350-201 Question 277
Select 4During a security assessment of your organization's CI/CD pipeline, you are tasked with identifying the components most critical for ensuring secure and automated software delivery. Which of the following are typical components of a secure CI/CD pipeline?
- A
Source control repository
- B
Continuous integration server
- C
Static application security testing (SAST) tools
- D
Load balancing hardware
- E
Artifact repository
Show answer and explanation
Correct answers: A, B, C, E
Explanation
A secure CI/CD pipeline is made up of several critical components that work together to automate and secure the software development lifecycle. These include the source control repository for managing code, the CI server for automating builds and tests, SAST tools for identifying vulnerabilities during development, and the artifact repository for securely storing build outputs. While load balancing hardware is important for production environments, it is not a component of the CI/CD pipeline itself.
- A. Correct.
The source control repository, such as Git, is a critical component of the CI/CD pipeline where the codebase is managed, versioned, and secured.
- B. Correct.
The continuous integration (CI) server automates the build and testing of code changes and ensures that new code integrates seamlessly with the existing codebase.
- C. Correct.
Static application security testing (SAST) tools are integrated into the CI/CD pipeline to identify vulnerabilities in the code during the development process.
- D. Incorrect.
Load balancing hardware is not a component of a CI/CD pipeline. Instead, it is part of the infrastructure used in production environments to distribute traffic among servers.
- E. Correct.
The artifact repository is used for storing and managing build artifacts, such as binaries and container images, making it a key component of the CI/CD pipeline.