Explain Environmental Factors Related to CI Management AT0-001 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a CI pipeline, what is the primary purpose of artifact management?

   • ATo schedule when builds should run in the pipeline.
   • BTo manage the source code repository and its branches.
   • CTo store and version build outputs so they can be retrieved and deployed later.
   • DTo store secrets and credentials used during the build.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Why is it important to avoid printing secret values to the CI pipeline's console output?

   • ABecause logs may be accessible to a wider audience and could expose the secret.
   • BBecause console output is not stored and the secret would be lost.
   • CBecause printing secrets slows down the pipeline execution.
   • DBecause console output is encrypted and the secret would be unreadable.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A CI pipeline builds a mobile app and publishes it to a public app store. The app must be signed with a certificate that is stored in a secrets manager. The team wants to ensure that the signing key is not accessible to developers, only to the CI pipeline. What should the pipeline do?

   • AHave developers sign the app manually before uploading to the store.
   • BUse a certificate that is embedded in the app's source code.
   • CConfigure the secrets manager to grant access only to the CI pipeline's service principal, and have the pipeline retrieve the certificate during the signing step.
   • DStore the certificate in a shared folder accessible to the development team.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A CI pipeline needs to authenticate to a container registry using an API key. What is the recommended way to store that API key so it is not exposed in the pipeline's source code or logs?

   • AEmbed the API key in the image name so it is passed automatically during builds.
   • BHard-code it in the pipeline configuration file so it is versioned with the code.
   • CUse a dedicated secrets management tool or the CI platform's secret store, and reference it via a variable.
   • DStore it in a plain text file in the repository, but restrict access to the repository.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A CI pipeline for a regulated industry must sign its artifacts with a certificate that is stored in a hardware security module (HSM). The pipeline also needs to publish the signed artifacts to an internal repository. The security team requires that the HSM private key never leaves the HSM. What should the pipeline do?

   • AExport the private key from the HSM and store it in a secrets manager for the pipeline to use.
   • BUse a certificate stored in the repository and sign with a password-protected key file.
   • CUse a signing tool that communicates with the HSM via a PKCS#11 interface, and configure the pipeline to use that tool for signing.
   • DCopy the private key to the CI server and use it directly in the signing step.
   Reveal Solution Discussion Select an answer first