Peoplecert DEVSECOPS Online Practice Questions and Exam Preparation

Peoplecert DEVSECOPS Online Questions & Answers

• Question 21:

  Which of the following BEST describes an example of an insider threat?

  A. Non-malicious attackers
  B. Other competitors
  C. The general public
  D. Disgruntled employees
  D. Disgruntled employees

  ---

  Explanation

• Question 22:

  When of the following is BEST described as "a benefit of using a standard naming convention"?

  A. Sortability
  B. Abstraction
  C. indexation
  D. Readability
  C. indexation

  ---

  Explanation

• Question 23:

  Which of the following BEST fills inthe bank?

  "In DevSecOps environments information security is__________as much as possible into the daily work of development and operations".

  A. Designed
  B. Embedded
  C. integrated
  D. Automated
  A. Designed

  ---

  Explanation

• Question 24:

  Which of the following is NOT a security requirement unique to mobile applications?

  A. Source code must be checked for programmatic and stylistic errors
  B. Secrets information must be stored for secure back-end service calls
  C. They must be designed to run safely outside of the secure network
  D. Data must be kept secure to prevent leaking to other applications
  A. Source code must be checked for programmatic and stylistic errors

  ---

  Explanation

• Question 25:

  Which of the following BEST describes a responsibility of a security champion?

  A. Testing
  B. inspiration
  C. Development
  D. Monitoring
  B. inspiration

  ---

  Explanation

• Question 26:

  Which of the following best describes the responsibility of security by design in a DevSecOps practice?

  A. Ensures that customer input into functional requirements is translated into descriptive user stones
  B. Ensures that the software is designed and written to support integrity and compliance requirements
  C. Ensures that the Ague definition of done includes both functional and nonfunctional requirements for value
  D. Ensures that architectural residence is built into software design to ensure high availability requirements
  B. Ensures that the software is designed and written to support integrity and compliance requirements

  ---

  Explanation

• Question 27:

  When of the following statements BEST describes penetration testing?

  A. A coordinated cyber attack to check simulated vulnerabilities
  B. A planned cyber attack to check for actionable vulnerabilities
  C. A coordinated cyber attack to check for planned vulnerabilities
  D. A simulated cyber attack to check for exploitable vulnerabilities
  B. A planned cyber attack to check for actionable vulnerabilities

  ---

  Explanation

• Question 28:

  Which of the following BEST describes automated security testing?

  A. Ensures that automated orchestration and provisioning software covers the scope of the application stack
  B. Ensures that continuous delivery pipelines integrate testing suites and capabilities into their toolchains
  C. Ensures that infrastructure and networks are software defined to enable rapid and reliable deployments
  D. Ensures that applications are developed to deliver the expected results and reveal any programming errors early
  C. Ensures that infrastructure and networks are software defined to enable rapid and reliable deployments

  ---

  Explanation

• Question 29:

  Which of the following BEST represents a key principleof a peer code review?

  A. A peer code review enables the organization to identify defects earlier in the process
  B. A peer code review allows an organization to avoid using a formal change process
  C. A peer code review enables deep worn and task speculation to improve the reliability of software
  D. A peer code review enables management to take a hands-off approach to quality assurance
  A. A peer code review enables the organization to identify defects earlier in the process

  ---

  Explanation

• Question 30:

  Which of the following BEST describes a public key cryptography architect?

  A. A person sends a message that is encrypted by using their private key, and the receiver must also use that private key to decipher the message.
  B. Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of public keys.
  C. Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of secure private keys.
  D. A person sends a message that is encrypted by the use of a public key, and the receiver can decipher the message using their private key.
  C. Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of secure private keys.

  ---

  Explanation