How do repository hosting platforms enforce access control for team members?

By requiring all team members to use the same password

By limiting the number of commits per day

By allowing administrators to assign roles and permissions to users or groups

By encrypting all code with a single shared key

Why is versioning build artifacts important for deployment traceability?

It makes the artifact file size smaller

It allows teams to identify exactly which code version produced a deployed artifact

It automatically fixes security vulnerabilities in the artifact

It prevents all deployment failures

What is a common mechanism used by CI systems to detect changes in a source-code repository?

Webhooks that notify the CI server of new commits

Reading the source code directly from the production server

Manually copying files to the CI server

Using a scheduled task that runs every hour

A company has a team of 50 developers working on a large codebase. They currently use a centralized version control system (CVCS) and are experiencing frequent merge conflicts and server bottlenecks. They want to improve collaboration and reduce server load. Which version control approach should they adopt?

Use a cloud-based CVCS with a larger server.

Upgrade the CVCS server hardware and increase network bandwidth.

Migrate to a distributed version control system (DVCS) like Git.

Switch to a file-locking system to prevent concurrent edits.

What is the primary purpose of source-code management (SCM) in a DevSecOps toolchain?

To scan source code for security vulnerabilities in real time

To compile source code into executable binaries automatically

To deploy applications to production environments automatically

To track and manage changes to source code over time, enabling collaboration and version history

EC-CouncilDevSecOps Essentials

Domain 3Objective 2

Source-Code Management and Build Tools DSE Practice Questions (Page 3)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

10concepts

Questions 11–15

11foundation · easy
How do repository hosting platforms enforce access control for team members?
Select an answer first
12foundation · easy
Why is versioning build artifacts important for deployment traceability?
Select an answer first
13foundation · easy
What is a common mechanism used by CI systems to detect changes in a source-code repository?
Select an answer first
14application · medium
A company has a team of 50 developers working on a large codebase. They currently use a centralized version control system (CVCS) and are experiencing frequent merge conflicts and server bottlenecks. They want to improve collaboration and reduce server load. Which version control approach should they adopt?
Select an answer first
15foundation · easy
What is the primary purpose of source-code management (SCM) in a DevSecOps toolchain?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.