Describe Continuous Integration & Deployment Strategies for Security Data Management and Engineering Solutions. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary goal of automated data quality checks in a security data pipeline?

   • ATo encrypt the data during transmission
   • BTo ensure the pipeline runs faster
   • CTo detect anomalies and errors in the data before it is used for analysis
   • DTo reduce the storage cost of the data
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A team is developing a new data pipeline that ingests raw network flow logs and transforms them into a structured format for Splunk. They want to implement automated testing to catch data quality issues before the pipeline is deployed. Which testing strategy would best validate the transformation logic?

   • AIntegration tests that verify the pipeline can connect to the Splunk indexer and send data.
   • BLoad tests that simulate a high volume of logs to ensure the pipeline can handle peak traffic.
   • CUnit tests that verify the transformation function produces the correct output for a set of known input samples.
   • DA manual review of the transformation code by a senior developer.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How can a CI/CD pipeline enforce compliance with data protection regulations for a security data solution?

   • ABy storing all data in a single region
   • BBy automatically scanning for sensitive data in test datasets and blocking the pipeline if found
   • CBy disabling logging to reduce data exposure
   • DBy manually reviewing all data before it is processed
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security operations team is building a CI/CD pipeline to deploy a new log-ingestion service. The service will handle sensitive authentication logs. The team must ensure that no secrets (e.g., API keys, passwords) are committed to the code repository, and that the pipeline fails before deployment if any are found. Which step should be added to the pipeline?

   • AA manual approval gate where a senior engineer reviews the code for secrets before allowing deployment.
   • BA policy that requires developers to use environment variables for all configuration, with no other checks.
   • CA post-deployment script that rotates all credentials after the service is live.
   • DA secret-scanning tool that runs as a pre-commit hook and as a stage in the pipeline, failing the build if a secret is detected.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In a CI/CD pipeline for security data transformation, what is the purpose of the 'transform' stage?

   • ATo delete all data that is not needed
   • BTo convert raw security data into a structured format suitable for analysis
   • CTo encrypt the security data at rest
   • DTo store the raw security data in its original form
   Reveal Solution Discussion Select an answer first