Application Security ACCISO Practice Questions (Page 12)

Questions 56–57

1. 56expert · hard

   A DevOps team wants to integrate security into its CI/CD pipeline but is concerned about slowing down deployments. The team has a mix of legacy and modern applications. Which approach best balances security and speed?

   • AImplement a security gate that runs SAST and dependency scanning in parallel with the build, and only blocks the release for critical findings.
   • BRequire a manual security review for every deployment.
   • CRun all security scans after the deployment to production.
   • DUse a single security tool that performs all types of testing in one step.
   Reveal Solution Discussion Select an answer first
2. 57foundation · easy

   What is the primary role of a Web Application Firewall (WAF)?

   • ATo filter and monitor HTTP traffic between a web application and the internet
   • BTo encrypt all data stored in the application's database
   • CTo scan the application's source code for vulnerabilities
   • DTo replace the need for secure coding practices
   Reveal Solution Discussion Select an answer first