5.6 Explain the Function of Continuous Integration and Continuous Delivery / Deployment (CI/CD) CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which statement accurately distinguishes continuous delivery from continuous deployment?

   • AContinuous delivery requires manual approval before production release, while continuous deployment automates the release to production.
   • BContinuous delivery automatically deploys to production, while continuous deployment requires a manual click to deploy.
   • CContinuous delivery is used only for mobile apps, while continuous deployment is used only for web applications.
   • DContinuous delivery automates testing only, while continuous deployment automates both testing and building.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security team is integrating compliance checks into the CI/CD pipeline. They need to ensure that the checks are not bypassed by developers, but they also want to avoid slowing down the pipeline. Which approach is most effective?

   • ARun compliance checks as a mandatory stage that cannot be skipped, and use a separate service account with limited permissions
   • BRun compliance checks only on the main branch, not on feature branches
   • CAllow developers to skip compliance checks if they are in a hurry
   • DUse the same service account for all pipeline stages to simplify management
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security team wants to add vulnerability scanning to the CI/CD pipeline, but developers complain that the scans are slow and delay deployments. The team needs to balance security with developer productivity. Which approach best addresses this trade-off?

   • ARun the full scan on every commit and accept the delays
   • BRemove vulnerability scanning from the pipeline to speed up deployments
   • CRun a fast, targeted scan on every commit and a full scan before production deployment
   • DRun the full scan only on production deployments to minimize delays
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the purpose of incorporating compliance checks into a CI/CD pipeline?

   • ATo ensure that the application is deployed to the correct cloud region for performance optimization.
   • BTo replace the need for any external audits or security assessments.
   • CTo automatically verify that the application and its deployment meet required regulatory and organizational standards.
   • DTo automatically generate documentation for the application's architecture and design.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A development team is struggling with long feedback cycles because code reviews and tests are only done at the end of a sprint. They want to adopt a more agile approach. Which change best supports faster feedback?

   • AReduce the frequency of code changes to minimize testing effort
   • BDelay code reviews until the end of the sprint to avoid interruptions
   • CIntegrate code changes frequently and run automated tests on each integration
   • DKeep the current process but increase the number of testers
   Reveal Solution Discussion Select an answer first