A mid-sized software company is starting a DevSecOps initiative. The security team has traditionally worked in isolation, performing audits only at the end of each sprint. Developers see security as a blocker and rarely communicate with security engineers. The company has purchased a suite of security tools, but the teams are unsure how to integrate them into their existing CI/CD pipeline. Which challenge is the company most directly facing?

Tool integration and skill gaps

Skill gaps and lack of automation

Cultural resistance and skill gaps

Tool integration and cultural resistance

A company wants to adopt DevSecOps to improve security and speed up delivery. They have a mature CI/CD pipeline but no security tools integrated. The security team is small and not familiar with the CI/CD platform. Which approach best achieves the benefits of DevSecOps while minimizing disruption?

Integrate all security tools at once to maximize coverage.

Have the security team manually review all code changes until they learn the CI/CD platform.

Replace the existing CI/CD platform with one that has built-in security features.

Start with a single security tool that integrates with the existing pipeline, and provide training to the security team on the CI/CD platform.

A company wants to adopt DevSecOps to improve security, but they are concerned about the cost of new tools and training. They have a limited budget and cannot afford to replace their existing CI/CD platform. Which approach best achieves the benefits of DevSecOps within these constraints?

Use manual security reviews instead of tools to save money.

Delay DevSecOps adoption until the budget increases.

Purchase a comprehensive commercial security suite and train all employees at once.

Start with open-source security tools that integrate with the existing CI/CD platform and provide targeted training to key team members.

EC-CouncilDevSecOps Essentials

Domain 2Objective 5

Pillars, Benefits, and Challenges of DevSecOps DSE Practice Questions (Page 5)

Part of the DevOps and DevSecOps Foundations domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

3concepts

Questions 21–25

21foundation · easy
Which of the following is a core pillar of DevSecOps that focuses on the mindset and behaviors of the people involved?
Select an answer first
22application · medium
A company is implementing DevSecOps, but the development and security teams have conflicting goals. Developers are measured on feature delivery speed, while security is measured on the number of vulnerabilities found. This has led to tension, with developers viewing security as an obstacle. Which DevSecOps challenge is the company most directly experiencing?
Select an answer first
23application · medium
A mid-sized software company is starting a DevSecOps initiative. The security team has traditionally worked in isolation, performing audits only at the end of each sprint. Developers see security as a blocker and rarely communicate with security engineers. The company has purchased a suite of security tools, but the teams are unsure how to integrate them into their existing CI/CD pipeline. Which challenge is the company most directly facing?
Select an answer first
24expert · hard
A company wants to adopt DevSecOps to improve security and speed up delivery. They have a mature CI/CD pipeline but no security tools integrated. The security team is small and not familiar with the CI/CD platform. Which approach best achieves the benefits of DevSecOps while minimizing disruption?
Select an answer first
25expert · hard
A company wants to adopt DevSecOps to improve security, but they are concerned about the cost of new tools and training. They have a limited budget and cannot afford to replace their existing CI/CD platform. Which approach best achieves the benefits of DevSecOps within these constraints?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.

Pillars, Benefits, and Challenges of DevSecOps DSE Practice Questions (Page 5)

Questions 21–25

Which of the following is a core pillar of DevSecOps that focuses on the mindset and behaviors of the people involved?

A company wants to adopt DevSecOps to improve security and speed up delivery. They have a mature CI/CD pipeline but no security tools integrated. The security team is small and not familiar with the CI/CD platform. Which approach best achieves the benefits of DevSecOps while minimizing disruption?

A company wants to adopt DevSecOps to improve security, but they are concerned about the cost of new tools and training. They have a limited budget and cannot afford to replace their existing CI/CD platform. Which approach best achieves the benefits of DevSecOps within these constraints?

Keep studying — DevOps and DevSecOps Foundations