Project Management and IDE Tools DSE Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A team uses Visual Studio Code for development and Jira for task tracking. They want to automatically run a security linter on every file save and create a Jira issue if a critical vulnerability is found. However, they are concerned about performance impact on the IDE. What is the best approach?

   • ARun the linter in the background on save and only create a Jira issue if the vulnerability is critical, using a debounce to avoid spamming.
   • BUse a separate terminal to run the linter manually after each save.
   • CRun the linter on every keystroke and create a Jira issue for every warning.
   • DDisable the linter in the IDE and only run it in the CI pipeline.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary role of a project management tool like Trello in a DevSecOps context?

   • ATo track the progress of security tasks and development workflows
   • BTo automate the deployment of applications to production
   • CTo scan source code for vulnerabilities and generate reports
   • DTo compile and package application code into deployable artifacts
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A developer uses Visual Studio Code to write JavaScript. The team's DevSecOps policy requires that all dependencies be checked for known vulnerabilities before merge. The developer wants to see this information in the IDE without slowing down the build. Which approach best meets this need?

   • AUse a Jira automation to create a task for each dependency update.
   • BInstall an IDE extension that runs a dependency vulnerability scan on the package.json and displays results in the editor.
   • CAsk developers to manually check the npm audit output before every commit.
   • DRun the dependency scan only in CI and report results after merge.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A developer is using Visual Studio Code to write C# code. The team wants to enforce the use of secure cryptographic algorithms (e.g., AES instead of DES). Which IDE feature should be used?

   • ARun the application in debug mode to test the encryption.
   • BManually review the code after each commit.
   • CUse the IDE's code formatting to ensure consistent indentation.
   • DEnable the built-in analyzer or install an extension that flags weak cryptographic algorithms.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A DevSecOps team uses Jira for project management and IntelliJ IDEA for development. They want to enforce that no code is merged into the main branch unless the associated Jira issue is in 'Approved' status. What is the most effective way to implement this?

   • AAsk the project manager to manually verify the Jira status before each merge.
   • BUse a CI pipeline that checks the Jira issue status via API and fails the build if the issue is not 'Approved'.
   • CRely on the IDE to block the merge if the issue is not approved.
   • DUse a pre-commit hook on the main branch to check the Jira status.
   Reveal Solution Discussion Select an answer first