CloudBees Exam CCJE Topic 4 Question 61 Discussion

Actual exam question for CloudBees's Certified CloudBees Jenkins Engineer (CCJE) exam

Question #: 61
Topic #: 4

[All Certified CloudBees Jenkins Engineer (CCJE) Questions]

You are the administrator of a base Jenkins master with the recommended set of plugins installed. You want to protect the Jenkins master against malicious (or bad) usages of Groovy methods. You also want your users to be able to share their Pipeline code via Globa Pipeline Libraries housed on a git repository under your company's Github Organization. Which of the following statements is TRUE?

AYou should configure Global Pipeline Libraries at the Github Organization level: The libraries are running as 'untrusted' code, allowing developer to run code on the Groovy sandbox.

BYou should not configure any Global Pipeline Libraries at the folder level: The libraries are running as 'trusted' code, allowing all developers to execute privileged methods.

CYou should configure Global Pipeline Libraries at the Pipeline level: The libraries are running as 'untrusted' code, allowing developers to run cod on the Groovy sandbox.

DYou should not configure any Global Pipeline Libraries at all: The libraries are running as 'trusted' code, allowing all developers to execute privileged methods.

Show Suggested Answer

Suggested Answer: D

by Kayleigh at Apr 12, 2024, 07:14 AM

Limited Time Offer

25%

Off

Get Premium CCJE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Erin

2 days ago

I think the answer is A. Setting up Global Pipeline Libraries at the Github Organization level with untrusted code seems like the safest option.

upvoted 0 times

...

Pearly

24 days ago

Yeah, that makes sense. But B) says we shouldn't configure any Global Pipeline Libraries at the folder level, and that the libraries would be running as 'trusted' code, allowing all developers to execute privileged methods. That sounds like a big security risk.

upvoted 0 times

...

Ivette

26 days ago

Alright, let's dive into the options. A) seems to suggest configuring Global Pipeline Libraries at the Github Organization level, with the libraries running as 'untrusted' code. That would allow developers to run code in the Groovy sandbox, which sounds like a good security measure.

upvoted 0 times

...

Raylene

27 days ago

Haha, 'trusted' and 'untrusted' code, it's like we're dealing with superheroes and supervillains here! But in all seriousness, this is an important distinction.

upvoted 0 times

...

Darnell

28 days ago

Exactly. I think the key here is whether the libraries are running as 'trusted' or 'untrusted' code. That will determine what kind of access they have to the Jenkins master.

upvoted 0 times

...

Vivan

1 months ago

I agree. And the ability to share Pipeline code through Global Pipeline Libraries is a really useful feature, but we need to make sure it's set up securely.

upvoted 0 times

...

Carmen

1 months ago

Hmm, this question seems to be testing our understanding of Jenkins' security configurations. Protecting the Jenkins master from malicious Groovy methods is definitely a critical concern.

upvoted 0 times

...