A team wants to reduce the time it takes to deliver a new feature to production. Currently, each stage of the pipeline is triggered manually by a different team member. Which change would have the greatest impact on delivery speed?

Add more team members to each stage so that manual steps are completed faster.

Reduce the number of tests in the pipeline to speed up the test stage.

Automate the pipeline so that a code commit automatically triggers the build, test, and deployment stages.

Schedule the manual stages to run at overlapping times.

What is the core idea behind 'security as code' in DevSecOps?

Replacing all manual security testing with automated tools

Making security teams write all application code

Writing security policies and controls as machine-readable code that can be versioned, tested, and automated

Storing security credentials in code repositories for easy access

A team is experiencing frequent merge conflicts and broken builds when developers merge their feature branches. They want to adopt continuous integration. Which change would have the most immediate positive impact?

Have a dedicated integration engineer manually merge all branches and fix conflicts.

Disable automated tests so that builds do not fail as often.

Create a feature branch for each developer and merge them all at the end of the sprint.

Require developers to merge their changes into the main branch at least once a day and run automated builds and tests on every merge.

A company wants to enforce that no code with critical security vulnerabilities is deployed to production. They have a CI/CD pipeline with build, test, and deploy stages. Which approach best enforces this policy?

Have developers manually review the security scan results before each release.

Deploy to production and then run DAST to identify vulnerabilities in the live environment.

Add a security gate in the pipeline that fails the build if SAST or dependency scanning finds a critical vulnerability.

Run security scans after deployment and notify the security team of any critical vulnerabilities.

What is the key difference between continuous delivery and continuous deployment?

Continuous delivery automatically deploys to production without tests

Continuous delivery does not require automated testing

Continuous deployment automatically deploys every change that passes automated testing to production

Continuous deployment only works with containerized applications

EC-CouncilDevSecOps Essentials

Domain 2Objective 1

DevOps Principles and Pipelines DSE Practice Questions (Page 6)

Part of the DevOps and DevSecOps Foundations domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

Questions 26–30

26application · medium
A team wants to reduce the time it takes to deliver a new feature to production. Currently, each stage of the pipeline is triggered manually by a different team member. Which change would have the greatest impact on delivery speed?
Select an answer first
27foundation · easy
What is the core idea behind 'security as code' in DevSecOps?
Select an answer first
28application · medium
A team is experiencing frequent merge conflicts and broken builds when developers merge their feature branches. They want to adopt continuous integration. Which change would have the most immediate positive impact?
Select an answer first
29application · medium
A company wants to enforce that no code with critical security vulnerabilities is deployed to production. They have a CI/CD pipeline with build, test, and deploy stages. Which approach best enforces this policy?
Select an answer first
30foundation · easy
What is the key difference between continuous delivery and continuous deployment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.