A company's CI/CD pipeline needs to transfer sensitive data to a third-party provider. The provider supports HTTPS, SFTP, and FTPS. The security team requires that data be encrypted in transit and that the connection be authenticated using certificates. Which method should the engineer choose?

Use FTPS with a username and password.

Use SFTP with client certificate authentication.

Use plain FTP with a username and password.

Use HTTPS with a pre-shared key.

A developer is setting up a CI/CD pipeline that connects to a container registry. The registry supports both API tokens and OAuth2 access tokens. The team wants to use an authentication method that can be scoped to specific repositories and automatically expires. Which method should the developer choose?

Use the registry's root username and password.

Use an OAuth2 access token with a short expiration time and limited scope.

Use an SSH key pair for authentication to the registry.

Use a long-lived API token with full registry access.

Which authentication method is commonly used to allow a CI/CD pipeline to authenticate to a cloud provider without storing long-term credentials?

Client certificates stored on the build agent

OIDC (OpenID Connect) federation

Basic authentication with username and password

API keys embedded in the source code

A company has separate CI/CD pipelines for development, staging, and production environments. The security team wants to ensure that the production pipeline can only be run by authorized personnel and that it cannot access development resources. What should the engineer configure?

Use the root account for the production pipeline to ensure it has all permissions.

Use a single IAM role for all pipelines and rely on the pipeline script to restrict access.

Grant all developers full access to the production role.

Create separate IAM roles for each environment, with trust policies that restrict which users or groups can assume the production role.

What is the primary purpose of an IAM policy in the context of automated delivery pipelines?

To manage the lifecycle of access keys

To store encrypted credentials for the pipeline

To define the permissions that an IAM entity (user, group, or role) has

To provide a log of all API calls made by the pipeline

CompTIAAutoOps+

Domain 4Objective 3

Compare and Contrast Methods to Secure Connections to Providers AT0-001 Practice Questions (Page 4)

Part of the Continuous Delivery domain, which accounts for 20% of the AT0-001 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

7concepts

20%of the exam

Questions 16–20

16expert · hard
A company's CI/CD pipeline needs to transfer sensitive data to a third-party provider. The provider supports HTTPS, SFTP, and FTPS. The security team requires that data be encrypted in transit and that the connection be authenticated using certificates. Which method should the engineer choose?
Select an answer first
17application · medium
A developer is setting up a CI/CD pipeline that connects to a container registry. The registry supports both API tokens and OAuth2 access tokens. The team wants to use an authentication method that can be scoped to specific repositories and automatically expires. Which method should the developer choose?
Select an answer first
18foundation · medium
Which authentication method is commonly used to allow a CI/CD pipeline to authenticate to a cloud provider without storing long-term credentials?
Select an answer first
19application · medium
A company has separate CI/CD pipelines for development, staging, and production environments. The security team wants to ensure that the production pipeline can only be run by authorized personnel and that it cannot access development resources. What should the engineer configure?
Select an answer first
20foundation · medium
What is the primary purpose of an IAM policy in the context of automated delivery pipelines?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AT0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “AT0-001” is a trademark of its owner, used for identification only.