Peoplecert DEVSECOPS Online Practice Questions and Exam Preparation

Peoplecert DEVSECOPS Online Questions & Answers

• Question 41:

  The Open Web Application Security Project @ (OWASP) is a nonprofit and open community mat supports the goals of DevSecOps that provides many resources to the community.

  Which of the following BEST represents a key resource that they make available to the community?

  A. Security and auditing guidelines
  B. Open-source testing procedures
  C. A maturity model for assessment
  D. Training and certification courses
  A. Security and auditing guidelines

  ---

  Explanation

• Question 42:

  Which of the following BEST describes the combination that provided the foundational principles that ted to DevOps?

  1. Agile 2.Lean 3. ITIL 4. SAFE

  A. 1 and 2
  B. 2 and 3
  C. 3 and 4
  D. 1 and 4
  A. 1 and 2

  ---

  Explanation

• Question 43:

  Which of the following BEST describes the meaning of DevSecOps?

  A. A security analysis of all software is performed prior to the release to ensure they are secure in operations.
  B. Security monitoring of software is performed during operations to detect security events more quickly.
  C. A security analysis of software is incorporated and automated throughout development and operations.
  D. Security events are analyzed after they occur to help understand how to prevent them in the future
  C. A security analysis of software is incorporated and automated throughout development and operations.

  ---

  Explanation

• Question 44:

  Which of the following is BEST described as ''the level of the IT security learning continuum where an organization covers security basics and literacy''?

  A. Education
  B. Awareness
  C. Immersion
  D. Training
  B. Awareness

  ---

  Explanation

• Question 45:

  Which of the following BEST describes static application security testing(SAST)?

  A. A security testing methodology that examines application vulnerabilities as it is running.
  B. Analyzes code for vulnerabilities by interacting with the application functionality.
  C. Analyzes the software composition for vulnerabilities with open-source frameworks
  D. A security testing methodology that examines code for flaws and weaknesses
  B. Analyzes code for vulnerabilities by interacting with the application functionality.

  ---

  Explanation