Free Peoplecert DevSecOps Exam Dumps Questions & Answers

Which of the following BEST describes static application security testing (SAST)?

• A.  A security testing methodology that examines application vulnerabilities as it is running.
• B.  A security testing methodology that examines code for flaws and weaknesses
• C.  Analyzes the software composition for vulnerabilities with open-source frameworks
• D.  Analyzes code for vulnerabilities by interacting with the application functionality.

Which of the following BEST describes continuous deployment?

• A.  A rapid incident response plan for increased visibility and mitigation of failure
• B.  A coding approach where branches are merged to a master branch multiple times a day
• C.  A set of practices to ensure code can be deployed rapidly and safely to production
• D.  A software release process that uses automated testing and autonomous deployment

How can in-house security experts BEST support DevSecOps in the organization?

• A.  Get involved in the SDLC before a service goes live
• B.  Perform regular security assessments and pen tests
• C.  Attend trainings to enhance practical security skills
• D.  Transform themselves into coaches and tool smiths

Which of following BEST describes the types of identity-confirming credentials in four-factor authentication?
1. Recognition
2. Ownership
3. Knowledge
4. inherence

• A.  1 and 4
• B.  3 and 3
• C.  1 and 2
• D.  3 and 4

Monitoring detected that a batch fob started and completed at specific times.
Which of the following is the MOST appropriate response to this event?

• A.  A management escalation notification is triggered
• B.  No action is immediately required
• C.  Operations is notified to investigate
• D.  An modem is togged to record me runtime