DevOps vs. DevSecOps DSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In which approach is security typically considered earlier in the software development lifecycle?

   • ADevSecOps, because it incorporates security from the initial design and planning stages
   • BNeither, because security is only considered after production incidents
   • CDevOps, because it automates security testing in the deployment phase
   • DBoth equally, because security is always a priority in both
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An organization is adopting DevSecOps. The security team is used to being the final gate before production releases. Developers are used to deploying without consulting security. Which process change is most aligned with DevSecOps?

   • AShift security from a final gate to a continuous partner that provides automated checks and guidance throughout the pipeline.
   • BHave the security team write all code for the application to ensure it is secure.
   • CAllow developers to deploy without any security involvement and rely on post-incident reviews.
   • DKeep the final security gate but make it faster by reducing the checklist.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company is moving from a DevOps model to DevSecOps. The security team is used to being the final gatekeeper and approving every release. Developers are used to deploying without consulting security. What is the key cultural shift that must occur?

   • ADevelopers are given full responsibility for security, and the security team is disbanded.
   • BOperations takes over security responsibilities to reduce the number of teams involved.
   • CThe security team must approve every code commit before it is merged.
   • DSecurity becomes a shared responsibility, with developers and security engineers collaborating throughout the development process.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What cultural shift is required to transition from DevOps to DevSecOps?

   • AEliminating the operations team to simplify processes
   • BAdopting a mindset where security is everyone's responsibility, not just the security team's
   • CFocusing exclusively on automation and ignoring human factors
   • DMoving from a culture of collaboration to one of strict separation between teams
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   How does DevSecOps integrate security into the DevOps lifecycle?

   • ABy adding security checks only during the deployment phase
   • BBy automating security only in the production environment
   • CBy outsourcing security testing to an external vendor after each release
   • DBy making security a shared responsibility across all phases, from design to operations
   Reveal Solution Discussion Select an answer first