Quiz - DevSecOps

Which of the following is an effective enabler of DevOps because it focuses on small teams continually delivering high quality code?

• Waterfall

• Service-oriented architecture

• Structured development methodologies

• Agile

Securing a continuous delivery pipeline may involve which of the following?

• Protecting credentials, keys, and other secrets

• Strong access control across the entire toolchain and access audits

• Protecting (i.e. digitally signing) binaries and other build artifacts against tamper, etc.

• All of the above

Which of the following enables rapid elasticity, cost reduction of operating infrastructure, and flexibility?

• Continuous Integration

• Continuous Delivery

• Cloud Environment

• Continuous Deployment

Below are the four steps of an AppSec pipeline. Which one shows the steps in the correct order?

• Triage, Intake Process, Deliver, Test

• Intake Process, Triage, Test, Deliver

• Intake Process, Triage, Deliver, Test

• Test, Intake Process, Triage, Deliver

DevOps and Agile are one and the same.

• True

• False

Benefits of a successful implementation of DevOps include which of the following:

• Increased level of automation

• Accelerated pace of interactions between the Development and Operations teams

• Streamlining of processes

• All the above

What is the latest approach to driving DevOps?

• Removing much of the latency that has existed for years around software development through automation.

• Embracing service-oriented architecture to overcome the interoperability and reusability challenges.

• Embracing the waterfall model to meeting the needs of evolving business requirements

• Embracing structured development methodologies since software became larger and more complex.

When shifting from a DevOps to DevSecOps workflow, a company must always embed a SME from security into the development and operations teams.

• True

• False

What does APIs stand for?

• Approved Production Inspection System

• Application Programming Interfaces

• Advanced Passenger Information

• Annual Poverty Indicators

What is DevSecOps?

• An extension of the DevOps paradigm.

• A DevOps tool.

• A job title.

• The inclusion of security in the DevOps workflow.