A security team wants to enforce that all container images used in production are scanned for vulnerabilities. They plan to integrate scanning into the CI/CD pipeline. Which approach ensures that no unscanned image is deployed?

Add a vulnerability scan stage that fails the pipeline if critical vulnerabilities are found

Scan images only when a security incident occurs

Trust the developer to scan images locally before pushing

Run the scan after deployment and alert the security team

A development team is setting up a CI/CD pipeline for a cloud-native application. They want to ensure that infrastructure changes are also tested and deployed consistently. Which practice should they include in their pipeline?

Manual infrastructure configuration in the cloud console

Deploying infrastructure changes directly to production without review

Skipping infrastructure testing to save time

Infrastructure as code with automated validation and deployment

A team is experiencing frequent production incidents caused by configuration differences between environments. They want to reduce these incidents. Which CI/CD practice is most effective?

Building a separate artifact for each environment

Deploying the same artifact through all environments using the same pipeline

Manually configuring each environment after deployment

Deploying only to production to avoid environment differences

A company is considering adopting CI/CD to improve release frequency. However, they are concerned about the cost of running automated tests and the risk of frequent deployments causing instability. They want to adopt CI/CD while managing these concerns. Which strategy is most balanced?

Implement CI/CD with a staged rollout and cost-optimized test environments

Use a single production environment to reduce infrastructure costs

Adopt continuous deployment to production for every change to maximize frequency

Keep manual releases but add more automated tests

Palo Alto NetworksCertified Cybersecurity Apprentice

Domain 5Objective 6

CD) CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Part of the Cloud Security domain, which accounts for 13% of the CYBERSECURITY-APPRENTICE exam.

25questions here

5free pages

4concepts

13%of the exam

Questions 16–20

16application · medium
A security team wants to enforce that all container images used in production are scanned for vulnerabilities. They plan to integrate scanning into the CI/CD pipeline. Which approach ensures that no unscanned image is deployed?
Select an answer first
17foundation · easy
Which stage of a CI/CD pipeline is primarily intended to catch bugs and regressions before the application is deployed?
Select an answer first
18application · medium
A development team is setting up a CI/CD pipeline for a cloud-native application. They want to ensure that infrastructure changes are also tested and deployed consistently. Which practice should they include in their pipeline?
Select an answer first
19application · medium
A team is experiencing frequent production incidents caused by configuration differences between environments. They want to reduce these incidents. Which CI/CD practice is most effective?
Select an answer first
20expert · hard
A company is considering adopting CI/CD to improve release frequency. However, they are concerned about the cost of running automated tests and the risk of frequent deployments causing instability. They want to adopt CI/CD while managing these concerns. Which strategy is most balanced?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-APPRENTICE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-APPRENTICE” is a trademark of its owner, used for identification only.