Integrating a Continuous Feedback Loop DSE Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A DevSecOps team has implemented a feedback loop that collects security findings from multiple tools. However, developers are overwhelmed by the volume of tickets and are ignoring them. The team wants to improve the effectiveness of the feedback loop. What is the most effective way to address this?

   • AIncrease the number of security tools to provide more comprehensive feedback
   • BPrioritize the findings by severity and business impact, and route only actionable, high-priority items to developers, while aggregating lower-priority issues into a weekly digest
   • CDisable the feedback loop until developers have more time
   • DRequire developers to fix all findings within 24 hours
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What does 'closing the loop' mean in the context of a continuous feedback loop?

   • ATaking action based on feedback and then verifying the effectiveness of that action
   • BDeleting feedback that is no longer relevant
   • CEnding the feedback loop after a successful release
   • DStoring feedback data in a database for future reference
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   How can feedback data be collected from security scans in a DevSecOps environment?

   • ABy asking developers to summarize scan findings in emails
   • BBy integrating scan results into the CI/CD pipeline and storing them in a central dashboard
   • CBy disabling scans to avoid false positives
   • DBy manually reviewing scan reports at the end of each month
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   After a production incident, the incident report reveals that a misconfigured firewall rule allowed unauthorized access. The DevSecOps team wants to prevent a recurrence. Which action best closes the feedback loop?

   • AManually fix the firewall rule in production and monitor for similar issues
   • BIncrease the frequency of firewall log reviews
   • CDocument the incident in the post-mortem wiki and share it with the team
   • DUpdate the infrastructure-as-code templates and add a policy check to the CI/CD pipeline that validates firewall rules against security baselines
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   A DevSecOps team has a feedback loop where security findings are automatically posted to a shared Slack channel. However, developers rarely respond, and security issues are not being fixed. The team wants to improve collaboration and ensure feedback is acted upon. What is the best approach?

   • ARemove the Slack integration and send findings only to the security team
   • BPost the findings to a public channel and tag all developers
   • CCreate a new Slack channel for every security finding
   • DAssign a security champion from each development team to triage findings and facilitate communication between security and development
   Reveal Solution Discussion Select an answer first