DEVSECOPS practice question 5 of 10
Which or the following BEST describes the proper order of the main stages of continuous integration and the continuous delivery?
Full set: 39 questionsThis option provides the most complete and logical sequence for a modern software development lifecycle incorporating CI/CD. It begins with the pre-development 'Design' phase. The CI/CD pipeline proper starts with 'Develop', 'Build', and 'Test'. 'Provision' prepares the necessary infrastructure. The sequence 'Deploy' then 'Release' reflects the modern best practice of decoupling deployment (placing code in production) from release (making features available to users), which enhances control and reduces risk.
A. This option contains a typo ("lest" for "test") and presents a less common sequence of release/deploy compared to the modern decoupled approach.
C. This option omits the critical 'Design' phase, making it a less complete description of the overall process from concept to delivery.
D. This option places 'release' before 'deploy'. While valid in a traditional sense (creating a release artifact), it doesn't reflect the modern, risk-reducing pattern of decoupling.
1. Humble, J., & Farley, D. (2010). Continuous Delivery: Reliable Software Releases through Build, Test, and Deployment Automation. Addison-Wesley Professional. (Chapter 1 introduces the core concepts, and later chapters on deployment patterns discuss the separation of deploying code from releasing features to users).
2. Fowler, M. (2017). Feature Toggles (aka Feature Flags). martinfowler.com. (This article, from a highly reputable source in software engineering, explicitly details the practice of deploying code to production behind a toggle and then "releasing" it to users separately, supporting the 'deploy' then 'release' order).
Keep practicing
Take the free DEVSECOPS practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other DEVSECOPS practice questions
- Question 1When of the following is BEST described as "a benefit of using a standard naming conventi…
- Question 2Which of the following is BEST described as ''the level of the IT security learning conti…
- Question 3Which of the following BEST represents a key principle of a peer code review?
- Question 4Which of the following is NOT a security requirement unique to mobile applications?
- Question 6Which of the following is BEST deserved as "being outside the scope of risk management in…
- Question 7Which of the following is BEST described by the statement containers that access an disks…
