The DevOps Approach CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the key difference between continuous delivery and continuous deployment?

   • AContinuous delivery is for small projects, while continuous deployment is for large projects.
   • BContinuous delivery includes automated testing, while continuous deployment does not.
   • CContinuous delivery is a subset of continuous integration, while continuous deployment is a subset of continuous delivery.
   • DContinuous delivery requires manual approval for production release, while continuous deployment automates the release to production.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security tester is asked to integrate security testing into a DevOps pipeline that uses continuous delivery. The team wants to avoid slowing down the pipeline. The tester has a choice of security testing tools. Which tool should the tester choose to minimize pipeline impact while still providing valuable security feedback?

   • AA comprehensive DAST tool that requires a full deployment to staging
   • BA manual penetration test performed by an external consultant
   • CA fast SAST tool that runs in parallel with the build
   • DA RASP tool that only protects the application at runtime
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A team is deciding between continuous delivery and continuous deployment. They want to ensure that every change that passes automated tests is automatically released to production without human intervention. Which practice should they adopt?

   • ARelease management
   • BContinuous delivery
   • CContinuous integration
   • DContinuous deployment
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What does the term 'shift-left security' mean in the context of DevSecOps?

   • AUsing only security tools that are open source
   • BIntegrating security activities early in the software development lifecycle
   • CDelegating all security responsibilities to a dedicated security team
   • DMoving security testing to the right side of the pipeline, after deployment
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary role of automated testing in a DevOps environment?

   • ATo replace the need for any manual testing activities
   • BTo ensure that all tests pass before any code is written
   • CTo provide fast feedback on code changes by running tests automatically as part of the pipeline
   • DTo run tests only after a release is deployed to production
   Reveal Solution Discussion Select an answer first