5.6 Explain the Function of Continuous Integration and Continuous Delivery / Deployment (CI/CD) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants to ensure that every code change that passes automated tests is automatically deployed to a staging environment, but a human must approve the release to production. Which CI/CD practice does this describe?

   • AContinuous delivery
   • BContinuous monitoring
   • CContinuous integration
   • DContinuous deployment
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of continuous integration (CI) in a software development workflow?

   • ATo manually review and approve all code changes before they are merged into the main branch.
   • BTo automatically deploy every code change to production without human intervention.
   • CTo frequently merge code changes into a shared repository and run automated builds and tests to detect issues early.
   • DTo create a detailed documentation of the software architecture for each release.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A team is debating between continuous delivery and continuous deployment for their application. They have a strong automated test suite, but they are concerned about the risk of a bad release reaching users. They also need to comply with a regulation that requires a human to approve production releases. Which approach should they choose?

   • AManual deployment to production after every commit
   • BContinuous delivery with a manual approval gate before production
   • CContinuous deployment to production without manual approval
   • DContinuous integration only, with no automated deployment
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A team is designing a CI/CD pipeline for a web application. They want to catch integration issues early and ensure the application can be deployed reliably. Which sequence of stages best achieves this?

   • ABuild, deploy to production, test, deploy to staging
   • BBuild, test, deploy to staging, deploy to production
   • CTest, build, deploy to production, deploy to staging
   • DDeploy to production, test, build
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A team wants to ensure that their CI/CD pipeline does not accidentally expose sensitive data in logs or artifacts. Which practice should they implement?

   • AUse the same secret for all environments to simplify management
   • BUse secret management tools and scan for secrets in the pipeline
   • CEmbed secrets directly in the pipeline configuration for simplicity
   • DDisable logging in the pipeline to avoid exposure
   Reveal Solution Discussion Select an answer first