Explain Environmental Factors Related to CI Management AT0-001 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A CI pipeline uses a task runner to orchestrate a build that requires a license key for a third-party compiler. The license key is stored in a secrets manager. The task runner needs to pass the key to the compiler without exposing it in the process list or logs. What is the best approach?

   • ASet the license key as an environment variable for the entire pipeline.
   • BEmbed the license key in the compiler's configuration file in the repository.
   • CPass the license key as a command-line argument to the compiler.
   • DHave the task runner write the license key to a temporary file with restricted permissions and configure the compiler to read the key from that file.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A team's CI pipeline runs a task runner that executes integration tests against a staging database. The database credentials are currently stored in a plaintext file in the repository. The security team requires that secrets be stored centrally and rotated automatically. Which approach should the CI administrator implement?

   • AEncrypt the credential file with a static key and commit the encrypted file to the repository.
   • BStore the credentials in a secrets manager and have the task runner fetch them via an authenticated API call during the pipeline run.
   • CMove the credentials to an environment variable defined in the CI server's global configuration.
   • DHave the task runner prompt a human operator to enter the credentials at the start of each pipeline run.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A CI pipeline for a web application runs a task runner that deploys the app to a test server. The deployment script requires an SSH private key. The team wants to avoid storing the key in the repository and also wants to ensure that the key is not exposed in logs. What should the CI administrator do?

   • AUse a passwordless SSH key and commit it to the repository for convenience.
   • BBase64-encode the private key and store it in a configuration file in the repository.
   • CDisable SSH and use FTP for deployment to avoid key management.
   • DStore the private key in a secrets manager and configure the task runner to retrieve it and write it to a temporary file with restricted permissions.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A CI pipeline builds a C++ application and produces multiple platform-specific binaries. The team needs to ensure that each binary is stored with metadata indicating the build number, commit hash, and platform. What should the pipeline do?

   • ACompress all binaries into a single archive and store it as a build artifact.
   • BEmail the binaries to the release team with the metadata in the subject line.
   • CStore the binaries in a shared folder and name them with the build number and platform.
   • DUpload each binary to an artifact repository with a unique version and attach metadata as properties or tags.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A CI pipeline uses a task runner to compile a Java application and produce a JAR file. The team needs to ensure that the exact JAR from a specific build can be retrieved later for deployment, even after the pipeline workspace is cleaned. What should the pipeline do?

   • AUpload the JAR to an artifact repository with a unique version identifier and record that identifier in the build metadata.
   • BEmail the JAR to the deployment team after each successful build.
   • CCopy the JAR to a shared network drive and rely on the timestamp to identify the correct version.
   • DKeep the JAR in the pipeline workspace and configure the task runner to skip cleanup.
   Reveal Solution Discussion Select an answer first