Project Management and IDE Tools DSE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A developer uses Visual Studio Code to write code in multiple languages (Python, JavaScript, and Java). The team wants to apply consistent security linting across all languages. What is the best way to configure the IDE?

   • AUse a pre-commit hook that runs all linters, but only in the CI pipeline.
   • BUse a single generic linter that claims to support all languages.
   • CRely on the IDE's built-in code analysis for all languages.
   • DInstall language-specific security linters (e.g., Bandit for Python, ESLint with security plugins for JavaScript, SpotBugs for Java) and configure them in the IDE.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A developer uses Eclipse to write Java code. The team's DevSecOps policy requires that all code be checked for common vulnerabilities before it is committed. Which Eclipse feature or configuration best supports this requirement?

   • AEnable the Eclipse compiler to show all warnings as errors.
   • BUse a Jira automation to assign a security reviewer to every issue.
   • CCreate a code template that includes a security comment block.
   • DInstall a static analysis plugin such as SpotBugs with security rules enabled.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A DevSecOps team uses Jira for task tracking and Visual Studio Code for development. They have a strict policy that all security fixes must be linked to a Jira issue. Developers often forget to link their commits, and the security lead wants to enforce this without adding friction. Which approach best balances enforcement and developer experience?

   • AAdd a Jira workflow validator that rejects issues without a linked commit.
   • BUse a Git pre-receive hook that rejects pushes without a Jira key.
   • CAsk developers to add the Jira key in the pull request description instead of the commit message.
   • DConfigure a Visual Studio Code extension that blocks commits without a Jira issue key in the commit message.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A DevSecOps team uses Jira for task management and Visual Studio Code for development. They want to automatically transition a Jira issue to 'In Review' when a pull request is created. What is the best way to set this up?

   • AAsk developers to manually change the status in Jira after creating the pull request.
   • BSet up a webhook in Jira that listens for pull request events from the repository.
   • CConfigure the IDE to automatically transition the issue when the developer types 'review' in a comment.
   • DUse a CI/CD pipeline step that calls the Jira API to transition the issue when the pull request is opened.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A DevSecOps team uses Trello to track security training tasks. A developer completes a training course but the card remains in 'In Progress'. The team wants to reduce manual board updates. What is the best way to automate this?

   • AAsk the developer to move the card manually after completing the training.
   • BCreate a Trello rule that moves cards to 'Done' after a fixed time period.
   • CUse a Trello automation that moves the card to 'Done' when the developer checks a checkbox on the card.
   • DUse an IDE plugin that moves the Trello card when the developer commits code.
   Reveal Solution Discussion Select an answer first