PeopleCert DevSecOps Exam Practice Test Instant Access

Question 1

Which of the following BEST fills in the bank?

"In DevSecOps environments information security is__________as much as possible into the daily work of development and operations".

ADesigned

BEmbedded

Cintegrated

DAutomated

Answer : A

Question 2

Which of the following BEST describes a key characteristic of a lesson learned that ensures it will be used to reduce or eliminate the potential foe failures and future mishaps?

AIt is valid in factual and technical correctness

BIt is a confirmed historical act or outcome

CThe majority of stakeholders believe the data to be true

DA third party has identified the past activity as significant

Answer : A

Question 3

Which of the following BEST represents a key principle of a peer code review?

AA peer code review enables the organization to identify defects earlier in the process

BA peer code review allows an organization to avoid using a formal change process

CA peer code review enables deep worn and task speculation to improve the reliability of software

DA peer code review enables management to take a hands-off approach to quality assurance

Answer : A

Question 4

How can in-house security experts BEST support DevSecOps in the organization?

ATransform themselves into coaches and tool smiths

BGet involved in the SDLC before a service goes live

CAttend trainings to enhance practical security skills

DPerform regular security assessments and pen tests

Answer : B

Question 5

When of the following is BEST described as "a benefit of using a standard naming convention"?

ASortability

BAbstraction

Cindexation

DReadability

Answer : C

Question 6

When of the following statements BEST describes penetration testing?

AA coordinated cyber attack to check simulated vulnerabilities

BA planned cyber attack to check for actionable vulnerabilities

CA coordinated cyber attack to check for planned vulnerabilities

DA simulated cyber attack to check for exploitable vulnerabilities

Answer : B

Question 7

When of the following BEST describes now developers and organizations can use the Open web Security Project (OWASP) top ten security risks tor web applications?

AIt provides strict guidance on the compliance regulations of web application design.

BIt provides a starting place for awareness, education and development of test models

CIt provides audit assessment tools to determine if a web application is NIST compliant.

DIt provides a check list for designing applications using microservices architecture

Answer : B

PeopleCert DevSecOps PeopleCert DevSecOps Exam Practice Test