Workload and Application Code Security KCSA Practice Questions (Page 7)

Questions 31–33

1. 31expert · hard

   A development team is adopting a Secure Development Lifecycle (SDL). They want to integrate security checks into their CI pipeline without slowing down developers. Which approach balances security and speed?

   • ARun a full suite of scans on every commit, including DAST and penetration tests.
   • BSkip security scans to speed up development.
   • CRun all security scans only before production releases.
   • DRun fast SAST scans on every commit and deeper scans on pull requests.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which practice directly mitigates the risk of a compromised dependency being used in a container image?

   • ADisabling all automated dependency updates
   • BUsing the latest version of all dependencies without version pinning
   • CPinning dependencies to specific versions and verifying checksums
   • DStoring all dependencies in a public registry
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   What is the primary role of Linux namespaces in container isolation?

   • ATo encrypt data at rest
   • BTo provide each container with its own view of system resources
   • CTo scan container images for vulnerabilities
   • DTo limit the CPU and memory a container can use
   Reveal Solution Discussion Select an answer first