Questions
Answer the following questions to test your knowledge of this chapter:
- What are each of the OWASP Top 10 CI/CD Security Risks?
- What are the three common paths to CI/CD governance?
- What is the significance of mapping CI/CD systems and processes? What term described this process?
- What are the four most common branching strategies used by development teams today?
- What is the difference between trunk-based development and scaled trunk development?
- Which of the four branching strategies described in this chapter promote feature-driven development?
- What is the difference between a release pipeline and a deployment pipeline?
- What is the difference between an artifact store and a configuration store?
- Why are external CCBs and CABs frequently cited as an anti-pattern in the context of DevOps release management?
- Why is it considered good practice to implement methods that move validation steps into the development platform?