Describe How to Integrate Security Sensors and Controls into DevOps Workflows. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security team is deploying a new microservices-based application. They want to monitor the runtime behavior of the services for anomalies. They have decided to use a service mesh. What is the primary security benefit of integrating the service mesh's telemetry with Splunk?

   • AIt replaces the need for a web application firewall
   • BIt automatically patches vulnerabilities in the application code
   • CIt provides a detailed audit log of all user authentication events
   • DIt enables deep visibility into inter-service communication, allowing for the detection of anomalous traffic patterns and potential lateral movement
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In an automated DevOps workflow, what is a typical automated response when a security control detects a critical vulnerability in a build?

   • AThe security team is paged but the build continues
   • BThe build is automatically deployed to production for further testing
   • CThe pipeline automatically halts the build and alerts the development team
   • DThe vulnerability is logged and the build continues to production
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is implementing a policy that requires all infrastructure-as-code (IaC) templates to be checked for insecure configurations before they are applied. The team uses Terraform and a CI/CD pipeline. At which stage of the DevOps workflow should this security control be integrated to be most effective?

   • AIn the plan stage, before the apply stage
   • BIn the code review process, as a manual checklist
   • CIn the application runtime, by scanning the deployed resources
   • DIn the post-deployment monitoring stage
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does security feedback from sensors and controls improve DevOps workflows?

   • ABy replacing the need for any further security testing
   • BBy providing insights that lead to updating security policies and improving the pipeline
   • CBy providing a one-time report at the end of the project
   • DBy automatically fixing all vulnerabilities without human intervention
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A DevOps team is implementing a policy that requires all production changes to be traceable to an approved work item. They are using a CI/CD pipeline and an issue tracker. The security team wants to enforce this policy automatically. What is the most effective way to implement this control?

   • ARequire the developer to include the work item ID in the commit message and manually verify it during the code review
   • BConfigure the pipeline to check the commit message for a valid work item ID and fail the build if it is missing or invalid
   • CHave the security team audit the production environment weekly to check for untraceable changes
   • DCreate a post-deployment report that lists all changes and their associated work items
   Reveal Solution Discussion Select an answer first