Pillars, Benefits, and Challenges of DevSecOps DSE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An e-commerce company wants to release new features weekly. Their current security review process takes two weeks per release. Which DevSecOps benefit would most directly address this problem?

   • AFaster delivery by integrating security checks into the CI/CD pipeline.
   • BReduced costs by eliminating the security team.
   • CImproved security by adding more manual checks before release.
   • DEnhanced collaboration by having security attend all release meetings.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is adopting DevSecOps and has implemented automated security scanning in the CI/CD pipeline. As a result, developers receive immediate feedback on vulnerabilities and can fix them during development. Which benefit of DevSecOps is the company most directly realizing?

   • AReduction in the number of security tools needed
   • BIncreased manual security review effort
   • CElimination of all security vulnerabilities
   • DFaster delivery of secure software
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has adopted DevSecOps, but the security team is overwhelmed with alerts from automated tools, and developers are ignoring security notifications because they are not prioritized. The company wants to improve the situation without adding more staff. Which approach best addresses this challenge?

   • AImplement a risk-based prioritization system that filters and ranks alerts, and integrate the top findings into the developers' workflow.
   • BIncrease the number of automated tools to catch more issues.
   • CSend all alerts to the security team only and let them decide what to fix.
   • DDisable automated alerts and rely on manual security reviews.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A retail company's security team has been approving every production deployment after a manual checklist review. This process often takes days and has become a bottleneck. The company wants to adopt DevSecOps to speed up delivery while keeping security checks. Which approach best embodies the DevSecOps pillars of automation and sharing?

   • ACreate a separate security pipeline that runs after production deployment and reports issues to the security team only.
   • BEmbed automated security scanning into the CI/CD pipeline and share the results with both development and security teams through a common dashboard.
   • CKeep the manual security review but ask the security team to work overtime to clear the backlog faster.
   • DAllow developers to self-approve their own deployments without any security review.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has implemented DevSecOps, but the security team is not sharing threat intelligence with the development teams. Developers are making security mistakes that could have been avoided. The company wants to improve collaboration without creating additional meetings. Which approach best promotes the sharing pillar?

   • AKeep threat intelligence within the security team to avoid overwhelming developers.
   • BRequire developers to attend a weekly security briefing.
   • CSend security alerts via email to all developers.
   • DCreate a shared knowledge base where security team posts threat intelligence and developers can search it during development.
   Reveal Solution Discussion Select an answer first