2.10 Determine DevSecOps Recommendations (implications) 350-201 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a key benefit of integrating governance policies into automated workflows?

   • AIt removes the need for version control.
   • BIt allows developers to bypass security controls if they are in a hurry.
   • CIt ensures consistent and auditable enforcement of security requirements.
   • DIt eliminates the need for any security testing.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which practice is most aligned with the DevSecOps principle of 'automation'?

   • APerforming security reviews only after a security incident
   • BEmbedding security checks into the CI/CD pipeline
   • CRunning security scans manually before each release
   • DUsing a separate ticketing system for security tasks
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A team is building a new CI/CD pipeline for a legacy application. The application has many known vulnerabilities that cannot be fixed immediately. The team wants to deploy quickly while managing security risk. Which approach is BEST?

   • AImplement a risk-based gate that allows deployment if vulnerabilities are documented and accepted by the security team
   • BBlock all deployments until every vulnerability is fixed
   • CUse a separate pipeline for security fixes and deploy only after all are resolved
   • DDeploy without any security checks to meet deadlines
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company uses a blue/green deployment strategy. A security incident is detected in the green environment. The team wants to respond quickly and minimize downtime. What is the BEST course of action?

   • AUse a load balancer to gradually shift traffic from green to blue
   • BShut down the entire application and restore from backup
   • CRedirect traffic back to the blue environment and then investigate the green environment
   • DKeep traffic on green and try to patch the vulnerability live
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is a key consideration when selecting security tools for a DevOps toolchain?

   • AThe tool should integrate easily with existing CI/CD systems.
   • BThe tool should require manual execution by security analysts.
   • CThe tool should be used only by the security team.
   • DThe tool should only run after production deployment.
   Reveal Solution Discussion Select an answer first