Checkmarx App Security Quiz

Which specialized IDE plugins are provided from Checkmarx for you to seamlessly import Checkmarx One scan results into those IDEs?

• Visual Studio

• Apple Xcode

• Eclipse

• VS Code

• JetBrains

Out of the following which one can be considered as a possible solutions for SQL injection vulnerability?

• Exception Handling

• Secure Cookies

• Input Data Validation

• Encryption

Checkmarx One offers an extensible AppSec platform that integrates everywhere in the SDLC to bring security closer to developers?

• True

• False

From the Checkmarx One application security test platform, which tool should be used to identify potential security vulnerabilities in source code and identify potential security flaws early in the software development lifecycle?

• DAST

• SIEM

• SAST

• SCA

What is the latest programming language and framework supported by Checkmarx SASTsolution?

• Dart / Flutter

• JavaScript / AngularJS

• Ruby / Ruby on Rails

• Rust / Rocket

What are SBOM standard formats provided by Checkmarx SCA solution?

• SWID

• CPE

• SPDX

• CycloneDX

Which Code Repository platform is not supported out of box by Checkmarx One platform to be integrated directly at the moment?

• Github

• BitBucket

• Gitlab

• Azure DevOps

• AWS CodeCommit

What are the different scan engine available in CxOne App Sec Platform

• SAST, API Security

• SCA (SCS, Container)

• DAST

• SIEM

• IaC Securty

What are the fundamental principles of Security?

• Usability, Reliability, Accountability

• Quality, Accountability, Integrity

• Availability, Integrity, Confidentiality

• All the above

What are the benefits of DevSecOps?

• Faster response to change and shifting customer needs

• Earlier identification and correction of code vulnerabilities

• It reduces the collaboration between teams

• All the Above