Securing the DevOps Workflow GCSA Practice Questions (Page 11)

Questions 51–52

1. 51application · medium

   A company deploys microservices to a cloud environment and wants to detect anomalous behavior, such as unexpected network connections or unauthorized API calls, in real time. Which monitoring approach best supports this requirement?

   • AUse a cloud provider's basic monitoring that only tracks CPU and memory usage.
   • BEnable verbose logging on each service and store logs locally on the instance for later review.
   • CSet up a weekly report that summarizes all security events from the past seven days.
   • DCollect and aggregate logs and metrics from all services into a centralized SIEM with alerting rules.
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   In a CI/CD pipeline, which stage is the most appropriate to automatically run a static application security test (SAST) on the source code?

   • ADuring the deployment stage, after the artifact is deployed to production
   • BDuring the build stage, before the artifact is packaged
   • CDuring the post-deployment monitoring phase, using runtime logs
   • DDuring the planning phase, before any code is written
   Reveal Solution Discussion Select an answer first