CloudBees CJE Exam - Topic 2 Question 108 Discussion

Actual exam question for CloudBees's CJE exam

Question #: 108
Topic #: 2

You need to grant permissions, via matrix-based security, to run a specific command in a Jenkins pipeline. The project parameters will not allow you to create a specific user to run this task, and you have no relevant groups. Which of the following is an option?

AEither creating a group or reassigning the user will work.

BCreate a group, add an existing user to the task, and grant permissions to that group

CSet permissions in Jenkins to allow anonymous users to run the command

DChange the workflow to require an existing user to run the task, and assign permissions to that user.

Show Suggested Answer

Suggested Answer: C

You can set permissions for anonymous users with matrix-based security. Since this requires the least impact on existing workflows, it's the best solution.

by Rhea at Apr 03, 2025, 10:31 AM

Limited Time Offer

25%

Off

Get Premium CJE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leonard

5 months ago

Wait, can you really let anonymous users run commands? That sounds off.

upvoted 0 times

...

Theola

5 months ago

Totally agree with D, it makes the most sense.

upvoted 0 times

...

Doug

6 months ago

I think D is the best choice here.

upvoted 0 times

...

Janella

6 months ago

A and B are not possible since we can't create a user.

upvoted 0 times

...

Dante

6 months ago

Option C seems risky, allowing anonymous users?

upvoted 0 times

...

Lavina

6 months ago

I thought setting permissions for anonymous users was risky, but it might be the only way if we can't create a group or user.

upvoted 0 times

...

Linsey

7 months ago

I feel like changing the workflow to require an existing user might be a solution, but I can't recall if that's the best option.

upvoted 0 times

...

Jesusita

7 months ago

I think we practiced a question similar to this, and creating a group seemed like the right approach, but we can't create one here.

upvoted 0 times

...

Rosendo

7 months ago

I remember something about matrix-based security, but I'm not sure if allowing anonymous users is a good idea.

upvoted 0 times

...

Corazon

7 months ago

I'm feeling pretty confident about this one. Option B is definitely the right choice - it's the only one that allows you to use an existing user without creating a new one.

upvoted 0 times

...

Dominga

7 months ago

Okay, I think I've got this. Option B is the way to go - create a group, add an existing user to it, and grant permissions to that group. Seems like the most straightforward solution.

upvoted 0 times

...

Angelyn

8 months ago

Hmm, I'm a bit confused by this question. I'm not sure if setting permissions for anonymous users is a good idea, but I'll have to think about it more.

upvoted 0 times

...

Tiffiny

8 months ago

This seems like a tricky one. I'm not sure if creating a group or reassigning the user will work, but option B looks like the best approach to me.

upvoted 0 times

...

Mattie

1 year ago

Hmm, I wonder if we could just bribe the Jenkins admin to create a new user for us. That would be a lot easier than all this security nonsense.

upvoted 0 times

Lonna

11 months ago

Hmm, I wonder if we could just bribe the Jenkins admin to create a new user for us. That would be a lot easier than all this security nonsense.

upvoted 0 times

...

Lyda

12 months ago

B) Create a group, add an existing user to the task, and grant permissions to that group

upvoted 0 times

...

Kimberely

12 months ago

A) Either creating a group or reassigning the user will work.

upvoted 0 times

...

Willie

1 year ago

That's a good point, Winifred. Option D does provide more control over who can run the command. It's important to consider security implications when setting up permissions in Jenkins.

upvoted 0 times

...

Ena

1 year ago

Option A? Really? That's like saying 'I can either fix the flat tire or just get a new car.' Not very helpful.

upvoted 0 times

Claudio

12 months ago

D) Change the workflow to require an existing user to run the task, and assign permissions to that user.

upvoted 0 times

...

Jina

12 months ago

B) Create a group, add an existing user to the task, and grant permissions to that group

upvoted 0 times

...

Winifred

1 year ago

I disagree, I believe option D is the way to go. Requiring an existing user to run the task ensures accountability and assigning permissions directly to that user is more straightforward.

upvoted 0 times

...

Jenise

1 year ago

Option D could work, but it might be a hassle to have to assign permissions to a specific user every time. Option B is probably the cleanest solution.

upvoted 0 times

Gregoria

1 year ago

Either creating a group or reassigning the user will work, so that's good to know.

upvoted 0 times

...

In

1 year ago

Creating a group and adding an existing user seems like the most efficient way to handle this.

upvoted 0 times

...

Linwood

1 year ago

I agree, Option B is probably the cleanest solution.

upvoted 0 times

...

Belen

1 year ago

Option D could work, but it might be a hassle to have to assign permissions to a specific user every time.

upvoted 0 times

...

Alona

1 year ago

I agree with Anastacia. Option B is the way to go here. Trying to use an anonymous user (Option C) sounds risky from a security standpoint.

upvoted 0 times

Raelene

1 year ago

I agree, creating a group and adding an existing user seems like the most secure option.

upvoted 0 times

...

Long

1 year ago

I think Option B is the best choice.

upvoted 0 times

...

Willie

1 year ago

I think option B is the best choice. Creating a group and adding an existing user seems like the most secure way to handle permissions.

upvoted 0 times

...

Anastacia

1 year ago

Option B seems like the most straightforward solution. Creating a group and adding an existing user to it makes sense when you can't create a new user.

upvoted 0 times