Free PeopleCert DevSecOps Practice Exam with Questions & Answers

A security analysis of all software is performed prior to the release to ensure they are secure in operations.

Security monitoring of software is performed during operations to detect security events more quickly.

A security analysis of software is incorporated and automated throughout development and operations.

Security events are analyzed after they occur to help understand how to prevent them in the future

A person sends a message that is encrypted by using their private key, and the receiver must also use that private key to decipher the message.

Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of public keys.

Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of secure private keys.

A person sends a message that is encrypted by the use of a public key, and the receiver can decipher the message using their private key.

Ensures that customer input into functional requirements is translated into descriptive user stones

Ensures that the software is designed and written to support integrity and compliance requirements

Ensures that the Ague definition of done includes both functional and nonfunctional requirements for value

Ensures that architectural residence is built into software design to ensure high availability requirements

Designed

Embedded

integrated

Automated

Process

Governance

Technology

People

A software release process that uses automated testing and autonomous deployment

A coding approach where branches are merged to a master branch multiple times a day

A rapid incident response plan for increased visibility and mitigation of failure

A set of practices to ensure code can be deployed rapidly and safely to production

Transform themselves into coaches and tool smiths

Get involved in the SDLC before a service goes live

Attend trainings to enhance practical security skills

Perform regular security assessments and pen tests

Source code must be checked for programmatic and stylistic errors

Secrets information must be stored for secure back-end service calls

They must be designed to run safely outside of the secure network

Data must be kept secure to prevent leaking to other applications

Not prioritizing the set of critical customer feature in the current sprint

Not including the addition of security controls in the definition of done

Not developing comprehensive documentation and training material

Not establishing all the product requirements prior to the first iteration

It provides strict guidance on the compliance regulations of web application design.

It provides a starting place for awareness, education and development of test models

It provides audit assessment tools to determine if a web application is NIST compliant.

It provides a check list for designing applications using microservices architecture