Pillars, Benefits, and Challenges of DevSecOps DSE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does DevSecOps enhance collaboration among teams?

   • ABy isolating security responsibilities to a dedicated security team
   • BBy integrating security practices into the daily work of development and operations teams
   • CBy reducing communication between teams to avoid delays
   • DBy automating all security decisions so no human input is needed
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A software company is struggling with frequent security incidents in production. Their current process runs security tests only after the code is deployed. They want to adopt DevSecOps to reduce these incidents. Which change best aligns with DevSecOps principles to achieve this goal?

   • ADelay releases until a full manual security review is completed
   • BMove all security testing to a dedicated external team
   • CIncrease the frequency of post-deployment security audits
   • DShift security testing earlier in the development lifecycle
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A DevOps team wants to measure the effectiveness of their new DevSecOps practices. They have implemented automated security scanning and want to track whether security is improving without slowing down delivery. Which metric best aligns with the 'measurement' pillar?

   • ATotal time spent by the security team in manual reviews.
   • BPercentage of developers who completed security training.
   • CNumber of security tools deployed in the CI/CD pipeline.
   • DMean time to remediate (MTTR) for security vulnerabilities found in production.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An e-commerce company is moving from a traditional security model to DevSecOps. In the past, security reviews were conducted by a separate team after development was complete, leading to frequent last-minute vulnerabilities and release delays. The company now wants to embed security into every stage of the development lifecycle. Which benefit of DevSecOps is the company most directly seeking to achieve?

   • AImproved security through continuous, early detection of vulnerabilities
   • BReduced cost by using only open-source security tools
   • CFaster delivery by eliminating all security testing
   • DEnhanced collaboration between development and security teams
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization is adopting DevSecOps and wants to track its progress. They have implemented automated security scanning and have seen a reduction in vulnerabilities, but they are unsure if the changes are actually improving their overall security posture. Which DevSecOps pillar should they focus on to gain visibility into their progress?

   • ASharing
   • BAutomation
   • CCulture
   • DMeasurement
   Reveal Solution Discussion Select an answer first