DOP-C02 Question 30
Select 3A DevOps team is developing a CI/CD pipeline for a web application hosted on AWS. The team needs to ensure that the pipeline verifies individual code components, validates the interaction between services, and detects potential vulnerabilities in the code before deployment. Which types of tests should the team include in the pipeline to achieve these goals?
- A
Unit tests
- B
Integration tests
- C
User interface (UI) tests
- D
Security scans
- E
Load tests
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure the pipeline verifies individual components, validates service interactions, and detects vulnerabilities, the team should include unit tests, integration tests, and security scans. Unit tests ensure that each function or component works correctly, integration tests ensure that different services interact as expected, and security scans identify any potential vulnerabilities in the code. User interface tests and load tests, while valuable, serve different purposes and are not critical for this specific scenario.
- A. Correct.
Unit tests focus on validating individual functions or components of the application. Including these tests ensures that basic functionality works as expected and is essential in a CI/CD pipeline.
- B. Correct.
Integration tests validate the interaction between different components or services in the application. These tests are critical to ensure that the application functions correctly as a cohesive system.
- C. Incorrect.
User interface (UI) tests validate the end-user experience and are typically performed after deployment in staging or production environments. While important, they are not necessary for verifying code components or service interactions in the pipeline.
- D. Correct.
Security scans are essential to detect potential vulnerabilities in the code or dependencies. These scans should be integrated into the pipeline to ensure secure deployment.
- E. Incorrect.
Load tests validate the application's performance under high traffic or stress conditions. While valuable, these tests are typically done in later stages and are not directly related to verifying individual components or interactions.