WorksheetsExtreme Coding Day
Total questions: 10
Worksheet time: 11mins
In which month does the German festival of Oktoberfest mostly take place?
October
September
August
November
There is a build breaker found in your code. What do you do?
Raise an impediment and escalate it to my engineering lead. The build breaker blocks our production implementation so this must be dealt with.
Request a waiver via https://abnamro.bank/secoservicedesk so the build breaker can be lifted.
Apply for a temporary risk acceptance via https://abnamro.bank/secoservicedesk so the build breaker can be lifted
Examine the vulnerability, look for a recommended upgrade path or remediation, apply the fix, build the application again and check if it passes the quality gate.
The Log4J vulnerability lead to a security risk that could not have been prevented.
True
False
To measure JUnit test coverage the Jacoco plugin is used. Do I need to add this plugin to my pom file(s)?
Yes, it must be added to all the pom files within my project.
Yes, it must be added to only my top level pom file.
No, it is already present in the master-pom.
What do you do when you need a certificate?
use let's encrypt
contact the Crypto Services team
use MyIT to request a certificate
generate it locally and self sign it
Debug Driven Development (writing sys.out/log.debug statement and redeploy to manually test and browse logfiles) will:
speed up development because I don't have to write a unit test
test the application in a sustainable way
slow me down with a factor up to a 1000x
not introduce programming errors
Why is lifecycle management important?
1. It is a welcome change of pace of your daily development practices
2. It'll prevent hacks because vulnerable libraries will be replaced with safe versions
3. It makes it easier for you to upgrade to the latest version
4. It will allow you to (re)deploy to production
5. It will help you to quickly react to new discovered vulnerabilities
1 and 2
4 and 5
2 and 4
1, 2, 3, 4 and 5
Where do you store your secrets?
I store them in the private repository for my source code.
I store them in a secure text file on my laptop.
I use a vault solution where my secrets are kept safe.
I encrypt the secret and store it in a database.
What is the best moment to scan your code for quality and secure coding issues?
1. With every build the code should be scanned
2. Locally, prior to committing the changes to Git
3. At least for every build done on the Master branch
4. Nightly using a scheduled pipeline
5. On the last day prior to going to Production
2, 3, 4
3, 4, 5
1, 2, 3
1, 3, 5
Which country has more bicycles than the total population ?
China
Netherlands
Spain
Finland
