The DevOps Approach CT-STE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security tester is joining a DevOps team that practices shift-left security. The team wants to identify vulnerabilities as early as possible. Which activity should the security tester prioritize?

   • AConducting a penetration test after the release to production
   • BWaiting for the operations team to report security issues
   • CReviewing security logs after an incident occurs
   • DPerforming threat modeling during the design phase of new features
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A software team is moving from a monthly release cycle to continuous delivery. The testers currently perform manual regression testing at the end of each cycle. They are concerned about how to keep quality high with more frequent releases. What is the most effective change for the testers to make?

   • AIncrease the number of manual testers to handle the higher release frequency
   • BPerform a full manual regression test only on the final release candidate each month
   • CDevelop and maintain an automated regression test suite that runs on every build in the CI pipeline
   • DAsk developers to test their own changes and remove the testing role
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A DevOps team is facing resistance from the security team, which is used to performing audits at the end of the development cycle. The security team is concerned that DevOps will lead to security being ignored. What is the best way to address this concern?

   • AReassure the security team that security will be reviewed after each release
   • BInvolve the security team in the DevOps transformation and integrate security checks into the pipeline
   • CExclude the security team from the DevOps process to avoid conflicts
   • DTell the security team that DevOps does not change the security process
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A tester is transitioning from a traditional waterfall project to a DevOps team. The tester is used to writing detailed test plans and executing them manually. What is the most important new skill the tester needs to develop?

   • AProgramming skills to write and maintain automated test scripts
   • BProject management skills to coordinate releases
   • CDatabase administration skills to manage test data
   • DAdvanced manual testing techniques for exploratory testing
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which tool is commonly used in a DevOps toolchain for version control?

   • AJenkins
   • BAnsible
   • CGit
   • DSelenium
   Reveal Solution Discussion Select an answer first