Pipeline Implementation and Quality Gates CT-QDO Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Why is monitoring pipeline execution important in a DevOps environment?

   • ATo replace the need for automated testing by observing production behavior
   • BTo identify bottlenecks and failures in the pipeline so that improvements can be made
   • CTo ensure that all code changes are reviewed by a human before merging
   • DTo automatically roll back any deployment that causes a performance issue
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How can a quality gate be implemented in a CI/CD pipeline to control release readiness?

   • ABy using a version control system to lock the main branch
   • BBy adding a script that checks test results and fails the pipeline if coverage is below a threshold
   • CBy configuring the pipeline to deploy to production only on Fridays
   • DBy requiring all developers to manually test the application before merging
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A team is designing a pipeline for a mobile application. They want to run unit tests, UI tests, and performance tests, but they have limited CI resources. They want to minimize the time to feedback for developers while still ensuring that the most critical tests run on every commit. Which approach best balances these constraints?

   • ARun only UI tests on every commit and run unit and performance tests nightly.
   • BRun all tests on every commit to ensure maximum coverage.
   • CRun unit tests on every commit, and run UI and performance tests only on merge requests or nightly builds.
   • DRun performance tests on every commit and run unit and UI tests nightly.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A team is implementing a quality gate that requires the application to have no open high-severity security vulnerabilities. However, the security scan tool reports a high-severity vulnerability in a third-party library that is not used in the application's runtime path. The team wants to release the application. Which action is most appropriate?

   • AInvestigate the vulnerability and, if it is confirmed not to be exploitable in the application's context, document the risk and request an exception from the security team.
   • BIgnore the vulnerability because it is in a third-party library and not the team's code.
   • CRemove the third-party library from the codebase immediately to eliminate the vulnerability.
   • DBlock the release until the vulnerability is fixed, regardless of the context.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A team wants to use pipeline metrics to improve their deployment frequency. They currently deploy to production once a month. They want to increase the frequency to weekly. Which metric would be most useful to track to measure progress toward this goal?

   • AThe average time to fix a failed build.
   • BThe number of failed builds per week.
   • CThe number of developers on the team.
   • DThe number of successful production deployments per week.
   Reveal Solution Discussion Select an answer first