Free Peoplecert DevSecOps Exam Dumps Questions & Answers

Which of the following BEST describes an example of technical or design dew when designing for defensibility?

• A.  Not prioritizing the set of critical customer feature in the current sprint
• B.  Not establishing all the product requirements prior to the first iteration
• C.  Not developing comprehensive documentation and training material
• D.  Not including the addition of security controls in the definition of done

Which of the following BEST describes static application security testing (SAST)?

• A.  Analyzes code for vulnerabilities by interacting with the application functionality.
• B.  A security testing methodology that examines application vulnerabilities as it is running.
• C.  Analyzes the software composition for vulnerabilities with open-source frameworks
• D.  A security testing methodology that examines code for flaws and weaknesses

When of the following statements BEST describes penetration testing?

• A.  A simulated cyber attack to check for exploitable vulnerabilities
• B.  A coordinated cyber attack to check for planned vulnerabilities
• C.  A coordinated cyber attack to check simulated vulnerabilities
• D.  A planned cyber attack to check for actionable vulnerabilities

When of the following BEST describes a benefit of immutable objects?

• A.  Releases are completed faster
• B.  Changes are more successful
• C.  Deployments are more predictable
• D.  Feature changes are less risky

An organization is developing a web-based application using a representational state transfer (REST) web-based architecture that's based on an HTTP protocol.
When of the following BEST describes the key elements of a REST request model?1
1. Client side software
2. Microservice design
3. Object oriented
4. Server-side API

• A.  3 and 4
• B.  1 and 2
• C.  2 and 3
• D.  1 and4