A DevSecOps team uses Trello for task tracking and Visual Studio Code for development. They want to enforce that every code change is associated with a Trello card. The team is distributed and some developers work offline. Which approach best balances enforcement and offline usability?

Use a Trello automation that creates a card for every new branch.

Use a Git pre-receive hook that rejects pushes without a Trello card ID.

Use a Visual Studio Code extension that requires a Trello card ID in the commit message, but allows commits to proceed offline with a warning.

Ask developers to add the Trello card ID in the pull request description.

A DevSecOps team uses Jira to track tasks and IntelliJ IDEA for development. They want to automatically add a comment to the Jira issue when a build fails due to a security check. What is the best approach?

Use the IDE's built-in terminal to run the build and then manually update Jira.

Set up an email alert that sends the build log to the team's mailing list.

Ask the developer to manually copy the build log into the Jira issue.

Configure the CI pipeline to call the Jira API to add a comment to the issue when the build fails.

A DevSecOps team uses Trello to manage its security hardening tasks. A developer finishes a task but forgets to move the card to 'Done', so the team's burndown chart is inaccurate. What is the most effective way to keep the burndown chart accurate with minimal manual effort?

Use a Trello power-up that displays the burndown chart on the dashboard.

Integrate the IDE with Trello so that when a commit references a card, the card moves to 'Done' automatically.

Ask the project manager to check with each developer at the end of the day and move cards.

Create a Trello rule that moves any card with a 'security' label to 'Done' after 24 hours.

A developer uses Visual Studio Code to write Python code that handles sensitive data. The team's DevSecOps policy requires static analysis to run before code is merged. Which IDE setup would best support this policy?

Configure the IDE to format code automatically on save.

Run a manual code review checklist before every merge.

Use a Jira automation to create a security review task for every new issue.

Install a Python security linter extension that runs on save and displays issues in the editor.

EC-CouncilDevSecOps Essentials

Domain 3Objective 1

Project Management and IDE Tools DSE Practice Questions (Page 2)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

3concepts

Questions 6–10

6expert · hard
A DevSecOps team uses Trello for task tracking and Visual Studio Code for development. They want to enforce that every code change is associated with a Trello card. The team is distributed and some developers work offline. Which approach best balances enforcement and offline usability?
Select an answer first
7foundation · easy
Which of the following is a popular integrated development environment (IDE) that provides features such as code completion, debugging, and plugin support for secure coding?
Select an answer first
8application · medium
A DevSecOps team uses Jira to track tasks and IntelliJ IDEA for development. They want to automatically add a comment to the Jira issue when a build fails due to a security check. What is the best approach?
Select an answer first
9application · medium
A DevSecOps team uses Trello to manage its security hardening tasks. A developer finishes a task but forgets to move the card to 'Done', so the team's burndown chart is inaccurate. What is the most effective way to keep the burndown chart accurate with minimal manual effort?
Select an answer first
10application · medium
A developer uses Visual Studio Code to write Python code that handles sensitive data. The team's DevSecOps policy requires static analysis to run before code is merged. Which IDE setup would best support this policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.