Securing the DevOps Workflow GCSA Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a microservices architecture deployed on Kubernetes. The security team wants to detect and respond to a potential security incident where an attacker might be moving laterally between pods. They have a SIEM that collects logs from the cluster. Which practice should they implement to improve detection?

   • ARely on the container runtime's default logging and do not integrate with the SIEM.
   • BUse a third-party tool that scans the cluster for vulnerabilities on a weekly basis.
   • CManually review the Kubernetes audit logs once a month for any suspicious activity.
   • DEnable audit logging on the Kubernetes API server and network policy logs, and create alerts for suspicious pod-to-pod communication.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A development team wants to integrate automated security testing into their CI pipeline for a Java application. They need to catch vulnerabilities in the source code, in third-party libraries, and in the final container image. Which set of tools should they add to the pipeline?

   • ADAST scanner, SAST scanner, and a network vulnerability scanner.
   • BDependency scanner and a container image scanner only.
   • CSAST scanner and a DAST scanner only.
   • DSAST scanner, dependency scanner, and container image scanner.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a key consideration when responding to a security incident in a containerized environment?

   • AContainers do not generate logs, so monitoring is unnecessary
   • BContainers are ephemeral and may be replaced automatically, so evidence must be collected quickly
   • CContainers are immutable and cannot be compromised
   • DContainers are isolated from the host, so incidents cannot affect other containers
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why is automated rotation of secrets important in a DevOps workflow?

   • AIt eliminates the need for encryption of data at rest
   • BIt allows developers to share secrets more easily across teams
   • CIt ensures that all secrets are stored in plain text for easier access
   • DIt limits the window of exposure if a secret is compromised
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a key security benefit of using configuration management tools in a DevOps environment?

   • AThey ensure that systems are configured consistently and securely across the environment
   • BThey automatically patch all vulnerabilities without human intervention
   • CThey eliminate the need for security monitoring
   • DThey prevent all unauthorized access to cloud resources
   Reveal Solution Discussion Select an answer first