CST09 - DevSecOps and Intro to SCADA

What is the primary goal of DevSecOps in software development?

• To reduce the number of developers needed

• To eliminate the need for infrastructure teams

• To integrate security throughout the development lifecycle

• To replace Agile with a more rigid framework

Why is Agile considered more flexible than the Waterfall model?

• It uses fewer developers

• It avoids planning stages

• It allows iterative development and frequent updates

• It eliminates the need for customer feedback

Which tool is commonly used for secret management in DevSecOps pipelines?

• GitHub Desktop

• Azure Key Vault

• Visual Studio Code

• Microsoft Teams

What does SCADA stand for?

• Secure Control and Data Access

• Supervisory Control and Data Acquisition

• Systematic Cybersecurity and Device Automation

• Software Configuration and Device Analysis

Why is network segmentation important in ICS environments?

• It improves internet speed

• It reduces the number of devices needed

• It limits the spread of malware

• It simplifies user training

Which regulation enforces cybersecurity standards for UK essential services?

• GDPR

• NIS Regulations

• ISO 27001

• PCI-DSS

Why was the Triton malware considered highly targeted?

• It used random IP addresses

• It affected all types of controllers

• It required deep knowledge of the target environment

• It was distributed via social media

What does the “shift-left” principle in DevSecOps refer to?

• Moving developers to a new team

• Starting security checks earlier in the development process

• Reducing the number of security tools

• Outsourcing infrastructure

Which of the following is a realistic benefit of using Agile in software development?

• Reduced need for customer feedback

• Faster response to changing requirements

• Elimination of testing phases

• Increased use of legacy systems

Which of the following best describes the impact of the NotPetya attack?

• It caused minor disruptions to social media

• It affected only Ukrainian government systems

• It caused global financial and operational damage

• It was quickly resolved with antivirus software