Which security feature should be evaluated when selecting a CI tool for a DevSecOps environment?

Ability to display build status badges

Number of supported programming languages

Support for role-based access control (RBAC)

A team's CI pipeline has a stage that runs integration tests against a database. The database is shared and tests often fail because of data conflicts. Which practice would most improve reliability?

Have developers manually clean the database before running tests.

Run the integration tests only once a day to reduce the number of conflicts.

Provision a fresh database instance for each pipeline run and tear it down after the tests complete.

Use a larger shared database to reduce the chance of conflicts.

A team uses CircleCI and wants to automatically block a deployment if the container image has a critical vulnerability. They use a container registry that supports scanning. Which CI configuration is most effective?

Schedule a weekly scan of all images in the registry and generate a report.

Add a step in the CircleCI pipeline that runs a container scan and fails the job if a critical vulnerability is found, before the deploy step.

Run the container scan after the deployment and send an alert to the security team.

Use a manual approval step in CircleCI that requires a security engineer to review the scan results.

EC-CouncilDevSecOps Essentials

Domain 3Objective 4

Continuous Integration Tools DSE Practice Questions (Page 3)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 11–15

11foundation · easy
Which security feature should be evaluated when selecting a CI tool for a DevSecOps environment?
Select an answer first
12application · medium
A team's CI pipeline has a stage that runs integration tests against a database. The database is shared and tests often fail because of data conflicts. Which practice would most improve reliability?
Select an answer first
13application · medium
A team uses CircleCI and wants to automatically block a deployment if the container image has a critical vulnerability. They use a container registry that supports scanning. Which CI configuration is most effective?
Select an answer first
14foundation · easy
Which CI trigger is used to start a build only when a pull request is opened or updated?
Select an answer first
15foundation · easy
Which of the following is a core component of a continuous integration pipeline?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Continuous Integration Tools DSE Practice Questions (Page 3)

Questions 11–15

Which security feature should be evaluated when selecting a CI tool for a DevSecOps environment?

A team's CI pipeline has a stage that runs integration tests against a database. The database is shared and tests often fail because of data conflicts. Which practice would most improve reliability?

A team uses CircleCI and wants to automatically block a deployment if the container image has a critical vulnerability. They use a container registry that supports scanning. Which CI configuration is most effective?

Which CI trigger is used to start a build only when a pull request is opened or updated?

Which of the following is a core component of a continuous integration pipeline?

Keep studying — DevSecOps Toolchain