Free ECCouncil 312-97 Exam Dumps Questions & Answers

Steven Smith has been working as a DevSecOps engineer in an IT company that develops software products related to the financial sector. His team leader asked him to integrate Conjur with Jenkins to secure the secret credentials. Therefore, Steven downloaded Conjur.hpi file and uploaded it in the Upload Plugin section of Jenkins. He declared host and layers, and declared the variables. Which of the following commands should Steven use to set the value of variables?

• A.  $ conjur variable set -i < policy-path-of-variable-name > -v < secret-value >.
• B.  $ conjur variable set -p < policy-path-of-variable-name > -s < secret-value >.
• C.  $ conjur variable set -s < policy-path-of-variable-name > -p < secret-value >.
• D.  $ conjur variable set -v < policy-path-of-variable-name > -i < secret-value >.

SecureSphere Ltd. recently experienced a critical vulnerability in their CI/CD pipeline during a deployment. A malicious actor exploited a misconfigured script, injecting malicious code into the pipeline. The incident resulted in the unauthorized deployment of compromised applications. The DevSecOps team quickly responded by integrating a tool that used AI-driven vulnerability detection and real-time code analysis to identify and remediate similar issues before deployment. Identify the tool SecureSphere Ltd. likely implemented to prevent such vulnerabilities in the future.

• A.  SonarQube.
• B.  Veracode.
• C.  GitLab Duo.
• D.  Kubiya.

Sophia, a DevSecOps engineer, is working on a microservices-based application deployed using Docker containers. She recently debugged and manually configured a running container to fix a critical issue. Now, she wants to save these changes as a new Docker image so that the modified configuration can be reused without having to manually apply the same fixes in future deployments. Which of the following commands should Sophia use to capture the current state of the container as a new image?

• A.  container save.
• B.  docker commit.
• C.  docker push.
• D.  container export.

Olivia Carter, a DevSecOps Engineer at SecureDev Solutions, is responsible for enhancing the security of the company's software development lifecycle. Her team frequently uses open-source libraries in their projects, making vulnerability detection a critical priority. To ensure continuous security monitoring, Olivia integrates Mend Bolt with GitHub Actions. This setup allows her team to Automatically scan dependencies for vulnerabilities with every code commit, receive real-time alerts and remediation suggestions within GitHub and ensure security risks are mitigated before merging code into the main branch. What should Olivia configure in GitHub Actions to enable Mend Bolt's automated security scanning for each commit?

• A.  Manually run Mend Bolt scans only before deployment.
• B.  Set up a CI workflow to trigger Mend Bolt scans on every code commit.
• C.  Restrict GitHub Actions to only run security scans on tagged releases.
• D.  Enable automatic code merging to minimize developer intervention.

Emma Reynolds, a DevSecOps engineer at a software development firm, is responsible for ensuring secure code practices in the organization's Azure DevOps pipeline. The security team has observed an increase in vulnerabilities being introduced during the development phase, leading to costly remediation efforts later in the SDLC. To address this, Emma decides to integrate a static analysis tool within the Azure DevOps pipeline to detect security flaws early. She installs the necessary extension from the Visual Studio Marketplace and proceeds to establish a service connection for the tool. Which of the following tools is Emma integrating to perform static analysis within the Azure DevOps pipeline?

• A.  Sonarlint.
• B.  Fortify WebInspect.
• C.  Checkmak.
• D.  Veracode Static Analysis.