Quiz Space

Tools in Data Science · End Term · 13 Sept 2026 · May 2026 term

Question 6: A public repository receives a pull request from a fork. …

Question 6

+1 markOne correct option

A public repository receives a pull request from a fork. The test workflow does not need deployment credentials. A separate workflow deploys trusted code from the main branch. Which design is safest?

  1. A

    Run untrusted fork code with deployment secrets because workflow masking prevents credential exposure in logs.

  2. B

    Give the test workflow repository write access so it can automatically repair the contribution before review.

  3. C

    Merge the fork first, then run privileged checks after its code enters the trusted main branch.

  4. D

    Test the fork read-only without secrets; deploy trusted main through a separately protected workflow.

Show answer

Correct answer

  • D

    Test the fork read-only without secrets; deploy trusted main through a separately protected workflow.

See the whole paperTake it as a mock test

Question 6 of 39 in the IIT Madras BS Tools in Data Science (Tools in Data Science (TDS)) End Term paper sat on 13 Sept 2026, in the May 2026 term (Tools In Data Science 13 Sep 26). It carries 1 mark.

More questions from this paper

  1. Q1After a release, average API latency changes from 220 ms to 230 ms. The median changes from 120 ms to 125 ms, but check…
  2. Q2An API's health endpoint returns 200 because the process can accept HTTP requests. All purchase requests fail because t…
  3. Q3Yesterday an API recorded 100 failed requests out of 1,000 requests. Today it recorded 200 failed requests out of 10,00…
  4. Q4A nightly scraper normally covers 100 pages. Tonight it fails after page 60. The pipeline marks every previously known …
  5. Q5A vendor confirms that raw dataset version 1 contains an error and supplies corrected records. Which storage approach b…
  6. Q7Tests pass, but the reviewed infrastructure plan says the production database will be destroyed and recreated because a…
  7. Q8A valid production API key was committed to a repository. A later commit removes the visible line. What is the most imp…
  8. Q9A release candidate has passed tests and staging checks, but production traffic patterns are much larger and more varie…
  9. Q10An AI produces a fluent report containing several factual claims and a confident recommendation. The report will influe…
  10. Q11A downstream system expects one category from an allowed list and a numeric confidence score. An AI sometimes adds pros…
  11. Q12A support assistant answers questions from policy documents that are revised regularly. Answers must reflect the curren…
  12. Q13A support agent can read an order and issue a refund. Refunds above ₹5,000 require recorded human approval. Which contr…
  13. Q14A service may scale to zero, restart, or replace an instance. It must preserve job status across those events. Which de…
  14. Q15Figure question
  15. Q16A browser frontend moves to a new origin. Its API request is blocked, while the same request succeeds from a command-li…
  16. Q17An application must sign a user in and learn the user's identity. With separate consent, it may read that user's calend…
  17. Q18A faulty commit is already on a shared main branch and other developers have pulled it. The team wants an auditable und…
  18. Q19A proposed GitHub Pages application must keep a private API key, execute server-side payment logic, and write directly …
  19. Q20A developer binds a laptop service to 0.0.0.0, but it remains inaccessible from the public internet. Which explanation …
  20. Q21A system writes independent event records continuously. Operators want to append records and process them one at a time…
  21. Q22One public server must expose api.example.com and docs.example.com over HTTPS while keeping both backend services on pr…
  22. Q23An order request passes through an API, inventory service, payment service, and database. About 2% of requests fail, bu…
  23. Q24An LLM feature's daily cost rises tenfold while request volume is unchanged. A cloud budget alert arrives several hours…
  24. Q25A product scraper runs hourly. Each product has a stable SKU. Title and price are meaningful business fields, while vie…
  25. Q26A payment request times out. The service supports a stable idempotency key and a status lookup by that key, but the cli…
  26. Q27Which controls materially reduce CI/CD and container supply-chain risk?
  27. Q28A frontend and backend run in separate containers on the same application network. The backend also writes durable cust…
  28. Q29Which statements describe distinct API security responsibilities correctly?
  29. Q30Six months after deployment, an auditor asks the team to reproduce a model training run. Which records are most necessa…
  30. Q31You are designing a prompt for an AI that will triage data-quality tickets.\ After the exam, your prompt will be tested…
  31. Q32NOTE: Your answer should not exceed 60 words.
  32. Q33Write the five questions you would ask the project owner before the team commits to building this system, each with wha…
  33. Q34An AI will repeatedly be asked to analyse small pilot experiments like the one below.\ Your job is not to answer the bu…
  34. Q35Figure question
  35. Q36Choose exactly three of the AI's claims to investigate before release and, for each, give the first manual check and wh…
  36. Q37Make exactly one contiguous edit (at most 25 words replaced, at most 25 words in) to the AI's campaign recommendation t…
  37. Q38Select every statement a second AI makes that is valid under the business brief and data.\ A second AI model reviews th…
  38. Q39Select exactly four deductions that are valid under the stated policy and trace. A retail support agent can call these …