hardMultiple ChoiceObjective-mapped
200-901 Practice Question: In a CI/CD pipeline, a code quality check fails…
In a CI/CD pipeline, a code quality check fails due to a security vulnerability in a third-party library. What is the best practice to address this?
⚠ Common exam trap
Cisco often tests the misconception that security vulnerabilities can be mitigated with network controls (like firewalls) or by ignoring the issue, rather than addressing the root cause through dependency updates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update the library to a patched version
Updating the library to a patched version directly resolves the security vulnerability at its source, aligning with the principle of supply chain security in CI/CD pipelines. This practice ensures that the codebase uses a version of the dependency that has been officially fixed by the maintainer, preventing exploitation without altering the application's functionality or introducing unnecessary risk.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Suppress the warning and proceed
Why it's wrong here
Suppressing the warning leaves the vulnerability unaddressed, which is a security risk.
- ✓
Update the library to a patched version
Why this is correct
Updating to the latest patched version resolves the vulnerability and maintains compatibility.
- ✗
Add a firewall rule to block the vulnerability
Why it's wrong here
Firewall rules do not fix the code vulnerability; they only provide network-level mitigation.
- ✗
Remove the dependency and rewrite the code
Why it's wrong here
Removing the dependency may be too drastic and time-consuming; patching is preferred if available.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-901 question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.