A team uses Jenkins and wants to pass a secret API key to a build job without exposing it in the Jenkinsfile or the build log. Which approach is the most secure?

Pass the API key as a build parameter and print it in the log for debugging.

Hardcode the API key as an environment variable in the Jenkinsfile.

Store the API key in a plain text file in the workspace.

Store the secret in Jenkins credentials and reference it in the pipeline using the 'withCredentials' step.

A team uses Jenkins and Bitbucket. They notice that builds are not triggering on every push, only on some. The webhook is configured, but the Jenkins server is behind a firewall and receives no inbound connections. What is the most likely cause and the best fix?

The webhook cannot reach Jenkins because the firewall blocks inbound traffic; use Jenkins to poll Bitbucket periodically instead.

The Bitbucket repository is private; make it public so the webhook can reach Jenkins.

The Jenkins job is not configured with the correct branch specifier; change it to match the repository.

The webhook is sending the wrong payload; reconfigure the webhook to use the correct content type.

A team is setting up a CI pipeline for a web application. They want to run unit tests and integration tests in parallel to reduce the overall pipeline time. They also want to ensure that the integration tests only run after the unit tests pass. Which pipeline configuration should they use?

Run unit tests and integration tests sequentially in a single stage.

Use a single stage that runs both test suites in parallel using background processes.

Run integration tests first, then unit tests, in parallel.

Define two parallel stages: one for unit tests and one for integration tests, with the integration test stage set to depend on the unit test stage.

A company with a strict security policy requires that all CI pipeline configuration be stored as code in a Git repository, and that any change to the pipeline configuration must go through the same code review process as application code. Which CI tool feature should they prioritize when selecting a tool?

Support for multiple operating systems for build agents

A graphical user interface for building pipelines

Built-in artifact repository management

Support for pipeline-as-code with configuration files in the repository

EC-CouncilDevSecOps Essentials

Domain 3Objective 4

Continuous Integration Tools DSE Practice Questions (Page 8)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 36–40

36application · medium
A team uses Jenkins and wants to pass a secret API key to a build job without exposing it in the Jenkinsfile or the build log. Which approach is the most secure?
Select an answer first
37foundation · easy
Which of the following is a common continuous integration (CI) tool used to automate the build and test phases of software delivery?
Select an answer first
38expert · hard
A team uses Jenkins and Bitbucket. They notice that builds are not triggering on every push, only on some. The webhook is configured, but the Jenkins server is behind a firewall and receives no inbound connections. What is the most likely cause and the best fix?
Select an answer first
39application · medium
A team is setting up a CI pipeline for a web application. They want to run unit tests and integration tests in parallel to reduce the overall pipeline time. They also want to ensure that the integration tests only run after the unit tests pass. Which pipeline configuration should they use?
Select an answer first
40application · medium
A company with a strict security policy requires that all CI pipeline configuration be stored as code in a Git repository, and that any change to the pipeline configuration must go through the same code review process as application code. Which CI tool feature should they prioritize when selecting a tool?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Continuous Integration Tools DSE Practice Questions (Page 8)

Questions 36–40

A team uses Jenkins and wants to pass a secret API key to a build job without exposing it in the Jenkinsfile or the build log. Which approach is the most secure?

Which of the following is a common continuous integration (CI) tool used to automate the build and test phases of software delivery?

A team uses Jenkins and Bitbucket. They notice that builds are not triggering on every push, only on some. The webhook is configured, but the Jenkins server is behind a firewall and receives no inbound connections. What is the most likely cause and the best fix?

A team is setting up a CI pipeline for a web application. They want to run unit tests and integration tests in parallel to reduce the overall pipeline time. They also want to ensure that the integration tests only run after the unit tests pass. Which pipeline configuration should they use?

Keep studying — DevSecOps Toolchain