Continuous Integration Tools DSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is it important to keep the CI build fast?

   • ATo avoid using cloud resources
   • BTo minimize the number of tests run
   • CTo make the build more complex
   • DTo reduce the time developers wait for feedback on their changes
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a strict requirement that all CI data, including logs and build artifacts, must remain within their on-premises network. They are evaluating CI tools. Which tool selection is most aligned with this constraint?

   • AUse a cloud-hosted CI service like GitHub Actions with public repositories.
   • BUse a managed CI service that stores logs in an encrypted cloud database.
   • CSelf-host Jenkins on their own servers and configure it to store artifacts on a local filesystem or internal artifact repository.
   • DUse a SaaS CI tool that offers a private cloud region in the same country.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A team uses GitHub Actions. They want to run a security scan on every push to any branch, but they also want to avoid running the scan on pull requests from forks because the fork may have modified the workflow. Which trigger configuration is most appropriate?

   • AUse a 'push' trigger that runs on all branches, and do not include a 'pull_request' trigger.
   • BUse a 'workflow_dispatch' trigger and manually run the scan.
   • CUse both 'push' and 'pull_request' triggers with the same workflow.
   • DUse a 'pull_request' trigger with 'types: [opened, synchronize]' and no push trigger.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A DevSecOps team wants to ensure that secrets (like API keys) are not accidentally committed to the repository. They want to add a check to the CI pipeline that scans the code for potential secrets and fails the build if any are found. Which type of tool should they integrate into the pipeline?

   • AA dependency scanner that checks for known vulnerabilities in libraries
   • BA container image scanner that checks for vulnerabilities in Docker images
   • CA SAST tool that checks for SQL injection vulnerabilities
   • DA secret scanning tool such as GitLeaks or TruffleHog
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A team's CI pipeline is slow because every commit triggers a full build and test suite. They want to reduce feedback time while maintaining reliability. Which practice is most effective?

   • AIncrease the frequency of commits to trigger more builds.
   • BUse a build cache for dependencies and run only the tests affected by the change when possible.
   • CRun the full build and test suite only on a nightly schedule.
   • DRemove all tests from the pipeline to make it faster.
   Reveal Solution Discussion Select an answer first