A company is adopting DevOps and wants to ensure that the risk of 'security debt' is minimized. What is the most effective way to address this risk?

Use a separate, manual security process for all changes.

Integrate security practices into the CI/CD pipeline and conduct regular security reviews.

Hire a security consultant to fix all issues at the end of the project.

Perform a security audit once a year.

A company is adopting DevOps and wants to ensure that the risk of 'configuration drift' is minimized. They have multiple environments (development, test, production) that are configured manually. What is the most effective way to address this risk?

Use infrastructure as code to define and manage all environments consistently.

Perform manual configuration audits before each release.

Use a single environment for all stages to avoid differences.

Document all configuration changes in a wiki.

A company is adopting DevOps and wants to achieve faster feedback loops. Which practice would most directly help them achieve this?

Deploying to production only after all features are complete.

Using a manual testing process to ensure thorough feedback.

Conducting weekly status meetings to review progress.

Implementing continuous integration and automated testing to provide rapid feedback on code changes.

How can an organization avoid the pitfall of treating DevOps as a separate team or department?

By hiring a dedicated DevOps team to handle all deployments

By ensuring DevOps is a cultural shift embraced by all relevant teams

By focusing only on tooling and automation

By limiting DevOps practices to the operations team

Certified Tester Quality in DevOps

Domain 1Objective 6

Benefits, Risks, and Pitfalls of DevOps CT-QDO Practice Questions (Page 5)

Part of the Domain 1: Fundamentals of DevOps domain, which makes up ~39% of our current practice bank. ISTQB does not publish an official question count, but from its 60-minute exam (~25–40 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

3concepts

Questions 21–24

21expert · medium
A company is adopting DevOps and wants to ensure that the risk of 'security debt' is minimized. What is the most effective way to address this risk?
Select an answer first
22expert · medium
A company is adopting DevOps and wants to ensure that the risk of 'configuration drift' is minimized. They have multiple environments (development, test, production) that are configured manually. What is the most effective way to address this risk?
Select an answer first
23expert · medium
A company is adopting DevOps and wants to achieve faster feedback loops. Which practice would most directly help them achieve this?
Select an answer first
24foundation · easy
How can an organization avoid the pitfall of treating DevOps as a separate team or department?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CT-QDO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-QDO” is a trademark of its owner, used for identification only.