Which description of a canary deployment is true?

1. A. deployment by accident
2. B. deployment that is rolled back automatically after a configurable amount of minutes
3. C. deployment relating to data mining development
4. D. deployment to a limited set of servers or users

Correct Answer: D

Configuration changes to the production network devices are performed by a CI/CD pipeline. The code repository and the CI tool are running on separate servers. Some configuration changes are pushed to the code repository, but the pipeline did not start.
Why did the pipeline fail to start?

1. A. The CI server was not configured as a Git remote for the repository.
2. B. The webhook call from the code repository did not reach the CI server.
3. C. Configuration changes must be sent to the pipeline, which then updates the repository.
4. D. The pipeline must be started manually after the code repository is updated.

Correct Answer: C

When static routes are added to a router in a network using a CI/CD pipeline, an Ansible playbook is used to make these changes. Which steps must be added to the pipeline to validate that the changes have the intended effect on the traffic flow?

1. A. Add a step to run the debug ip routing command before the change, and add a step after the change to issue the no debug ip routing command.
2. B. Add a step to capture the routing table before the change, and add a step after the change to capture it agai
3. C. Calculate the difference between the two for review.
4. D. Add a step to ping a host on each of the static routes before the change, and a step after to repeat the same chec
5. E. Calculate the difference between the two checks for review.
6. F. Add a step to run the same playbook again with the debug option enabled and use grep on the log output to ensure that the commands are not applied again.

Correct Answer: B

Which two actions help limit the attack surface of your Docker container? (Choose two.)

1. A. Run only a single service in each container.
2. B. Run all services in a single image.
3. C. Use version tags for base images and dependencies.
4. D. Use Kali Linux as a base image.
5. E. Download images over HTTPS supporting sites.

Correct Answer: CE

A DevOps engineer has built a new container and must open port 8080 for intercontainer communication. Which command must be added in a Dockerfile to accomplish this goal?

1. A. EXPOSE 8080
2. B. FIREWALL ADD-PORT 8080
3. C. PORT 8080
4. D. OPEN PORT 8080

Correct Answer: A