Integrating a Continuous Feedback Loop DSE Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A company has a policy that all security incidents must be resolved within 24 hours. Their monitoring system generates alerts, but the on-call team is often overwhelmed by false positives, and real incidents sometimes go unnoticed. They want to automate the feedback loop to improve response time without increasing the size of the on-call team. What should they do?

   • AImplement an alert correlation and deduplication system that groups related alerts and suppresses known false positives.
   • BRoute all alerts to the security team instead of the on-call team.
   • CDisable alerts during off-hours to reduce noise.
   • DIncrease the alert thresholds so that only the most severe alerts are generated.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which of the following is a common source of feedback in a DevSecOps continuous feedback loop?

   • AMarketing campaign analytics
   • BCI/CD pipeline execution logs
   • CEmployee performance reviews
   • DOffice network printer logs
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the purpose of automating feedback loops in DevSecOps?

   • ATo reduce the need for human intervention in routine responses
   • BTo make the feedback loop slower and more deliberate
   • CTo eliminate the need for security policies
   • DTo ensure that all security decisions are made by machines
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which practice best supports collaboration among development, security, and operations teams for effective feedback?

   • AKeeping security findings confidential within the security team
   • BHolding regular cross-functional meetings to review feedback and lessons learned
   • CLimiting feedback to automated reports only
   • DAssigning blame to teams that introduce vulnerabilities
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A team's monitoring system detects that a production service is using an unusually high amount of memory. They want to automate the initial response so that the on-call engineer is not woken up for every minor spike. What should they implement?

   • ARestart the service automatically every time memory usage goes above 50%.
   • BCreate an alert for any memory usage above 50% and page the on-call engineer immediately.
   • CDo nothing and wait for customers to report performance issues.
   • DCreate an alert that triggers only when memory usage exceeds a threshold for a sustained period, and then automatically opens a ticket.
   Reveal Solution Discussion Select an answer first