CloudBees CJE Exam - Topic 2 Question 108 Discussion

Actual exam question for CloudBees's CJE exam

Question #: 108
Topic #: 2

[All CJE Questions]

You need to grant permissions, via matrix-based security, to run a specific command in a Jenkins pipeline. The project parameters will not allow you to create a specific user to run this task, and you have no relevant groups. Which of the following is an option?

AEither creating a group or reassigning the user will work.

BCreate a group, add an existing user to the task, and grant permissions to that group

CSet permissions in Jenkins to allow anonymous users to run the command

DChange the workflow to require an existing user to run the task, and assign permissions to that user.

Show Suggested Answer

Suggested Answer: C

You can set permissions for anonymous users with matrix-based security. Since this requires the least impact on existing workflows, it's the best solution.

by Rhea at Apr 03, 2025, 10:31 AM

Limited Time Offer

25%

Off

Get Premium CJE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leonard

4 months ago

Wait, can you really let anonymous users run commands? That sounds off.

upvoted 0 times

...

Theola

4 months ago

Totally agree with D, it makes the most sense.

upvoted 0 times

...

Doug

4 months ago

I think D is the best choice here.

upvoted 0 times

...

Janella

4 months ago

A and B are not possible since we can't create a user.

upvoted 0 times

...

Dante

5 months ago

Option C seems risky, allowing anonymous users?

upvoted 0 times

...

Lavina

5 months ago

I thought setting permissions for anonymous users was risky, but it might be the only way if we can't create a group or user.

upvoted 0 times

...

Linsey

5 months ago

I feel like changing the workflow to require an existing user might be a solution, but I can't recall if that's the best option.

upvoted 0 times

...

Jesusita

5 months ago

I think we practiced a question similar to this, and creating a group seemed like the right approach, but we can't create one here.

upvoted 0 times

...

Rosendo

5 months ago

I remember something about matrix-based security, but I'm not sure if allowing anonymous users is a good idea.

upvoted 0 times

...

Corazon

6 months ago

I'm feeling pretty confident about this one. Option B is definitely the right choice - it's the only one that allows you to use an existing user without creating a new one.

upvoted 0 times

...

Dominga

6 months ago

Okay, I think I've got this. Option B is the way to go - create a group, add an existing user to it, and grant permissions to that group. Seems like the most straightforward solution.

upvoted 0 times

...

Angelyn

6 months ago

Hmm, I'm a bit confused by this question. I'm not sure if setting permissions for anonymous users is a good idea, but I'll have to think about it more.

upvoted 0 times

...

Tiffiny

6 months ago

This seems like a tricky one. I'm not sure if creating a group or reassigning the user will work, but option B looks like the best approach to me.

upvoted 0 times

...

Mattie

11 months ago

Hmm, I wonder if we could just bribe the Jenkins admin to create a new user for us. That would be a lot easier than all this security nonsense.

upvoted 0 times

Lonna

10 months ago

Hmm, I wonder if we could just bribe the Jenkins admin to create a new user for us. That would be a lot easier than all this security nonsense.

upvoted 0 times

...

Lyda

10 months ago

B) Create a group, add an existing user to the task, and grant permissions to that group

upvoted 0 times

...

Kimberely

10 months ago

A) Either creating a group or reassigning the user will work.

upvoted 0 times

...

Willie

11 months ago

That's a good point, Winifred. Option D does provide more control over who can run the command. It's important to consider security implications when setting up permissions in Jenkins.

upvoted 0 times

...

Ena

11 months ago

Option A? Really? That's like saying 'I can either fix the flat tire or just get a new car.' Not very helpful.

upvoted 0 times

Claudio

10 months ago

D) Change the workflow to require an existing user to run the task, and assign permissions to that user.

upvoted 0 times

...

Jina

10 months ago

B) Create a group, add an existing user to the task, and grant permissions to that group

upvoted 0 times

...

Winifred

12 months ago

I disagree, I believe option D is the way to go. Requiring an existing user to run the task ensures accountability and assigning permissions directly to that user is more straightforward.

upvoted 0 times

...

Jenise

12 months ago

Option D could work, but it might be a hassle to have to assign permissions to a specific user every time. Option B is probably the cleanest solution.

upvoted 0 times

Gregoria

11 months ago

Either creating a group or reassigning the user will work, so that's good to know.

upvoted 0 times

...

In

11 months ago

Creating a group and adding an existing user seems like the most efficient way to handle this.

upvoted 0 times

...

Linwood

11 months ago

I agree, Option B is probably the cleanest solution.

upvoted 0 times

...

Belen

11 months ago

Option D could work, but it might be a hassle to have to assign permissions to a specific user every time.

upvoted 0 times

...

Alona

12 months ago

I agree with Anastacia. Option B is the way to go here. Trying to use an anonymous user (Option C) sounds risky from a security standpoint.

upvoted 0 times

Raelene

11 months ago

I agree, creating a group and adding an existing user seems like the most secure option.

upvoted 0 times

...

Long

11 months ago

I think Option B is the best choice.

upvoted 0 times

...

Willie

1 year ago

I think option B is the best choice. Creating a group and adding an existing user seems like the most secure way to handle permissions.

upvoted 0 times

...

Anastacia

1 year ago

Option B seems like the most straightforward solution. Creating a group and adding an existing user to it makes sense when you can't create a new user.

upvoted 0 times