2.10 Determine DevSecOps Recommendations (implications) 350-201 Practice Questions (Page 11)

Questions 51–52

1. 51foundation · easy

   What is an implication of choosing a security tool that does not support automation?

   • ASecurity checks will run faster than automated tools.
   • BThe tool will automatically integrate with all CI/CD systems.
   • CSecurity checks may be skipped or delayed due to manual effort.
   • DThe tool will require no configuration or maintenance.
   Reveal Solution Discussion Select an answer first
2. 52expert · hard

   A security team is trying to promote a DevSecOps culture in an organization where development and security teams have historically been siloed. The developers are concerned that security requirements will be imposed at the end of the process. Which approach best aligns with DevSecOps principles?

   • AHave the security team review the code after it is deployed to production.
   • BUse a security tool that automatically blocks the release if any security issue is found.
   • CCreate a security checklist that developers must complete before release.
   • DHave security engineers work directly with development teams to define security requirements and integrate them into user stories.
   Reveal Solution Discussion Select an answer first