CDM Continuous Integration & Continuous Delivery 4

Question 1

Which tool category is used in CI pipelines to detect known security vulnerabilities in third-party dependencies?

Accepted Answer

Software Composition Analysis (SCA)

Answer

Software Composition Analysis (SCA) tools scan dependency manifests and lock files to identify known CVEs in open-source libraries used by the application.

Question 2

What problem does a 'deployment pipeline' solve compared to a traditional release process?

Accepted Answer

It provides a fast, automated, repeatable process that gives confidence every change is releasable

Answer

A deployment pipeline automates every step from commit to release, making the process repeatable, auditable, and fast so teams can release with confidence at any time.

Question 3

A team wants to test a new feature with only 10% of users before full rollout. Which technique should they use?

Accepted Answer

A/B Testing with Feature Flags

Answer

Feature flags combined with A/B testing allow the new feature to be toggled on for a controlled percentage of users without a separate deployment.

Question 4

What is 'mean time to restore' (MTTR) measuring in the context of CD maturity?

Accepted Answer

The average time to recover service after a failed deployment or production incident

Answer

MTTR measures how quickly a team can restore normal service after a failure, and a low MTTR indicates mature deployment and rollback capabilities.

Question 5

Which CI/CD concept does 'build once, deploy many' refer to?

Accepted Answer

Creating a single versioned artifact in CI and promoting the exact same artifact through all environments

Answer

'Build once, deploy many' ensures the artifact promoted to production is identical to what was tested, eliminating environment-specific build differences.

(CDM) Certified DevOps Master Practice Test

(CDM) Certified DevOps Master Practice Test

CDM Continuous Integration & Continuous Delivery 4