Pillars, Benefits, and Challenges of DevSecOps DSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common challenge when implementing DevSecOps?

   • ALack of available security tools in the market
   • BToo much automation leading to fewer security checks
   • CCultural resistance from teams accustomed to traditional security processes
   • DDifficulty in finding any security professionals to hire
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A startup is moving from a monolithic application to microservices. They want to adopt DevSecOps to ensure security is not an afterthought. Which approach best leverages the benefits of DevSecOps in this transition?

   • AImplement security controls as code and integrate them into each microservice's CI/CD pipeline.
   • BUse the same security configuration for all microservices without considering their specific contexts.
   • CCentralize all security testing in a single annual audit for all microservices.
   • DDelay security implementation until after the microservices are fully deployed.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A large enterprise is adopting DevSecOps. The security team is used to being the sole authority on security decisions and is reluctant to share that responsibility with development teams. Developers are also hesitant to take on security tasks because they feel they lack the necessary training. Which two challenges is the enterprise most likely facing?

   • ASkill gaps and tool integration
   • BCultural resistance and lack of automation
   • CTool integration and cultural resistance
   • DCultural resistance and skill gaps
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is adopting DevSecOps but the operations team is resistant because they fear that security automation will slow down their deployments. Which approach best addresses this cultural resistance?

   • ATell operations that security is more important than deployment speed.
   • BInvolve operations in the design of the security automation to ensure it meets their performance needs.
   • CPromise operations that security checks will never add more than one second to deployment time.
   • DImplement security automation without consulting operations to avoid delays.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial services firm is starting a DevSecOps initiative. The development teams are used to working independently and view security as a separate department's responsibility. The security team is concerned about losing control. Which action most directly addresses the cultural resistance challenge?

   • ACreate cross-functional teams that include security champions and establish shared goals for secure delivery.
   • BMandate that all security decisions must be approved by the security team lead before any deployment.
   • CReplace the security team with automated tools to eliminate human involvement.
   • DProvide security training to developers but keep the reporting structure unchanged.
   Reveal Solution Discussion Select an answer first