A DevSecOps team wants to collect feedback from various stages of the software delivery lifecycle to identify security issues early. Which combination of feedback sources would provide the most comprehensive view?

Only production monitoring alerts

CI/CD pipeline logs, SAST/DAST scan results, production monitoring alerts, and incident reports

Only incident reports from the last year

A security team finds a critical vulnerability in a library used by multiple development teams. The security team wants to ensure the vulnerability is fixed quickly, but developers are hesitant because they have not heard about it and are focused on feature work. What should the DevSecOps team do first to foster a collaborative feedback culture?

Hold a joint meeting with security and development leads to explain the vulnerability, its impact, and agree on a remediation plan with clear ownership

Create a ticket in the security team's tracker and wait for developers to notice it

Escalate the issue to senior management and demand that developers fix it immediately

Send a mass email to all developers with the vulnerability details and a deadline to fix it

Which statement best describes the role of a continuous feedback loop in a DevSecOps environment?

It is a tool that automatically fixes all security issues

It is a mechanism for sharing information across teams to drive ongoing improvements

It is a compliance requirement that mandates weekly security reports

It is a one-time review at the end of the development cycle

What is the purpose of analyzing feedback data in a continuous feedback loop?

To replace the need for security expertise

To identify trends and patterns that inform remediation decisions

To generate more data without any specific use

To automatically fix all vulnerabilities without human review

Which of the following is an example of an automated feedback mechanism?

A weekly meeting to discuss security findings

A script that automatically opens a bug ticket when a test fails in the pipeline

A developer manually noting a test failure in a shared document

A security analyst sending an email to the team about a vulnerability

EC-CouncilDevSecOps Essentials

Domain 6Objective 5

Integrating a Continuous Feedback Loop DSE Practice Questions (Page 2)

Part of the DevSecOps Monitoring and Feedback domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

8concepts

Questions 6–10

6application · medium
A DevSecOps team wants to collect feedback from various stages of the software delivery lifecycle to identify security issues early. Which combination of feedback sources would provide the most comprehensive view?
Select an answer first
7application · medium
A security team finds a critical vulnerability in a library used by multiple development teams. The security team wants to ensure the vulnerability is fixed quickly, but developers are hesitant because they have not heard about it and are focused on feature work. What should the DevSecOps team do first to foster a collaborative feedback culture?
Select an answer first
8foundation · easy
Which statement best describes the role of a continuous feedback loop in a DevSecOps environment?
Select an answer first
9foundation · easy
What is the purpose of analyzing feedback data in a continuous feedback loop?
Select an answer first
10foundation · easy
Which of the following is an example of an automated feedback mechanism?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.