Understanding DevSecOps DSE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A DevOps team wants to adopt DevSecOps principles. They currently have separate teams for development, operations, and security. The security team is often blamed for slowing down releases. Which principle should they adopt to address this issue?

   • ACentralized security authority, where the security team makes all security decisions.
   • BSecurity as a separate phase at the end of the pipeline.
   • CAutomated security testing only in production.
   • DShared responsibility, where all team members are accountable for security outcomes.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A large enterprise has separate development, operations, and security teams. The security team is responsible for all security decisions and performs audits only after releases. Developers are measured on feature delivery speed, while security is measured on the number of vulnerabilities found. The company wants to adopt DevSecOps but faces resistance. Which combination of changes best addresses the root cause of the resistance?

   • AHave the security team create a detailed security policy document and require developers to read it.
   • BKeep the current metrics but add automated security scanning to the pipeline.
   • CMove the security audit to the middle of the development cycle instead of after release.
   • DAdopt shared security metrics for all teams and embed security engineers into development squads.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   How does DevSecOps contribute to faster delivery of software?

   • ABy requiring manual approval for every code change
   • BBy automating security checks within the CI/CD pipeline
   • CBy reducing the number of deployments
   • DBy skipping security checks until after release
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company is deciding whether to adopt DevSecOps. They currently have a slow release cycle because security reviews are done manually at the end. They also have a high rate of production incidents. Management is concerned that adding security automation will increase costs. Which argument best justifies the adoption of DevSecOps?

   • ASecurity automation will allow the company to reduce its security team to zero, saving on salaries.
   • BDevSecOps will increase the release cycle time, giving the security team more time to review code.
   • CDevSecOps will completely eliminate production incidents, so the company will save money on incident response.
   • DAutomated security checks will reduce the cost of fixing vulnerabilities by catching them earlier, which can offset the initial investment in tooling.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary difference between DevOps and DevSecOps?

   • ADevSecOps eliminates the need for operations teams
   • BDevOps is only for development teams, while DevSecOps includes operations
   • CDevSecOps integrates security practices into the DevOps lifecycle
   • DDevOps focuses on automation, while DevSecOps focuses on manual processes
   Reveal Solution Discussion Select an answer first