Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
EC-Council logo

EC-CouncilCertified DevSecOps Engineer

Domain 2Objective 5

Software Composition Analysis (SCA) ECDE Practice Questions (Page 7)

Part of the Plan Stage: Threat Modeling and Pre-Commit Security domain, which makes up ~19% of our current practice bank.

44questions here
9free pages
9concepts

Questions 31–35

  1. 31foundation · easy

    Which type of open-source license typically requires that derivative works be distributed under the same license?

    Select an answer first
  2. 32foundation · easy

    Which of the following is a commonly used open-source Software Composition Analysis tool?

    Select an answer first
  3. 33application · medium

    A security team wants to integrate SCA scanning into their CI pipeline for a .NET application. They need a tool that can be run from the command line, generate reports in a format that can be consumed by their dashboard, and fail the build on high-severity vulnerabilities. Which tool should they choose?

    Select an answer first
  4. 34foundation · easy

    What is a Software Bill of Materials (SBOM)?

    Select an answer first
  5. 35foundation · easy

    What is the primary purpose of Software Composition Analysis (SCA) in a DevSecOps pipeline?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECDE

Keep studying — Plan Stage: Threat Modeling and Pre-Commit Security

Full ECDE curriculum →Every domain, objective & concept — with linked practiceECDE exam overview →EC-Council Certified DevSecOps Engineer

Other objectives in Plan Stage: Threat Modeling and Pre-Commit Security

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECDE” is a trademark of its owner, used for identification only.