A team is designing a pipeline for a microservices application. They want to ensure that each service is independently built, tested, and deployed without blocking other services. Which pipeline approach best fits this requirement?

Create a pipeline that only builds the services and requires manual deployment for each.

Create a pipeline that deploys all services to production on every commit without tests.

Create a separate pipeline for each microservice that builds, tests, and deploys it independently.

Create one monolithic pipeline that builds and deploys all microservices together.

How do DevSecOps practices support compliance and governance requirements in a CI/CD pipeline?

By storing all logs in a single location without retention limits.

By removing all manual approvals to speed up releases.

By allowing developers to self-certify that their code is compliant.

By embedding automated policy checks and audit trails directly into the pipeline stages.

Which statement best describes the difference between continuous delivery and continuous deployment?

Continuous delivery requires manual approval to release to production, while continuous deployment automates the release to production.

Continuous delivery automates the release to production, while continuous deployment requires manual approval.

Continuous delivery is the same as continuous integration, while continuous deployment is the same as continuous monitoring.

Continuous delivery only works with containerized applications, while continuous deployment only works with virtual machines.

A company must comply with a regulation that requires all code changes to be reviewed by a security engineer before deployment. However, the security team is small and cannot review every commit. The team wants to maintain a fast release cycle. Which approach best satisfies both requirements?

Skip security review for low-risk changes and only review major releases.

Require security engineer approval for every commit before it is merged.

Have developers self-certify that their changes are secure without any review.

Automate security checks in the pipeline and require security engineer approval only for releases that fail automated checks or are marked as high-risk.

EC-CouncilDevSecOps Essentials

Domain 4Objective 1

Role of DevSecOps in the CI/CD Pipeline DSE Practice Questions (Page 5)

Part of the DevSecOps Pipelines and CI/CD Security domain, which makes up ~18% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

7concepts

Questions 21–25

21foundation · easy
In a CI/CD pipeline, which stage is primarily responsible for automatically combining code changes from multiple developers into a shared repository and running initial build and unit tests?
Select an answer first
22application · medium
A team is designing a pipeline for a microservices application. They want to ensure that each service is independently built, tested, and deployed without blocking other services. Which pipeline approach best fits this requirement?
Select an answer first
23foundation · easy
How do DevSecOps practices support compliance and governance requirements in a CI/CD pipeline?
Select an answer first
24foundation · easy
Which statement best describes the difference between continuous delivery and continuous deployment?
Select an answer first
25expert · hard
A company must comply with a regulation that requires all code changes to be reviewed by a security engineer before deployment. However, the security team is small and cannot review every commit. The team wants to maintain a fast release cycle. Which approach best satisfies both requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.