Devsecops

1) What is a SAST tool?

• Source Code Analysis Strength Test Tool

• Source Analysis Static Test Tool

• Static Application Security Testing Tool

• Static Analysis Security Testing Tool

2) What is DevSecOps?

• The philosophy of Developers, Operations Staff and Business Teams working together

• The philosophy of integrating security practices within the DevOps process
  

• A time-boxed, iterative approach to software delivery

• The concept that the IT environment can become so automated that there is no need for a dedicated team to manage software in-house

3) What will securing a Continuous Delivery pipeline include?

• Protecting credentials, keys and other secrets

• Strong access control across the whole toolchain and access audits

• Safeguarding binaries and other build artifacts against being breached

• All of the above

4) What is integrating code changes into a repository and testing the new changes called?

• Continuous Deployment

• Continuous Delivery

• Continuous Integration

• Continuous Releases

5) Why should businesses adopt a DevSecOps approach?

• To educate Development and Operations team about DevOps practices

• To simplify Development processes for Operations staff

• To implement security practices throughout the project lifecycle

• To create a proper divide between Development and Operations teams

6) Which of the following tools can be used in the DevSecOps process?

• Checkmarx

• Google Chrome Developer Tools

• Trello

• MalwareBytes

7) What does IaC stand for in DevOps?

• Infrastructure as Computer

• Integration and Configuration

• Infrastructure as Code

• Input and Compute

8) Tools used in DevSecOps [Multiple Choice]

• Burp Suite

• Acunetix

• Checkmarx

• SonarQube