Question 1

Which of the following BEST describes the meaning of DevSecOps?

Options :

A : A security analysis of all software is performed prior to the release to ensure they are secure in operations.

B : Security monitoring of software is performed during operations to detect security events more quickly.

C : A security analysis of software is incorporated and automated throughout development and operations.

D : Security events are analyzed after they occur to help understand how to prevent them in the future

Answer: C

Question 2

Which of the following BEST represents a key resource that they make available to the community?

Options :

A : Ensures that customer input into functional requirements is translated into descriptive user stones

B : Ensures that the software is designed and written to support integrity and compliance requirements

C : Ensures that the Ague definition of done includes both functional and nonfunctional requirements for value

D : Ensures that architectural residence is built into software design to ensure high availability requirements

Answer: B

Question 3

Which of the following BEST describes the goal of the security principle of accountability and non-repudiation?

Options :

A : Neither the sender nor the recipient of information or activity can later deny the transaction took place

B : Trust between two parties is enhanced by a set of practices that validate integrity of data transmissions

C : Corporate reputation is maintained when practicing good authentication and data validation procedures

D : Confidence between consumer and provider is achieved when users manage passwords *i a defined way

Answer: B

Question 4

Monitoring detected that a batch fob started and completed at specific times.

Which of the following is the MOST appropriate response to this event?

Options :

A : No action is immediately required

B : Operations is notified to investigate

C : An modem is togged to record me runtime

D : A management escalation notification is triggered

Answer: B