DevOps Culture, Fundamentals, and Maturity Models ECDE Practice Questions (Page 9)

Questions 41–44

1. 41expert · hard

   An organization is using a DevOps maturity model to plan its transformation. The assessment shows that the organization has excellent automation and tooling, but the culture is still very traditional, with developers and operations having separate goals and little communication. The organization has limited budget and must choose one initiative to improve its overall maturity. Which initiative would have the most impact?

   • ALaunch a cross-functional team that includes developers, operations, and security, with shared performance metrics.
   • BPurchase a new monitoring tool that provides real-time dashboards for both teams.
   • CProvide individual bonuses for each team based on their own performance metrics.
   • DIncrease the frequency of automated deployments to production.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   An organization is using a DevOps maturity model to assess its practices. They find that they have automated builds and tests, but deployments are still manual and there is no monitoring of production performance. According to common maturity models, which area is most likely to be rated at a lower maturity level?

   • AContinuous delivery and operations, because the release process and production feedback are not automated.
   • BSecurity integration, because there is no mention of security tools.
   • CCulture and collaboration, because the teams are not working together.
   • DContinuous integration, because the build and test automation is not sufficient.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A team has a CI pipeline that builds and runs unit tests on every commit. They want to improve their DevOps maturity by adding automated integration tests and deploying to a staging environment. Which practice are they adding?

   • AContinuous deployment, because they are deploying to a staging environment automatically.
   • BContinuous delivery, by ensuring that the code is always in a deployable state through automated testing and staging deployment.
   • CInfrastructure as code, because they are automating the staging environment.
   • DContinuous integration, because they are adding more tests to the build.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A company is adopting DevOps and wants to ensure that security is not a bottleneck. The security team is used to being the sole authority on security decisions and performs manual reviews at the end of the development cycle. The company wants to maintain security quality while increasing release speed. Which cultural change is most effective?

   • AEmbed security engineers within development teams to provide guidance and review code as it is written.
   • BRequire all security decisions to be approved by the security team before any release.
   • CCreate a security checklist that developers must complete before release, but do not review it.
   • DAllow developers to make all security decisions without consulting security experts.
   Reveal Solution Discussion Select an answer first