A startup is building a proprietary web application and wants to include a library licensed under the Apache License 2.0. The startup does not want to release its own source code. Which action is required to remain compliant?

Release the entire application under the Apache License 2.0.

Obtain a commercial license from the library's author before using it.

Include a copy of the Apache License 2.0 and a notice attributing the library in the application's distribution.

Replace the library with a GPL-licensed alternative to avoid attribution requirements.

A Python project uses pip with a requirements.txt file. The team wants to ensure that all dependencies have licenses compatible with their proprietary distribution. What is the most effective way to manage this?

Manually read the license of each package from PyPI.

Use a virtual environment for each release.

Use pip-licenses to generate a license report and review it before each release.

Pin all dependencies to exact versions in requirements.txt.

A team wants to generate a Software Bill of Materials (SBOM) for their application. What is the primary purpose of an SBOM?

To replace the need for a license compliance policy.

To provide a machine-readable inventory of all components and dependencies in the software.

To enforce that all dependencies are from the same license family.

To automatically fix vulnerabilities in dependencies.

An organization wants to automatically enforce a policy that no GPL-licensed dependencies are used in its Node.js projects. Which approach is most effective?

Use a tool like license-checker in the CI pipeline to fail the build if a GPL license is detected.

Manually review package.json files before each release.

Block all open source dependencies except those explicitly approved.

Use npm audit to check for license issues.

An organization wants to create an open source review board to evaluate new dependencies. What is a key responsibility of this board?

Ensuring all dependencies are from the same license family.

Writing code for all open source projects the company uses.

Replacing the legal department in all licensing matters.

Assessing the license, security, and maintenance status of each proposed component.

LPI DevOps Tools Engineer

Domain 1Objective 5

701.5 Software Composition, Licensing and Open Source (weight: 2) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 1)

Part of the 701 Software Engineering domain, which makes up ~34% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~12–20 in this domain), expect 2–4 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

Questions 1–5

1application · medium
A startup is building a proprietary web application and wants to include a library licensed under the Apache License 2.0. The startup does not want to release its own source code. Which action is required to remain compliant?
Select an answer first
2application · medium
A Python project uses pip with a requirements.txt file. The team wants to ensure that all dependencies have licenses compatible with their proprietary distribution. What is the most effective way to manage this?
Select an answer first
3application · medium
A team wants to generate a Software Bill of Materials (SBOM) for their application. What is the primary purpose of an SBOM?
Select an answer first
4application · medium
An organization wants to automatically enforce a policy that no GPL-licensed dependencies are used in its Node.js projects. Which approach is most effective?
Select an answer first
5application · medium
An organization wants to create an open source review board to evaluate new dependencies. What is a key responsibility of this board?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEVOPS-TOOLS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “DEVOPS-TOOLS-ENGINEER” is a trademark of its owner, used for identification only.