An organization's development and security teams have a strained relationship. Developers see security as a roadblock, and security teams are not involved until the end. They want to adopt DevSecOps to improve collaboration and embed security throughout the pipeline. Which action best supports this cultural change?

Create a separate security team that only reviews code at the end of each sprint.

Require developers to pass a security certification before they can commit code.

Involve security engineers in planning and provide them with visibility into the pipeline, while automating security checks.

Have security teams write all security tests and run them independently after each release.

A team's CI pipeline runs unit tests on every commit, but integration tests are only run nightly on the main branch. Recently, a merge broke an integration point that was not caught until the next day. The team wants to catch integration issues earlier without significantly increasing pipeline time. Which approach should they take?

Remove integration tests from the pipeline and rely on manual testing.

Run the full integration test suite on every commit, even if it takes hours.

Run a subset of critical integration tests on every commit and the full suite nightly.

Run integration tests only after merging to the main branch.

What is the purpose of integrating dependency scanning into a CI/CD pipeline?

To enforce coding style guidelines

To test the application's user interface for usability issues

To identify known vulnerabilities in third-party libraries and packages

To monitor runtime performance of the application

Which activity is a typical part of a continuous integration (CI) process?

Running automated unit tests on every commit to the shared repository

Manually copying compiled binaries to production servers

Conducting a quarterly security audit

Writing infrastructure code for cloud resources

EC-CouncilDevSecOps Essentials

Domain 2Objective 1

DevOps Principles and Pipelines DSE Practice Questions (Page 10)

Part of the DevOps and DevSecOps Foundations domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

Questions 46–49

46application · medium
An organization's development and security teams have a strained relationship. Developers see security as a roadblock, and security teams are not involved until the end. They want to adopt DevSecOps to improve collaboration and embed security throughout the pipeline. Which action best supports this cultural change?
Select an answer first
47expert · hard
A team's CI pipeline runs unit tests on every commit, but integration tests are only run nightly on the main branch. Recently, a merge broke an integration point that was not caught until the next day. The team wants to catch integration issues earlier without significantly increasing pipeline time. Which approach should they take?
Select an answer first
48foundation · easy
What is the purpose of integrating dependency scanning into a CI/CD pipeline?
Select an answer first
49foundation · easy
Which activity is a typical part of a continuous integration (CI) process?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

DevOps Principles and Pipelines DSE Practice Questions (Page 10)

Questions 46–49

What is the purpose of integrating dependency scanning into a CI/CD pipeline?

Which activity is a typical part of a continuous integration (CI) process?

Keep studying — DevOps and DevSecOps Foundations