Peoplecert DEVSECOPS Online Practice Questions and Exam Preparation

Peoplecert DEVSECOPS Online Questions & Answers

• Question 31:

  Which of the followingBEST describes how containers and image layers are related?

  A. Layers of a container are dependent on the layer immediately above it
  B. A layer within a container is designed withinmicroservicesarchitecture
  C. Layers are immutable files that represent a snapshot of a container.
  D. A layer consists of multiple containers withsimilarmicroservices architecture
  C. Layers are immutable files that represent a snapshot of a container.

  ---

  Explanation

• Question 32:

  Which of the following BEST describes the purpose of threat modeling within a DevSecOps practice?

  A. To document functional requirements for new features
  B. To identify potential attack vectors early in the design phase
  C. To replace penetration testing activities
  D. To ensure compliance with regulatory audits
  B. To identify potential attack vectors early in the design phase

  ---

  Explanation

• Question 33:

  ABC Corporation has just experienced multiple DDoS attacks.

  Which of the following BEST describes what a possible goal of me perpetrator(S) was?

  A. To minimize the legitimate users' access
  B. To attempt to steal vital information
  C. To gain unauthorized system access
  D. To discredit or damage a rival business
  A. To minimize the legitimate users' access

  ---

  Explanation

• Question 34:

  Which of the following is BEST described as "how container images are dynamically analyzed before they are deployed"?

  A. Dynamic application security testing (DAST)
  B. Dynamic threat analysis (DTA)
  C. interactive application security testing (IAST)
  D. Software composition analysis (SCA)
  B. Dynamic threat analysis (DTA)

  ---

  Explanation

• Question 35:

  Which of the following is BEST described by the statement containers that access an disks mounted on the host and have read-write access to files''?

  A. A risk of using privileged containers
  B. A benefit of container credentials
  C. A requirement for container isolation
  D. A need for container immutability
  C. A requirement for container isolation

  ---

  Explanation

• Question 36:

  How can in-house security experts BEST support DevSecOps in the organization?

  A. Transform themselves into coaches and tool smiths
  B. Get involved in the SDLC before a service goes live
  C. Attend trainings to enhance practical security skills
  D. Perform regular security assessments and pen tests
  B. Get involved in the SDLC before a service goes live

  ---

  Explanation

• Question 37:

  Which of the following BEST describes the primary security benefit of integrating security checks into CI pipelines?

  A. Reduced operational costs
  B. Faster incident response in production
  C. Earlier detection of vulnerabilities in code changes
  D. Elimination of the need for manual reviews
  C. Earlier detection of vulnerabilities in code changes

  ---

  Explanation

• Question 38:

  When of the following BEST describesnow developers and organizationscan use the Open web Security Project (OWASP) top tensecurity risks tor web applications?

  A. It provides strict guidance on the compliance regulations of web application design.
  B. It provides a starting place for awareness, education and development of test models
  C. It provides audit assessment tools to determine if a web application is NIST compliant.
  D. It provides a check list for designing applications using microservices architecture
  B. It provides a starting place for awareness, education and development of test models

  ---

  Explanation

• Question 39:

  DevSecOps requires many intersecting pans to collaborate and function together.

  Which of the following BEST describes what an organization should focus on when starting their implementation?

  A. Process
  B. Governance
  C. Technology
  D. People
  B. Governance

  ---

  Explanation

• Question 40:

  In shift-left thinking software Dogs and errors should IDEALLY be detected during which phase of testing?

  A. During UAT tests
  B. During staging tests
  C. During unit tests
  D. During system tests
  C. During unit tests

  ---

  Explanation