Building a CI/CD Pipeline ECDE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A large enterprise is implementing a CI/CD pipeline that must comply with strict access control policies. The security team requires that no developer can modify the pipeline definition or access production credentials. The pipeline is hosted on a shared CI server. Which configuration should be implemented?

   • ARestrict write access to the pipeline configuration to a dedicated DevOps team, and use a secrets manager with role-based access control for production credentials.
   • BUse a single service account with broad permissions for the pipeline.
   • CStore production credentials in the pipeline configuration file and restrict access to the CI server.
   • DAllow all developers to modify the pipeline and use the same credentials for all environments.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company wants to ensure that every code change is integrated into the main branch at least once a day and that the application is always in a deployable state. They do not want to automate the deployment to production yet. Which practice should they adopt?

   • AContinuous integration with automated builds and tests on every commit, and continuous delivery to a staging environment.
   • BContinuous integration with no testing stages.
   • CContinuous deployment to production on every commit.
   • DManual integration of code changes at the end of the week.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In a typical CI/CD pipeline, what is the correct order of the main stages?

   • ATest → Build → Deploy
   • BBuild → Deploy → Test
   • CBuild → Test → Deploy
   • DDeploy → Build → Test
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A DevSecOps team has a pipeline that includes DAST. They notice that the DAST scan often fails due to false positives, causing the pipeline to be blocked. The team wants to reduce false positives without missing real vulnerabilities. Which strategy should they implement?

   • AOnly run DAST on a nightly schedule and ignore the results.
   • BAutomatically fail the pipeline on any DAST finding, regardless of severity.
   • CMaintain a baseline of known false positives in the DAST tool and automatically suppress them, while reviewing new findings manually.
   • DDisable the DAST scan to avoid blocking the pipeline.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is it important to set up monitoring and feedback mechanisms in a CI/CD pipeline?

   • ATo replace the need for automated testing by providing real-time logs.
   • BTo track pipeline performance and identify failures or security issues early.
   • CTo automatically fix any code issues without human intervention.
   • DTo increase the speed of the pipeline by skipping stages that are not monitored.
   Reveal Solution Discussion Select an answer first