VAPT Strategy ECDE Practice Questions (Page 11)

Questions 51–53

1. 51foundation · easy

   What is the primary objective of a vulnerability assessment compared to a penetration test?

   • ATo verify that all security patches are applied
   • BTo test the incident response capability of the organization
   • CTo exploit vulnerabilities to demonstrate business impact
   • DTo identify and classify potential vulnerabilities in systems and applications
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A DevSecOps team wants to automatically block a release if a critical vulnerability is found in the application code. They have a CI/CD pipeline that builds and tests the application. Which approach should they take?

   • AIntegrate a SAST tool into the pipeline and configure it to fail the build when critical findings are detected.
   • BRun a DAST scan after deployment and manually review the results.
   • CPerform a manual code review before each release.
   • DUse a container image scanner and alert the security team on critical findings.
   Reveal Solution Discussion Select an answer first
3. 53application · medium

   A DevSecOps team wants to ensure that no known critical vulnerabilities are present in the container images used in their production environment. They want to enforce this policy automatically at build time. Which approach should they implement?

   • AUse a runtime security tool that blocks exploitation attempts in production.
   • BAdd a container image scanning step to the CI/CD pipeline that fails the build if a critical vulnerability is found.
   • CRun a nightly vulnerability scan on the production registry and send alerts for critical findings.
   • DRequire developers to manually run a vulnerability scanner on their local machines before pushing code.
   Reveal Solution Discussion Select an answer first