Pillars, Benefits, and Challenges of DevSecOps DSE Practice Questions (Page 7)

Questions 31–34

1. 31foundation · easy

   Which of the following is a key benefit of adopting DevSecOps?

   • AReducing the need for collaboration between development and operations teams
   • BGuaranteeing that all vulnerabilities are completely eliminated
   • CEliminating the need for manual security reviews
   • DImproving security while enabling faster and more frequent delivery
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A large organization has multiple development teams with varying levels of security maturity. The security team wants to enforce a minimum security standard, but some teams argue that it will slow down their delivery. The organization also faces a skill gap in security. Which approach best balances the need for security standards with team autonomy and skill development?

   • ADefine a baseline security standard with automated checks that all teams must pass, and provide a security champion program to help teams meet the standard.
   • BRequire all teams to adopt the same security tools and processes as the most mature team.
   • CDelay the implementation of security standards until all teams are equally skilled.
   • DAllow each team to define its own security standards based on their delivery speed.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   In the DevSecOps model, the four pillars are often described as culture, automation, measurement, and sharing. Which of the following best describes the role of the 'sharing' pillar?

   • AUsing metrics to measure the effectiveness of security controls
   • BEnsuring that security tools are integrated into the CI/CD pipeline
   • CPromoting the exchange of knowledge, feedback, and reusable security practices across teams
   • DEstablishing a culture of collaboration and open communication among teams
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A large enterprise is trying to implement DevSecOps. They have multiple teams using different CI/CD tools and security tools that do not integrate well. Which action best addresses the tool integration challenge?

   • ADisable security tools that do not integrate with the current CI system.
   • BLet each team choose its own security tools and report results in a shared spreadsheet.
   • CRequire each team to manually export security findings and email them to the security team.
   • DStandardize on a common CI/CD platform and use APIs to connect security tools.
   Reveal Solution Discussion Select an answer first