DevOps vs. DevSecOps DSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization has a mature DevOps culture where developers and operations collaborate closely, but the security team is still siloed and only consulted at the end of projects. Management wants to transition to DevSecOps. What cultural change is most essential for this transition to succeed?

   • ADevelopers must be given full authority to make all security decisions without consulting security specialists.
   • BSecurity professionals must be embedded within development teams and participate in daily standups and planning sessions.
   • CThe security team should continue to work independently but provide a final approval gate before every release.
   • DOperations staff should take over all security responsibilities to reduce the number of teams involved.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best defines DevOps?

   • AA security-focused extension of agile that adds security gates at the end of the pipeline
   • BA set of tools that automates all manual operations tasks
   • CA framework that separates development and operations teams to ensure clear ownership
   • DA cultural and technical movement that emphasizes collaboration, automation, and continuous delivery
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary definition of DevSecOps?

   • AA set of security tools that are added to the CI/CD pipeline
   • BA methodology that replaces DevOps with a security-first framework
   • CA separate security team that reviews code after deployment
   • DAn approach that integrates security practices into every phase of the DevOps lifecycle
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A software company is comparing DevOps and DevSecOps for a new product. Their main concern is reducing the time between discovering a vulnerability and fixing it in production. Which benefit of DevSecOps directly addresses this concern?

   • AGuaranteed compliance with all industry regulations.
   • BElimination of all security vulnerabilities through automated testing.
   • CReduction in the number of developers needed on the team.
   • DFaster remediation through continuous security feedback in the delivery pipeline.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is comparing DevOps and DevSecOps. They currently have a DevOps pipeline that delivers features quickly, but security issues are found only during periodic penetration tests. The management wants to reduce the time from vulnerability discovery to fix. What is the most effective DevSecOps practice to achieve this?

   • AImplement automated vulnerability scanning in the CI/CD pipeline and have developers fix findings before the build proceeds.
   • BCreate a security dashboard that shows the number of open vulnerabilities at the end of each month.
   • CHire more security testers to manually review code after each release.
   • DIncrease the frequency of penetration tests from annually to quarterly.
   Reveal Solution Discussion Select an answer first