Role of DevSecOps in the CI/CD Pipeline DSE Practice Questions (Page 10)

Questions 46–48

1. 46application · medium

   A team is adopting DevSecOps and wants to ensure that security is a shared responsibility across developers, operations, and security teams. Which practice best supports this principle?

   • AInvolve security engineers in the design phase and provide developers with security training and tools.
   • BHave the security team review code only after deployment.
   • CKeep security testing as a separate phase performed only by the security team.
   • DRequire developers to manually run security tools without guidance.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is the role of audit logging in a DevSecOps pipeline with respect to compliance?

   • AIt is optional if the pipeline uses automated tests.
   • BIt provides a chronological record of pipeline activities that can be reviewed to demonstrate compliance.
   • CIt replaces the need for automated security testing.
   • DIt is only required for pipelines that handle credit card data.
   Reveal Solution Discussion Select an answer first
3. 48foundation · easy

   Which security control is most appropriate to integrate at the deployment stage of a CI/CD pipeline?

   • ACollecting user feedback on the application's usability.
   • BReviewing the project's requirements document for completeness.
   • CVerifying that the deployment target meets security baseline configurations.
   • DRunning a SAST scan on the source code repository.
   Reveal Solution Discussion Select an answer first