DevOps Culture, Fundamentals, and Maturity Models ECDE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · medium

   A team frequently deploys to production, but each deployment requires manual configuration changes and undocumented steps. Which maturity model criterion would this team likely score low on?

   • ACollaboration and communication
   • BAutomation and standardization
   • CContinuous integration
   • DSecurity integration
   Reveal Solution Discussion Select an answer first
2. 32expert · hard · select all that apply

   A DevOps maturity assessment reveals that the organization has a high level of automation and monitoring, but deployment frequency is low because of a culture of blame and a lack of shared goals between development and operations. The assessment recommends improvements. Which actions would most directly improve the organization's maturity? Select all that apply.

   • AConduct blameless post-incident reviews to learn from failures.
   • BIncrease the number of environments to test deployments.
   • CInvest in more advanced deployment automation tools.
   • DCreate cross-functional teams that include members from development, operations, and security.
   • EEstablish shared performance metrics for development and operations teams.
   Check answers Discussion Select an answer first
4. 33foundation · medium

   An organization has automated its build and test processes, but deployments to production are still performed manually by operations staff. According to common DevOps maturity models, which area is most likely to be identified as needing improvement?

   • AContinuous integration
   • BVersion control
   • CContinuous delivery/deployment
   • DMonitoring and logging
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   An organization has a mature CI process but wants to assess its DevOps maturity. They notice that they can deploy to production at any time, but they choose to deploy only during a monthly maintenance window. According to common maturity models, which practice are they demonstrating?

   • AContinuous delivery, because the software is always in a deployable state, even though the actual deployment is scheduled.
   • BContinuous deployment, because they can deploy at any time.
   • CRelease management, because they have a monthly maintenance window.
   • DContinuous integration, because they have a mature CI process.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A DevSecOps team is evaluating its maturity. They have automated security scanning in CI, but the security team still manually reviews every release before production. Developers complain that the manual review delays releases. The security team is concerned about false positives from the automated scanner. Which improvement would best increase maturity while addressing both concerns?

   • AKeep the manual review for all releases but ask the security team to work faster.
   • BEstablish a joint developer-security working group to tune the scanner rules, and allow releases to proceed if no critical findings are present, with the manual review reserved for high-risk changes.
   • CRemove the manual review entirely and rely solely on the automated scanner, even if it produces false positives.
   • DHave developers bypass the scanner when they believe a finding is a false positive.
   Reveal Solution Discussion Select an answer first