701.5 Software Composition, Licensing and Open Source (weight: 2) DEVOPS-TOOLS-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a key requirement of the GNU General Public License (GPL) when distributing a modified version of a GPL-licensed program?

   • AThe modified program must include a copyright notice but can be relicensed under any license.
   • BThe modified program must be distributed under a permissive license to allow wider use.
   • CThe modified source code must be made available under the same GPL license.
   • DThe modified program must be distributed only in binary form to protect the source code.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A developer wants to combine a GPL-licensed library with a proprietary module into a single executable. What is the primary licensing concern?

   • AThe proprietary module must be licensed under the MIT License.
   • BThe developer must pay a fee to the GPL library's authors.
   • CThe GPL's copyleft terms may require the combined work to be distributed under the GPL.
   • DThe GPL library must be removed because it cannot be combined with any other code.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A developer wants to combine a BSD-licensed library with a GPL-licensed library in a single executable. What is the licensing implication?

   • AThe developer must remove the BSD library to avoid license conflict.
   • BThe combined work can be distributed under the BSD license because it is more permissive.
   • CThe two licenses are incompatible, so they cannot be combined.
   • DThe combined work must be distributed under the GPL, and the BSD license notice must be retained.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A team uses a monorepo with multiple packages, each having its own dependencies. They want to ensure that the licenses of all dependencies across all packages are compliant with their company policy. What is the most efficient way to achieve this?

   • AUse a single package.json at the root to manage all dependencies.
   • BRun a license scanning tool at the repository root that aggregates dependencies from all packages.
   • CAsk each package maintainer to manually document licenses in a README.
   • DScan only the production dependencies, ignoring dev dependencies.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to establish a policy for using open source components in its products. Which practice is most important to include in an open source governance policy?

   • ARequiring developers to register each new open source dependency in an approved component list.
   • BRestricting all open source usage to permissive licenses only.
   • CAllowing developers to use any open source component as long as it is popular.
   • DDelegating license decisions to individual development teams.
   Reveal Solution Discussion Select an answer first