Building a CI/CD Pipeline ECDE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A DevSecOps team is designing a CI/CD pipeline for a microservices application. The pipeline must build each service, run unit tests, and then deploy to a shared staging environment. The team wants to run DAST against the staging environment after all services are deployed. What is the best pipeline design?

   • ADeploy all services in parallel and run DAST concurrently with the deployments.
   • BRun DAST immediately after each service is deployed individually.
   • CRun DAST only in production after all services are deployed.
   • DUse a fan-out/fan-in pattern: build and test each service in parallel, then wait for all to complete before deploying to staging, and then run DAST.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following is a common artifact repository used in CI/CD pipelines to store built packages and binaries?

   • ANexus
   • BKubernetes
   • CJenkins
   • DGitLab
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is an example of pipeline automation?

   • ARequiring a developer to manually start the build after every commit.
   • BHaving a team member run tests on their local machine and report results.
   • CAutomatically triggering a build and test run whenever a developer pushes code to the repository.
   • DUsing a spreadsheet to track which stages have been completed.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the primary purpose of a CI/CD pipeline in the software development lifecycle?

   • ATo provide a graphical interface for developers to write and edit application code.
   • BTo manually coordinate the steps of building and deploying software to ensure human oversight.
   • CTo automate the process of building, testing, and deploying code changes, enabling faster and more reliable software releases.
   • DTo replace the need for version control by automatically managing source code changes.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company uses a Jenkins pipeline to deploy to AWS. The pipeline needs to access AWS credentials to push artifacts to S3 and to deploy to EC2. The security team mandates that credentials must not be stored in plain text in the Jenkinsfile or in the Jenkins configuration. Which approach should the engineer implement?

   • AStore the credentials in a text file in the workspace and read it during the build.
   • BHardcode the AWS access key and secret key in the Jenkinsfile as environment variables.
   • CUse a shared library that contains the credentials in a Groovy script.
   • DUse Jenkins credentials store with a secret text entry and reference it in the pipeline using the credentials() helper.
   Reveal Solution Discussion Select an answer first