Project Management and IDE Tools DSE Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   How does integrating a project management tool with an IDE enhance a DevSecOps workflow?

   • ABy replacing the need for version control systems
   • BBy eliminating the need for security testing tools
   • CBy automatically deploying code to production after every commit
   • DBy allowing developers to view and update task status without leaving the IDE
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A team uses Eclipse for Java development and Jira for tracking. They want to run static security analysis in the IDE, but the analysis is CPU-intensive and slows down the IDE for developers. The team also wants to keep the CI pipeline fast. Which approach best balances developer productivity and security coverage?

   • ARun the full static analysis only in CI and disable all IDE analysis.
   • BRun the full static analysis in the IDE only on demand, and skip it in CI.
   • CRun the full static analysis in the IDE on every keystroke and in CI on every commit.
   • DRun a lightweight security linter in the IDE on save and a full static analysis in CI on every pull request.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A developer uses Visual Studio Code and wants to ensure that all code commits are signed with a GPG key. The team uses Jira for task tracking. What is the best way to enforce this in the IDE?

   • ARely on the IDE's built-in signing feature without any server-side enforcement.
   • BConfigure the IDE to use the GPG key for signing commits and set up a server-side hook to reject unsigned commits.
   • CUse a pre-commit hook to sign the commit automatically.
   • DAsk developers to manually sign each commit using the terminal.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A small team uses Trello for project management and PyCharm for Python development. They want to ensure that each code change is associated with a Trello card. What is the most practical way to enforce this?

   • AUse the Trello API to create a new card for every commit automatically.
   • BRely on the team's memory to remember which card each change belongs to.
   • CAsk developers to add the Trello card name as a comment in the code.
   • DRequire developers to include the Trello card short link or ID in the commit message and use a pre-commit hook to validate it.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A developer is using Visual Studio Code to write Python code. The team wants to catch common security issues (e.g., SQL injection, hardcoded passwords) before code is committed. Which IDE feature should the developer enable to get real-time feedback?

   • AEnable the built-in debugger and set breakpoints on every function call.
   • BInstall a linter extension that supports security rules, such as Bandit for Python.
   • CUse the integrated terminal to run the application after each change.
   • DConfigure the IDE to auto-format the code on save.
   Reveal Solution Discussion Select an answer first