Describe Continuous Integration & Deployment Strategies for Security Data Management and Engineering Solutions. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In the context of security data management, what is the primary purpose of continuous integration (CI) in a CI/CD pipeline?

   • ATo manually review and approve all code changes before they are merged
   • BTo frequently merge code changes into a shared repository and run automated builds and tests
   • CTo automatically deploy code changes to production after every commit
   • DTo store all security data in a central repository for analysis
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which automated test is most appropriate for verifying that a security data pipeline correctly handles a known set of input logs and produces the expected output?

   • ARegression test
   • BIntegration test
   • CGolden dataset test
   • DUnit test
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security data engineering team maintains a pipeline that ingests firewall logs, normalizes them, and enriches them with threat-intelligence feeds before loading into Splunk. The team wants to make changes to the enrichment logic. They need to ensure that any change is validated against a sample of real production data before it is promoted, and that the exact version of the enrichment code used in production is always known. Which two practices should the team implement in their CI/CD pipeline?

   • ADeploy the change to a development environment with synthetic data, and record the timestamp of the deployment.
   • BPerform a manual review of the code and then deploy to production, documenting the change in a wiki page.
   • CRun the pipeline in a staging environment with a subset of production logs, and tag the build with the Git commit hash.
   • DRun the pipeline directly in production with a feature flag, and store the configuration in a shared network drive.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is adopting a DevSecOps approach for its security data engineering team. They currently deploy changes to their Splunk apps and data pipelines manually. They want to move to a more automated and secure workflow. Which change best reflects the core principles of CI/CD for security data?

   • AAutomate the build and testing of the pipeline code, and require a security review as a gate before deployment.
   • BSchedule a weekly meeting to review all pending changes before they are deployed.
   • CCreate a detailed runbook for manual deployment and share it with the team.
   • DProvide all developers with direct access to the production Splunk environment to make changes faster.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which deployment strategy involves running two identical environments (one current, one new) and switching traffic to the new one after validation?

   • ACanary deployment
   • BBlue-green deployment
   • CRolling deployment
   • DRecreate deployment
   Reveal Solution Discussion Select an answer first