A team uses a CI/CD pipeline that builds a container image and pushes it to a registry. The pipeline needs to authenticate to the registry. The team wants to avoid storing the registry password in the pipeline configuration. They also want to ensure that the credentials are rotated regularly. What is the best approach?

Use a long-lived access token and hard-code it in the pipeline script.

Share the registry password with all team members and use it in the pipeline.

Use a short-lived token generated by the registry's identity provider and inject it into the pipeline as a secret.

Store the registry password in a plain text file in the repository.

For a small team that requires strict, centralized control over who can commit to the main codebase, which version control approach is most appropriate?

Distributed version control system (DVCS)

Centralized version control system (CVCS)

A small team of five developers works on a legacy codebase that is currently stored on a central server using a centralized version control system (CVCS). The team is expanding and wants to allow developers to work offline and experiment with large changes without affecting the central repository. They also want to have a complete history of all changes locally. Which version control system should they migrate to?

A backup tool that snapshots the repository daily.

A centralized version control system with a larger server and more storage.

A distributed version control system (DVCS) like Git.

A file-sharing service like Dropbox for the repository folder.

EC-CouncilDevSecOps Essentials

Domain 3Objective 2

Source-Code Management and Build Tools DSE Practice Questions (Page 8)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

10concepts

Questions 36–40

36expert · hard
A team uses a CI/CD pipeline that builds a container image and pushes it to a registry. The pipeline needs to authenticate to the registry. The team wants to avoid storing the registry password in the pipeline configuration. They also want to ensure that the credentials are rotated regularly. What is the best approach?
Select an answer first
37foundation · easy
After making changes to a file and staging it, which command records those changes permanently in the local repository?
Select an answer first
38foundation · easy
For a small team that requires strict, centralized control over who can commit to the main codebase, which version control approach is most appropriate?
Select an answer first
39application · medium
A small team of five developers works on a legacy codebase that is currently stored on a central server using a centralized version control system (CVCS). The team is expanding and wants to allow developers to work offline and experiment with large changes without affecting the central repository. They also want to have a complete history of all changes locally. Which version control system should they migrate to?
Select an answer first
40foundation · easy
Which Git command stages a modified file so it will be included in the next commit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Source-Code Management and Build Tools DSE Practice Questions (Page 8)

Questions 36–40

After making changes to a file and staging it, which command records those changes permanently in the local repository?

For a small team that requires strict, centralized control over who can commit to the main codebase, which version control approach is most appropriate?

Which Git command stages a modified file so it will be included in the next commit?

Keep studying — DevSecOps Toolchain