Extreme Coding Day

In which month does the German festival of Oktoberfest mostly take place?

• October

• September

• August

• November

There is a build breaker found in your code. What do you do?

• Raise an impediment and escalate it to my engineering lead. The build breaker blocks our production implementation so this must be dealt with.

• Request a waiver via https://abnamro.bank/secoservicedesk so the build breaker can be lifted.

• Apply for a temporary risk acceptance via https://abnamro.bank/secoservicedesk so the build breaker can be lifted

• Examine the vulnerability, look for a recommended upgrade path or remediation, apply the fix, build the application again and check if it passes the quality gate.

The Log4J vulnerability lead to a security risk that could not have been prevented.

• True

• False

To measure JUnit test coverage the Jacoco plugin is used. Do I need to add this plugin to my pom file(s)?

• Yes, it must be added to all the pom files within my project.

• Yes, it must be added to only my top level pom file.

• No, it is already present in the master-pom.

What do you do when you need a certificate?

• use let's encrypt

• contact the Crypto Services team

• use MyIT to request a certificate

• generate it locally and self sign it

Debug Driven Development (writing sys.out/log.debug statement and redeploy to manually test and browse logfiles) will:

• speed up development because I don't have to write a unit test

• test the application in a sustainable way

• slow me down with a factor up to a 1000x

• not introduce programming errors

Why is lifecycle management important?

1. It is a welcome change of pace of your daily development practices

2. It'll prevent hacks because vulnerable libraries will be replaced with safe versions

3. It makes it easier for you to upgrade to the latest version

4. It will allow you to (re)deploy to production

5. It will help you to quickly react to new discovered vulnerabilities

• 1 and 2

• 4 and 5

• 2 and 4

• 1, 2, 3, 4 and 5

Where do you store your secrets?

• I store them in the private repository for my source code.

• I store them in a secure text file on my laptop.

• I use a vault solution where my secrets are kept safe.

• I encrypt the secret and store it in a database.

What is the best moment to scan your code for quality and secure coding issues?

1. With every build the code should be scanned

2. Locally, prior to committing the changes to Git

3. At least for every build done on the Master branch

4. Nightly using a scheduled pipeline

5. On the last day prior to going to Production

• 2, 3, 4

• 3, 4, 5

• 1, 2, 3

• 1, 3, 5

Which country has more bicycles than the total population ?

• China

• Netherlands

• Spain

• Finland