Project Management and IDE Tools DSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A developer uses Visual Studio Code to write JavaScript. The team wants to prevent secrets (e.g., API keys) from being committed to the repository. Which IDE feature or extension should be used?

   • AEnable the IDE's auto-save feature to ensure code is saved frequently.
   • BUse the built-in search feature to manually look for common key names.
   • CSet the IDE to minify the code before saving.
   • DInstall a secrets scanner extension like 'GitLeaks' or 'trufflehog' that runs in the IDE and flags secrets before commit.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A team uses Jira for project management and IntelliJ IDEA for development. They want to automatically assign a Jira issue to the developer who commits code that introduces a security vulnerability. What is the most effective way to achieve this?

   • AUse a Jira automation rule that assigns the issue to the project lead.
   • BUse the IDE to automatically assign the issue to the developer who last edited the file.
   • CUse a CI pipeline that runs static analysis, identifies the author of the offending commit, and calls the Jira API to assign the issue to that developer.
   • DAsk the security team to manually assign the issue after reviewing the CI report.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A team uses Trello for project management and Visual Studio Code for development. They have a mixed environment with some developers using Windows and others using Linux. They want to automate the creation of Trello cards from security scan results in the CI pipeline. What is the most portable and maintainable solution?

   • AUse a bash script that calls the Trello API.
   • BUse a browser automation tool like Selenium to create cards.
   • CUse a PowerShell script that calls the Trello API.
   • DWrite a Python script that uses the Trello REST API and run it in the CI pipeline.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A small DevSecOps team uses Jira to manage its backlog and Visual Studio Code for development. They want to enforce that every code change references a valid Jira issue key. Which approach best enforces this policy at the developer's workstation?

   • ARequire developers to manually type the issue key in the commit message and rely on code review.
   • BUse a Git pre-receive hook on the server to reject commits without a Jira key.
   • CInstall a Visual Studio Code extension that validates the commit message contains a Jira issue key before allowing the commit.
   • DAdd a Jira workflow validator that rejects issues without a linked code commit.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A developer is about to commit a change that introduces a hardcoded API key. The team uses JetBrains IntelliJ IDEA and Jira. Which IDE feature or configuration would most directly prevent this from reaching the shared repository?

   • AEnable the IDE's built-in secret detection plugin that scans for credentials and blocks the commit.
   • BSet up a Jira automation rule that flags any issue with a security label.
   • CConfigure the IDE to run a linter that checks for unused variables.
   • DAsk the developer to manually review the diff before pushing.
   Reveal Solution Discussion Select an answer first