What is the purpose of integrating security into the software development lifecycle (SDLC)?

To eliminate the need for security testing after deployment.

To make the development process slower and more deliberate.

To identify and mitigate vulnerabilities early in the development process, reducing risk and cost.

To ensure that all code is written in a single programming language.

An e-commerce platform uses microservices for order processing and inventory. The team wants to decouple these services so that an order placement does not block inventory updates. Which architectural approach best achieves this?

Use a shared database so both services read and write the same tables

Use an event broker where the order service publishes an 'OrderPlaced' event and the inventory service consumes it

Embed inventory logic directly into the order service

Have the order service call the inventory service via a synchronous REST API

A development team wants to ensure that every code change is automatically compiled, tested, and scanned for security vulnerabilities before it is merged into the main branch. Which CI/CD pipeline stage configuration best achieves this?

Run a build and unit tests only on the main branch after merge.

Run unit tests and a SAST scan but skip the build step.

Run a build, unit tests, and a static application security testing (SAST) scan on every pull request.

Run a build and SAST scan only on release branches.

What is the primary role of a version control system (VCS)?

To deploy applications to production servers.

To compile source code into executable binaries.

To track and manage changes to source code over time.

To monitor application performance in production.

EC-CouncilDevSecOps Essentials

Domain 1Objective 2

Application Architectures and Development Lifecycle DSE Practice Questions (Page 10)

Part of the Application Development and Security Fundamentals domain, which makes up ~20% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)

62questions here

13free pages

15concepts

15 Concepts in This Objective

Monolithic Architecture
Service-Oriented Architecture (SOA)
Microservices Architecture
Client-Server Architecture
Layered (N-Tier) Architecture
Event-Driven Architecture
Serverless Architecture
Waterfall Model
Agile Development
DevOps Practices
CI/CD Pipeline
Version Control Systems
Testing in Development Lifecycle
Deployment Strategies
Security in SDLC

Questions 46–50

46foundation · easy
What is the purpose of integrating security into the software development lifecycle (SDLC)?
Select an answer first
47application · medium
An e-commerce platform uses microservices for order processing and inventory. The team wants to decouple these services so that an order placement does not block inventory updates. Which architectural approach best achieves this?
Select an answer first
48application · medium
A development team wants to ensure that every code change is automatically compiled, tested, and scanned for security vulnerabilities before it is merged into the main branch. Which CI/CD pipeline stage configuration best achieves this?
Select an answer first
49foundation · easy
What is the primary role of a version control system (VCS)?
Select an answer first
50application · medium
An online service wants to release a new version with zero downtime. The team wants to route a small percentage of real traffic to the new version and compare error rates before full rollout. Which deployment strategy is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.