Describe the Benefits of Continuous Testing and Static Code Analysis in a CI Pipeline 350-901 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the role of a CI pipeline in automating quality checks?

   • AIt stores code in a central repository but does not run any checks
   • BIt requires developers to manually run all quality checks before pushing code
   • CIt runs tests and static analysis automatically on every code change
   • DIt only runs quality checks when a release is scheduled
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A team is integrating static code analysis into their CI pipeline. They want to enforce a policy that no new critical vulnerabilities are introduced, but they also want to allow existing issues to be tracked and gradually fixed. What is the best way to configure the static analysis tool?

   • AFail the build on any critical issue, including existing ones
   • BDo not fail the build on any static analysis issues
   • CUse a manual review process to check for new critical issues
   • DSet a quality gate that fails the build only if new critical issues are introduced, and maintain a baseline of existing issues
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A team is experiencing frequent integration conflicts and bugs that surface only after merging feature branches. They want to reduce these issues. What is the most effective approach?

   • AIncrease the frequency of code reviews
   • BIntegrate code changes more frequently and run automated tests on each integration
   • CRun manual regression tests before each merge
   • DUse a feature branch that is merged only at the end of the sprint
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A team wants to improve the maintainability of their codebase by ensuring that all new code adheres to a set of architectural rules. They want this check to be part of the CI pipeline. Which approach is most appropriate?

   • ARun a code coverage tool to measure test coverage
   • BPerform a manual architecture review at the end of each sprint
   • CUse a dependency scanning tool to check for known vulnerabilities
   • DConfigure a static analysis tool with custom rules to enforce architectural constraints
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A team is using a static analysis tool that reports a large number of issues in their codebase. They want to prioritize which issues to fix first. Which factor should they consider most important?

   • AThe number of developers who have worked on the affected file
   • BThe age of the code where the issue is found
   • CThe number of lines of code affected by the issue
   • DThe severity of the issue and its potential impact on security or functionality
   Reveal Solution Discussion Select an answer first