
   • DTo automate the process of integrating code changes, running tests, and deploying applications to various environments.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which type of automated test is most likely to verify the interaction between multiple components of an application?

   • ALint tests
   • BPerformance tests
   • CIntegration tests
   • DUnit tests
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is it important to store secrets (such as API keys) in a dedicated secret management tool rather than in the pipeline configuration file?

   • ATo prevent secrets from being exposed in logs, version control, or to unauthorized users.
   • BTo make secrets available to all developers in the organization.
   • CTo speed up the pipeline by avoiding encryption overhead.
   • DTo comply with licensing requirements for open-source software.
   Reveal Solution Discussion Select an answer first