Devsecops

What is a SAST tool?

• Source Code Analysis Strength Test Tool

• Source Analysis Static Test Tool

• Static Application Security Testing Tool

• Static Analysis Security Testing Tool

What is DevSecOps?

• The philosophy of Developers, Operations Staff and Business Teams working together

• The philosophy of integrating security practices within the DevOps process
  

• A time-boxed, iterative approach to software delivery

• The concept that the IT environment can become so automated that there is no need for a dedicated team to manage software in-house

What will securing a Continuous Delivery pipeline include?

• Protecting credentials, keys and other secrets

• Strong access control across the whole toolchain and access audits

• Safeguarding binaries and other build artifacts against being breached

• All of the above

What is integrating code changes into a repository and testing the new changes called?

• Continuous Deployment

• Continuous Delivery

• Continuous Integration

• Continuous Releases

Which of the following tools can be used in the DevSecOps process?

• Checkmarx

• Google Chrome Developer Tools

• Trello

• MalwareBytes

What does IaC stand for in DevOps?

• Infrastructure as Computer

• Integration and Configuration

• Infrastructure as Code

• Input and Compute

Tools used in DevSecOps [Multiple Choice]

• Burp Suite

• Acunetix

• Checkmarx

• SonarQube

What is secure coding?

• Secure coding is the practice of writing

  software in a way that protects it from

  security vulnerabilities.

• Secure coding is focused solely on user

  interface design.

• Secure coding is only about using encryption

  techniques.

• Secure coding is the process of writing code

  without any comments.

Why is secure coding important?

• Secure coding prevents vulnerabilities and

  protects against security breaches.

• Secure coding is irrelevant in modern

  software development.

• Secure coding is only necessary for large

  companies.

• Secure coding is primarily about improving

  performance.

What does DevSecOps stand for?

• Development, Security, and Operations

• Development, Security, and Management

• Development, Safety, and Operations

• Design, Security, and Operations