4.11 Describe Components of a CI/CD Pipeline 350-201 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company deploys a critical security service. They want to minimize the risk of a bad deployment affecting all users, but they also need to roll back quickly if a problem is detected. They have two production environments that can be switched instantly. Which deployment strategy best balances risk and rollback speed?

   • ARolling deployment with a small batch size.
   • BCanary deployment with a 1% initial traffic share.
   • CRecreate deployment with a quick script.
   • DBlue-green deployment with automated health checks before the traffic switch.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How are build artifacts typically versioned in an artifact repository?

   • ABy the name of the developer who created the build.
   • BBy the size of the artifact in megabytes.
   • CUsing a unique identifier such as a timestamp, build number, or semantic version.
   • DBy the date the source code was first committed.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of automated testing in a CI/CD pipeline?

   • ATo catch defects early and provide fast feedback to developers.
   • BTo generate documentation for the application.
   • CTo replace the need for manual testing entirely.
   • DTo ensure the application is deployed to production automatically.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security team's CI/CD pipeline has a build stage that takes 10 minutes, a test stage that takes 20 minutes, and a deploy stage that takes 5 minutes. They want to reduce the overall pipeline time without sacrificing test coverage. They also need to ensure that if a critical vulnerability is found in the build stage, the pipeline stops immediately. Which approach best meets these requirements?

   • ARemove the test stage and rely on the security scan to catch all issues.
   • BKeep the stages sequential, but add a security scan in the build stage that fails the pipeline if critical issues are found.
   • CRun the test stage in parallel with the build stage, and add a security scan as a separate stage that runs after the build stage.
   • DSplit the test stage into parallel jobs for unit and integration tests, and add a security scan in the build stage that fails the pipeline on critical findings.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which security practice is commonly integrated into a CI/CD pipeline to identify vulnerabilities in application dependencies?

   • ANetwork segmentation
   • BDependency scanning
   • CData loss prevention
   • DPenetration testing
   Reveal Solution Discussion Select an answer first