A DevSecOps team uses Jira for task tracking. They have a strict compliance requirement that every code change must be linked to a Jira issue. Developers sometimes forget to include the issue key in commit messages. Which solution provides the most reliable enforcement with minimal overhead?

Use a pre-commit hook on each developer's machine to check the commit message.

Conduct weekly manual audits of the repository to find unlinked commits.

Implement a server-side Git hook that rejects commits without a valid Jira issue key in the message.

Rely on the Jira DVCS integration to automatically link commits to issues based on branch names.

What is a key benefit of linking a security task in a project management tool to a specific code change in an IDE?

It prevents all future security vulnerabilities from being introduced

It provides traceability from security requirements to code changes

It automatically fixes the security vulnerability in the code

It eliminates the need for code reviews

A team uses Jira to track security tasks and IntelliJ IDEA for development. They want to ensure that security tasks are not marked as 'Done' until the associated code has passed a security scan. The security scan runs in CI, and the team wants to automate the Jira transition. Which approach is most reliable?

Ask developers to manually transition the issue after the CI scan passes.

Use an IDE plugin that transitions the issue to 'Done' when the developer commits code.

Use a Jira automation that transitions the issue to 'Done' after a fixed time period.

Use a CI plugin that calls the Jira API to transition the issue to 'Done' only after the security scan passes.

A team uses Jira for project management and Visual Studio Code for development. They want to automatically create a Jira issue when a developer marks a code comment with 'TODO: security review'. Which approach would achieve this?

Use a Git hook that sends an email to the project manager when a commit contains 'TODO'.

Set up a Jira automation that creates a sub-task for every issue with a security label.

Ask developers to manually create a Jira issue for each TODO comment.

Use a Visual Studio Code extension that scans for TODO comments and creates Jira issues via the Jira API.

A team uses Trello for task tracking and Eclipse as the IDE. Security review tasks are often completed but not moved to the 'Done' list, so the board does not reflect actual progress. What is the most efficient way to keep the board accurate without requiring developers to switch contexts?

Send a daily email digest of completed tasks to the team.

Create a Trello automation that moves cards to 'Done' when a comment contains 'done'.

Use an Eclipse plugin that integrates with Trello and allows moving cards directly from the IDE.

Ask the security lead to manually move cards at the end of each day.

EC-CouncilDevSecOps Essentials

Domain 3Objective 1

Project Management and IDE Tools DSE Practice Questions (Page 3)

Part of the DevSecOps Toolchain domain, which makes up ~19% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

3concepts

Questions 11–15

11expert · hard
A DevSecOps team uses Jira for task tracking. They have a strict compliance requirement that every code change must be linked to a Jira issue. Developers sometimes forget to include the issue key in commit messages. Which solution provides the most reliable enforcement with minimal overhead?
Select an answer first
12foundation · easy
What is a key benefit of linking a security task in a project management tool to a specific code change in an IDE?
Select an answer first
13expert · hard
A team uses Jira to track security tasks and IntelliJ IDEA for development. They want to ensure that security tasks are not marked as 'Done' until the associated code has passed a security scan. The security scan runs in CI, and the team wants to automate the Jira transition. Which approach is most reliable?
Select an answer first
14application · medium
A team uses Jira for project management and Visual Studio Code for development. They want to automatically create a Jira issue when a developer marks a code comment with 'TODO: security review'. Which approach would achieve this?
Select an answer first
15application · medium
A team uses Trello for task tracking and Eclipse as the IDE. Security review tasks are often completed but not moved to the 'Done' list, so the board does not reflect actual progress. What is the most efficient way to keep the board accurate without requiring developers to switch contexts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “DSE” is a trademark of its owner, used for identification only.