Integrating Compliance as Code (CaC) DSE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   During a ransomware incident, a company needs to restore a critical database from a backup. The backup was taken before the incident, but the company's compliance policy requires that all restored databases have encryption at rest enabled. The original database had encryption enabled. What is the best way to ensure the restored database is compliant?

   • ARestore the database from backup and then manually enable encryption at rest after the restore completes.
   • BSkip the compliance check because the backup was taken from a compliant database, so the restored database will also be compliant.
   • CUse a policy-as-code tool to scan the restored database for compliance and remediate any issues before allowing it to serve traffic.
   • DRestore the database and immediately put it behind a firewall to prevent access until the security team can review it.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an example of a policy-as-code tool commonly used to enforce compliance requirements?

   • AGitLab
   • BJenkins
   • CDocker
   • DOpen Policy Agent (OPA)
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which Compliance as Code tool is specifically designed to scan Infrastructure as Code templates for security and compliance issues?

   • AGrafana
   • BPrometheus
   • CKubernetes
   • DCheckov
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A development team wants to ensure that their application is deployed only if it passes all compliance checks. They use Jenkins for CI/CD. What is the best way to integrate compliance checks into the pipeline?

   • AAdd a Jenkins job that runs compliance checks and logs the results for auditing.
   • BAdd a Jenkins job that runs compliance checks and sends an email to the security team.
   • CAdd a Jenkins job that runs compliance checks and sends the results to a compliance team for manual review.
   • DAdd a Jenkins pipeline stage that runs compliance checks and fails the build if any checks fail.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   During a security incident, a response team needs to apply a hotfix to a production server. The hotfix involves changing a configuration file that is normally managed by a compliance policy. The team has a change management process that requires approval, but the incident requires immediate action. What is the best way to proceed?

   • AApply the hotfix immediately and then update the compliance policy to reflect the change.
   • BApply the hotfix under a pre-approved emergency change process, then update the configuration management and compliance policies afterward.
   • CFollow the normal change management process, which may take hours, to ensure compliance.
   • DUse a configuration management tool to apply the hotfix automatically, bypassing the change management process.
   Reveal Solution Discussion Select an answer first