Project Management and IDE Tools DSE Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A team uses IntelliJ IDEA for Java development and Jira for tracking. They want to run a security-focused code review in the IDE, but the team's security expert is remote and cannot review every change. Which approach best leverages the IDE to support the security review process?

   • AUse a Git hook that sends the code to the security expert for review before commit.
   • BUse an IDE plugin that runs automated security checks and flags issues for the developer to review before committing.
   • CAsk the security expert to review all code changes manually in the IDE.
   • DUse a Jira automation to assign a security reviewer to every issue.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A DevSecOps team uses Jira for task tracking and Visual Studio Code for development. They want to automatically create a Jira issue when a security vulnerability is found in the IDE, but they are concerned about creating duplicate issues for the same vulnerability. What is the best way to prevent duplicates?

   • ACreate a new issue every time the linter runs, regardless of whether it's the same vulnerability.
   • BUse a Jira automation rule to close duplicate issues automatically.
   • CAsk developers to manually check for existing issues before creating a new one.
   • DUse a unique identifier (e.g., vulnerability ID) in the Jira issue summary and have the integration check for existing issues before creating a new one.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A DevSecOps team uses Jira to track security remediation tasks. A developer finishes fixing a critical vulnerability in the IDE and commits the code. What is the most effective way to automatically link the commit to the Jira issue so that the workflow updates without manual effort?

   • ACreate a new Jira issue for the commit and manually copy the commit hash into the issue description.
   • BInclude the Jira issue key (e.g., PROJ-123) in the commit message and configure the Jira DVCS integration to sync the repository.
   • CUse a Jira webhook that triggers on every push and automatically creates a new issue for each commit.
   • DAsk the developer to send the commit link to the team chat so the project manager can update the Jira issue manually.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security team uses Trello boards to track vulnerability remediation tasks. They want to automatically create a Trello card when a new vulnerability is detected in the CI pipeline. What is the most efficient way to achieve this?

   • AConfigure the CI tool to send an email to the Trello board's email address.
   • BUse Trello's REST API to create a card from the CI pipeline script when a vulnerability is found.
   • CHave the security team manually create a card after reviewing the CI report.
   • DUse a browser extension to copy the CI output into a new card.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A team uses Jira for project management and Eclipse for development. They want to automatically link a Jira issue to a commit when the developer mentions the issue key in the commit message. However, they also want to prevent the issue from being transitioned to 'Done' until the code is merged. Which integration would best achieve this?

   • AUse a Git hook that adds the Jira link to the commit and a CI plugin that transitions the issue to 'Done' after merge.
   • BUse an IDE plugin that links the issue and transitions it to 'Done' on commit.
   • CAsk developers to manually link the issue and transition it after merge.
   • DUse a Jira automation that transitions the issue to 'Done' when a commit is linked.
   Reveal Solution Discussion Select an answer first