DevSecOps

A set of technologies that analyze source code and binaries for coding that is indicative of security vulnerabilities.

• Compiler

• SAST

• GCC

• VAPT

SAST TOOLS [MULTIPLE CHOICE]

• BURP

• ZAP

• BROWSER

• CHECKMARX

You are asked to develop an application from scratch. When will you start performing Threat Modeling of the application

• At the design stage

• At the beginning of testing phase

• During requirements collection phase

• HP Webinspect performs the Threat Modeling, I do not need to do anything

SG Application Security Framework includes: [Multiple Choice]

• Concept/Design

• Development

• Test & QA

• Release Deploy

• Maintain & Support

Actors of SG-ASF

• Development Manager's

• Security Officer

• Cyber Security COE

• All of the above

Tools used in DevSecOps [Multiple Choice]

• SonarQube

• CheckMarx

• Burp Suite

• Acunetix

Initial step of DevSecOps:-

• Harding Guides

• IDA

• Threat Modelling

• SAST

DevSecOps Stands for?

• Development, Separate and Operations

• Development, Security and Operations

• Deploy, Security and Operations

• Development, Separate and Orientation

DevSecOps injects the domain of Information Security into the original concept of "DevOps".

• True

• False

Benefits of DevSecOps are:-

• Faster response to change and shifting customer needs

• Earlier identification and correction of code vulnerabilities

• Increased use of automation, especially with regard to quality control testing

• All The Above