DOP-C02 Question 15
Select 3Your team is building a CI/CD pipeline for a new application following the DevOps best practices. During the design phase, you need to decide how to handle different stages of the Software Development Lifecycle (SDLC) to ensure the pipeline is robust, scalable, and secure. Which of the following are critical considerations when implementing the pipeline to align with the SDLC phases?
- A
Incorporate automated testing in the build stage to catch issues early in the development cycle.
- B
Ensure secrets and sensitive data are stored securely and injected dynamically during the deployment stage.
- C
Skip manual approval steps in the release stage to speed up the deployment process.
- D
Implement a rollback strategy in the operations stage to handle failed deployments.
- E
Use a monolithic repository for all code to simplify the version control process.
Show answer and explanation
Correct answers: A, B, D
Explanation
The Software Development Lifecycle (SDLC) consists of phases such as planning, development, testing, deployment, and maintenance. A CI/CD pipeline must address critical considerations at each phase. Automated testing in the build phase ensures high code quality. Secure handling of secrets during deployment aligns with security practices. A rollback strategy ensures resilience in operations. Skipping manual approvals or relying on a monolithic repository may introduce risks or inefficiencies that do not align with SDLC principles.
- A. Correct.
Incorporating automated testing early in the build stage helps to identify and fix defects quickly, aligning with the 'Build and Test' phases of SDLC. This is a critical best practice in any CI/CD pipeline.
- B. Correct.
Storing secrets securely and injecting them dynamically during deployment ensures compliance with security best practices and supports the 'Deploy' phase of the SDLC.
- C. Incorrect.
Skipping manual approval steps can lead to faster deployments but increases the risk of introducing defects or misconfigurations into production. This is not aligned with the SDLC focus on quality and risk management during the release phase.
- D. Correct.
Implementing a rollback strategy is essential in the 'Operate and Maintain' phase of SDLC to ensure that failed deployments can be reverted quickly, minimizing downtime and impact.
- E. Incorrect.
Using a monolithic repository can simplify some workflows but is not inherently tied to SDLC best practices. In fact, it can lead to scaling challenges as the codebase grows.