CADD Quiz

Why did we install both Java 8 and Java 11?

• Jenkins needs Java 8, while the Spring Boot app needs Java 11

• To confuse students

• Because Java 11 is faster

• SonarQube only works with Java 8

What happens if you lose the SonarQube token after adding it to Jenkins?

• The pipeline will keep working forever

• You must generate a new token and update Jenkins

• SonarQube will auto-renew the token

• Jenkins will create a backup token

OWASP Dependency Check scans for:

• Spelling mistakes in code

• Vulnerabilities in third-party libraries

• Slow unit tests

• Docker image sizes

If the SonarQube webhook fails, what’s the first thing to check?

• Jenkins plugin updates

• If the SonarQube server IP changed

• The build server’s disk space

• Docker version

Trivy found a CRITICAL CVE in your Docker image. What should you do?

• Ignore it and deploy anyway

• Delete the image and cancel the pipeline

• Check if it’s in a used package, then update the base image

• Reboot the Jenkins server

Why did we run smoke tests AFTER building the Docker image?

• Because smoke tests need the container to be running

• It was a mistake in the video

• To save time

• Jenkins requires it

ArgoCD is stuck in “Progressing” state. What’s likely wrong?

• Minikube ran out of memory

• The pipeline was too fast

• SonarQube token expired

• Docker isn’t installed

If Jenkins says “Cannot connect to Docker daemon,” what’s missing?

• The Jenkins user wasn’t added to the docker group

• Docker isn’t installed on Earth

• AWS credentials expired

• SonarQube is down

What does the Quality Gate in SonarQube check?

• If the code is stylish

• If tests passed, coverage is high, and no critical bugs exist

• If the developer’s name is spelled right

• If GitHub has new emojis

If the pipeline fails at the Quality Gate, how can you rerun JUST that stage?

• Click “Restart Pipeline” in Jenkins

• Shout at the computer

• Use “Replay” in Jenkins with edited code

• Delete the Git repo