A team is setting up a new CI pipeline for a microservices project. They want to ensure that the pipeline is maintainable and that changes to the build process do not require duplicating configuration across multiple services. Which configuration approach should they use?

Create a separate, fully independent pipeline configuration for each microservice.

Define a shared pipeline template and reference it from each service's pipeline configuration.

Use a single pipeline that builds all microservices in one job.

Store the pipeline configuration in a shared network drive accessible to all services.

A team wants to enforce that no code is merged without passing both unit tests and a SAST scan. They use GitHub. They have a CI workflow that runs both checks. However, developers sometimes merge PRs before the CI finishes because the checks are not required. Which configuration change is necessary to enforce the policy?

Add a comment to the PR reminding developers to wait for CI to finish.

Set the CI workflow to run on a schedule instead of on pull requests.

Use a GitHub Action that automatically merges the PR after CI passes.

In branch protection settings, mark the CI workflow's status checks as required and enable 'Require branches to be up to date before merging'.

A team is selecting a CI tool for a project that uses a mix of Python and Node.js services. They need to run tests in parallel across multiple operating systems and want to avoid maintaining their own build servers. Which tool is most appropriate?

A self-hosted GitLab Runner with a single executor.

GitHub Actions with a matrix strategy that runs jobs on ubuntu-latest, windows-latest, and macos-latest.

Jenkins running on a single on-premises Linux server.

Travis CI with a configuration that only runs on Linux.

What is the purpose of incorporating compliance checks into a CI pipeline?

To automatically fix code vulnerabilities

To replace the need for unit tests

To ensure the code meets regulatory and organizational standards

A company has a mix of legacy on-premises applications and new cloud-native services. They want a single CI tool that can run builds for both environments, but they have limited DevOps staff and want to minimize maintenance overhead. Which approach is most balanced?

Use two separate CI tools: one for on-premises and one for cloud-native.

Migrate all legacy applications to the cloud immediately to use a single cloud CI tool.

Use a self-hosted CI tool like Jenkins with agents on-premises for legacy apps and cloud agents for cloud-native builds.

Use a cloud-hosted CI service that supports self-hosted runners, placing runners on-premises for legacy builds and using cloud runners for cloud-native builds.

EC-CouncilDevSecOps Essentials

Domain 3Objective 4

Continuous Integration Tools DSE Practice Questions (Page 4)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 16–20

16application · medium
A team is setting up a new CI pipeline for a microservices project. They want to ensure that the pipeline is maintainable and that changes to the build process do not require duplicating configuration across multiple services. Which configuration approach should they use?
Select an answer first
17expert · hard
A team wants to enforce that no code is merged without passing both unit tests and a SAST scan. They use GitHub. They have a CI workflow that runs both checks. However, developers sometimes merge PRs before the CI finishes because the checks are not required. Which configuration change is necessary to enforce the policy?
Select an answer first
18application · medium
A team is selecting a CI tool for a project that uses a mix of Python and Node.js services. They need to run tests in parallel across multiple operating systems and want to avoid maintaining their own build servers. Which tool is most appropriate?
Select an answer first
19foundation · easy
What is the purpose of incorporating compliance checks into a CI pipeline?
Select an answer first
20expert · hard
A company has a mix of legacy on-premises applications and new cloud-native services. They want a single CI tool that can run builds for both environments, but they have limited DevOps staff and want to minimize maintenance overhead. Which approach is most balanced?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.