A team is using Jenkins and wants to define their pipeline as code. They want the pipeline to be triggered automatically when changes are pushed to a specific branch in their Git repository. Which approach should they use?

Store the pipeline steps in a shared library and reference it from a job that is manually triggered.

Use a Jenkins plugin to read pipeline configuration from a database.

Create a Jenkinsfile in the repository and configure a multibranch pipeline job that watches the repository.

Create a Jenkins job with a shell script that manually checks out the repository and runs the build.

A company uses GitLab CI for its pipelines. They want to ensure that the pipeline configuration is versioned and that changes to the pipeline are reviewed just like application code. Which file should they use and how should they manage it?

Use a .gitlab-ci.yml file stored in the repository root and manage changes through merge requests.

Store the pipeline configuration in the GitLab admin settings and export it to a file for backup.

Create a .gitlab-ci.yml file on a shared drive and copy it to each runner.

Use a Jenkinsfile stored in a separate repository and reference it from GitLab CI.

A regulated company must ensure that only artifacts that have passed security scanning are deployed to production. They also need to maintain an audit trail of which artifact versions were deployed and when. Which combination of practices should they implement?

Store artifacts in a shared drive and rely on the deployment team's manual records.

Use a single artifact version that is overwritten with each build and record deployments in a spreadsheet.

Run security scanning only on the production environment after deployment.

Integrate security scanning into the pipeline, store artifacts in a repository with immutable version tags, and record deployment metadata in a deployment log.

A company wants to deploy a new version of their application to a small subset of users first to gather feedback and monitor for issues before rolling out to the entire user base. They are willing to accept a more complex rollout process. Which deployment strategy should they choose?

Rolling deployment, where instances are updated in batches.

Recreate deployment, where the old version is stopped and the new version is started.

Blue-green deployment, where traffic is switched all at once.

Canary deployment, where the new version is released to a small percentage of users and gradually increased.

How does a CI/CD pipeline typically integrate with a version control system to start a build?

By requiring a developer to log into the CI tool and click 'Build' after each commit

By periodically downloading the entire repository and running the build manually

By listening for webhook events such as push or pull request

By reading the commit messages and deciding whether to build based on keywords

EC-CouncilCertified DevSecOps Engineer

Domain 1Objective 2

CI/CD Pipeline ECDE Practice Questions (Page 2)

Part of the DevOps and DevSecOps Foundations domain, which makes up ~22% of our current practice bank.

48questions here

10free pages

8concepts

Questions 6–10

6application · medium
A team is using Jenkins and wants to define their pipeline as code. They want the pipeline to be triggered automatically when changes are pushed to a specific branch in their Git repository. Which approach should they use?
Select an answer first
7application · medium
A company uses GitLab CI for its pipelines. They want to ensure that the pipeline configuration is versioned and that changes to the pipeline are reviewed just like application code. Which file should they use and how should they manage it?
Select an answer first
8expert · hard
A regulated company must ensure that only artifacts that have passed security scanning are deployed to production. They also need to maintain an audit trail of which artifact versions were deployed and when. Which combination of practices should they implement?
Select an answer first
9application · medium
A company wants to deploy a new version of their application to a small subset of users first to gather feedback and monitor for issues before rolling out to the entire user base. They are willing to accept a more complex rollout process. Which deployment strategy should they choose?
Select an answer first
10foundation · easy
How does a CI/CD pipeline typically integrate with a version control system to start a build?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECDE” is a trademark of its owner, used for identification only.