DevOps Culture, Fundamentals, and Maturity Models ECDE Practice Questions (Page 8)

Questions 36–40

1. 36foundation · medium

   How does DevSecOps extend the DevOps culture?

   • AIt makes security the sole responsibility of the security team.
   • BIt adds a separate security team that reviews code after deployment.
   • CIt replaces all existing DevOps practices with security-focused processes.
   • DIt integrates security practices and tools into every stage of the development and operations lifecycle.
   Reveal Solution Discussion Select an answer first
2. 37foundation · medium

   Which benefit is most directly associated with transforming from traditional IT to a DevOps culture?

   • AReduced frequency of software releases to minimize risk.
   • BElimination of the need for any monitoring or logging in production.
   • CIncreased number of change advisory board approvals required for each deployment.
   • DImproved ability to deliver features to users more quickly and reliably.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company is assessing its DevOps maturity. The assessment shows that the organization has a strong CI/CD pipeline and automated testing, but deployment to production is still a manual process that requires approval from a change advisory board (CAB). The CAB meets only once a week, which limits deployment frequency. The company wants to increase deployment frequency without sacrificing stability. Which recommendation would best improve the maturity level?

   • AKeep the CAB process but schedule emergency CAB meetings twice a week.
   • BIncrease the number of test environments to reduce the risk of production failures.
   • CAllow developers to deploy to production directly without any review or automated gates.
   • DReplace the CAB approval with automated deployment gates that run a comprehensive suite of tests and require a peer review for production deployments.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A DevSecOps team is designing a new microservices-based application. The security team has traditionally performed a single vulnerability scan just before production release. The team wants to shift security left without slowing down the CI/CD pipeline. Which approach best embodies DevSecOps culture?

   • ACreate a separate security pipeline that runs independently of the CI/CD pipeline.
   • BRequire a manual security review by the security team before every merge to the main branch.
   • CIntegrate automated security scanning into the CI pipeline and provide developers with immediate feedback on vulnerabilities.
   • DPerform a comprehensive penetration test only after the application is deployed to production.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A DevOps assessment using a maturity model shows that the organization has a high level of automation and monitoring, but deployment frequency is still low because developers and operations have conflicting priorities. The assessment recommends improvements. Which improvement would most directly address the identified weakness?

   • AInvest in more advanced deployment automation tools.
   • BIncrease the number of environments to test deployments.
   • CHire more operations staff to handle the deployment workload.
   • DEstablish shared goals and metrics for development and operations teams.
   Reveal Solution Discussion Select an answer first