A team uses a package manager that supports lock files. What is the primary benefit of committing the lock file to version control?

It eliminates the need for license compliance checks.

It reduces the size of the repository.

It automatically updates dependencies to the latest versions.

It ensures that all developers and CI environments use the exact same dependency versions.

A project uses a dependency that has been deprecated and is no longer maintained. What is the best practice for managing this dependency?

Replace it with an actively maintained alternative that has a compatible license.

Continue using it because it works.

Fork the dependency and maintain it internally.

Pin the dependency to an older version to avoid changes.

A company distributes a software product that includes a component licensed under the MIT License. What must the company do to comply with the MIT License?

Provide the source code of the MIT component to all users.

Release the company's entire product under the MIT License.

Register the component with a software composition analysis tool.

Include the original copyright notice and permission notice in all copies or substantial portions of the software.

A company distributes a proprietary application that includes a library licensed under the Apache License 2.0. What is the primary compliance obligation for the company?

Provide the source code of the proprietary application to all users.

Include a copy of the Apache License and provide attribution notices for the library.

Release the entire proprietary application under the Apache License.

Pay a royalty fee to the library's original authors for each copy distributed.

LPI DevOps Tools Engineer

Domain 1Objective 5

701.5 Software Composition, Licensing and Open Source (weight: 2) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 3)

Part of the 701 Software Engineering domain, which makes up ~34% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~12–20 in this domain), expect 2–4 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

Questions 11–15

11application · medium
A team uses a package manager that supports lock files. What is the primary benefit of committing the lock file to version control?
Select an answer first
12application · medium
A project uses a dependency that has been deprecated and is no longer maintained. What is the best practice for managing this dependency?
Select an answer first
13application · medium
A company distributes a software product that includes a component licensed under the MIT License. What must the company do to comply with the MIT License?
Select an answer first
14expert · hard
A company's security team wants to integrate software composition analysis into their CI/CD pipeline. They need to scan both container images and application dependencies. Which tool is best suited for this?
Select an answer first
15foundation · easy
A company distributes a proprietary application that includes a library licensed under the Apache License 2.0. What is the primary compliance obligation for the company?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DEVOPS-TOOLS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “DEVOPS-TOOLS-ENGINEER” is a trademark of its owner, used for identification only.