What is a primary benefit of using automation tools to orchestrate pipeline stages?

Removal of the need for version control

Guaranteed elimination of all software bugs

Automatic generation of user documentation

Faster and more consistent software delivery

A startup wants to deploy every code change to production automatically as soon as it passes all automated tests and security scans. They have a mature test suite and strong monitoring. Which practice best matches this goal?

Continuous delivery, where the pipeline deploys every change to staging and a release manager manually approves production deployment.

Continuous deployment, where the pipeline automatically deploys every change that passes all automated checks to production.

Continuous integration, where every change is merged to the main branch and automatically built and tested.

Release management, where a dedicated team decides which changes are ready for production and deploys them manually.

What is the main goal of continuous delivery (CD)?

To ensure that every change is automatically deployed to production without human intervention

To manually deploy changes to production after each sprint

To automate only the build process and skip testing

To keep the software in a state where it can be released to production at any time

A team has a CI pipeline that runs automated tests on every commit. However, the tests take 45 minutes, and developers often wait until the end of the day to push their changes, resulting in a queue of builds. The team wants to get faster feedback. Which change would be most effective?

Increase the number of developers on the team so that more people can review test results.

Run the full test suite only on nightly builds and run a small smoke test on each commit.

Require developers to merge their changes into the main branch only once a week.

Split the test suite into parallel jobs that run on multiple agents, and have developers push smaller, more frequent commits.

A team is designing a CI/CD pipeline for a web application. They want to catch security vulnerabilities as early as possible. In which pipeline stage should they integrate SAST (Static Application Security Testing)?

In the deploy stage, just before the application is released to production.

In the source stage, before the code is committed to the repository.

In the monitor stage, after the application is running in production.

In the build stage, after the code is compiled and before the test stage.

EC-CouncilDevSecOps Essentials

Domain 2Objective 1

DevOps Principles and Pipelines DSE Practice Questions (Page 3)

Part of the DevOps and DevSecOps Foundations domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

Questions 11–15

11foundation · easy
What is a primary benefit of using automation tools to orchestrate pipeline stages?
Select an answer first
12application · medium
A startup wants to deploy every code change to production automatically as soon as it passes all automated tests and security scans. They have a mature test suite and strong monitoring. Which practice best matches this goal?
Select an answer first
13foundation · easy
What is the main goal of continuous delivery (CD)?
Select an answer first
14expert · hard
A team has a CI pipeline that runs automated tests on every commit. However, the tests take 45 minutes, and developers often wait until the end of the day to push their changes, resulting in a queue of builds. The team wants to get faster feedback. Which change would be most effective?
Select an answer first
15application · medium
A team is designing a CI/CD pipeline for a web application. They want to catch security vulnerabilities as early as possible. In which pipeline stage should they integrate SAST (Static Application Security Testing)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.