5.6 Explain the Function of Continuous Integration and Continuous Delivery / Deployment (CI/CD) CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How can security testing be integrated into a CI/CD pipeline to enhance cloud security?

   • ABy running automated security scans, such as static application security testing (SAST), as part of the build or test stage.
   • BBy performing security testing only after the application is deployed to production, to ensure real-world conditions.
   • CBy relying on manual security reviews by the development team before each release.
   • DBy disabling security tools during the pipeline to avoid slowing down the release process.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company wants to release new features to a subset of users before rolling out to everyone, to reduce the impact of potential issues. Which deployment strategy is most aligned with CI/CD principles?

   • AManual deployment to all users after a long testing period
   • BCanary deployment, where the new version is rolled out to a small percentage of users first
   • CDeploying the new version only to internal testers and never to external users
   • DBig bang deployment, where all users receive the new version at once
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization currently releases software once a quarter. They want to reduce the risk of each release by making changes smaller and more frequent. Which CI/CD practice directly supports this goal?

   • ADeploying all changes at once at the end of the quarter
   • BAvoiding version control to reduce overhead
   • CManual testing only before the quarterly release
   • DContinuous integration with automated tests on every commit
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A team is building a CI/CD pipeline for a microservices application. They want to ensure that a failure in one service's tests does not block the deployment of other services that are unaffected. Which pipeline design best achieves this?

   • ASkip testing for services that have not changed
   • BUse a single pipeline that builds and tests all services together
   • CUse independent pipelines for each microservice, with shared deployment stages only when needed
   • DDeploy all services together only after all tests pass
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which benefit of CI/CD directly helps reduce the risk associated with releasing new software versions?

   • AIt allows large batches of changes to be released at once, minimizing the number of releases.
   • BIt eliminates the need for any testing, since automated pipelines are error-free.
   • CIt ensures that every change is deployed to production immediately, regardless of test results.
   • DIt enables small, incremental changes to be released frequently, making it easier to identify and fix issues if they occur.
   Reveal Solution Discussion Select an answer first