Key Elements of the DevSecOps Pipeline DSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which pipeline stage is most likely to involve promoting a validated artifact to a production environment?

   • ATest stage
   • BCommit stage
   • CDeploy stage
   • DBuild stage
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which security control is best suited for the deployment stage of a CI/CD pipeline?

   • APerforming a code review on the source code
   • BConducting a threat model for the application
   • CRunning a SAST scan on the source code
   • DScanning container images for known vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company wants to ensure that only signed and verified artifacts are deployed to production. They use a CI/CD pipeline. What should they add to the pipeline?

   • AA step that stores the artifact in a secure repository with access controls, but no signing.
   • BA checksum calculation step in the build stage and a manual comparison by the operations team before deployment.
   • CA step that scans the artifact for malware before deployment.
   • DA signing step in the build stage that signs the artifact with a private key, and a verification step in the deployment stage that checks the signature.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A team wants to automate security checks in the pipeline, but they have a mix of applications with different compliance requirements. Some applications require PCI-DSS compliance, while others do not. They want to avoid slowing down the non-compliant applications. What is the best way to handle this?

   • AUse pipeline templates that conditionally include compliance-specific security checks based on the application's metadata or branch.
   • BCreate a separate pipeline for each application, but do not share any common stages.
   • CApply the same set of security checks to all applications, regardless of compliance requirements.
   • DRun compliance-specific checks only in a nightly batch for all applications.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A team wants to automate security checks in their pipeline but is concerned about the performance impact on the build time. They want to run the most critical checks quickly and defer less critical checks to a later stage. Which approach should they take?

   • ARun security checks in parallel in a separate pipeline that does not block the main pipeline.
   • BRun fast, high-signal checks like SAST and secret scanning in the commit stage, and defer slower checks like DAST and full dependency scanning to the staging stage.
   • CRun all security checks only in the staging stage, just before deployment.
   • DRun all security checks in the commit stage, regardless of the time they take.
   Reveal Solution Discussion Select an answer first