Peoplecert DevSecOps豪華セット学習ガイドにはオンライン試験エンジン
DevSecOps問題集レビュー専門クイズ学習材料
Peoplecert DevSecOps 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
質問 17
Which of the following is BEST described as "how container images are dynamically analyzed before they are deployed"?
- A. Dynamic application security testing (DAST)
- B. interactive application security testing (IAST)
- C. Software composition analysis (SCA)
- D. Dynamic threat analysis (DTA)
正解: D
質問 18
Visual tactile, and auditory are modalities of formal learning
Which of the following is BEST described as the fourth major modality of formal learning?
- A. Kinesthetic
- B. Demonstration
- C. Story based
- D. Observe live
正解: D
質問 19
When of the following BEST describes now the security principle of validation of a user's access and actions differ within a DevSecOps mindset versus a more traditional approach to this principle?
- A. The ad of validation is at the point of access
- B. The act of validation focuses on credentials.
- C. The act of validation is at the point of request
- D. The act of validation is continuous and ongoing
正解: D
質問 20
Which of the following BEST describes continuous deployment?
- A. A coding approach where branches are merged to a master branch multiple times a day
- B. A rapid incident response plan for increased visibility and mitigation of failure
- C. A set of practices to ensure code can be deployed rapidly and safely to production
- D. A software release process that uses automated testing and autonomous deployment
正解: C
質問 21
Which of the following BEST describes the meaning of DevSecOps?
- A. Security monitoring of software is performed during operations to detect security events more quickly.
- B. Security events are analyzed after they occur to help understand how to prevent them in the future
- C. A security analysis of software is incorporated and automated throughout development and operations.
- D. A security analysis of all software is performed prior to the release to ensure they are secure in operations.
正解: C
質問 22
Which of the following is BEST described as ''the level of the IT security learning continuum where an organization covers security basics and literacy''?
- A. Immersion
- B. Education
- C. Training
- D. Awareness
正解: D
質問 23
Which of the following BEST describes the goats of phishing?
1. Update web browser
2. Install risky malware
3. Steal key user data
4. Push new products
- A. 1 and 2
- B. 2 and 3
- C. 3 and 4
- D. 1 and 4
正解: B
質問 24
Which of following BEST describes the types of identity-confirming credentials in four-factor authentication?
1. Recognition
2. Ownership
3. Knowledge
4. inherence
- A. 1 and 2
- B. 3 and 4
- C. 3 and 3
- D. 1 and 4
正解: D
質問 25
When of the following statements BEST describes penetration testing?
- A. A coordinated cyber attack to check for planned vulnerabilities
- B. A simulated cyber attack to check for exploitable vulnerabilities
- C. A coordinated cyber attack to check simulated vulnerabilities
- D. A planned cyber attack to check for actionable vulnerabilities
正解: D
質問 26
Monitoring detected that a batch fob started and completed at specific times.
Which of the following is the MOST appropriate response to this event?
- A. A management escalation notification is triggered
- B. An modem is togged to record me runtime
- C. Operations is notified to investigate
- D. No action is immediately required
正解: C
質問 27
When of the following BEST describes now developers and organizations can use the Open web Security Project (OWASP) top ten security risks tor web applications?
- A. It provides audit assessment tools to determine if a web application is NIST compliant.
- B. It provides a starting place for awareness, education and development of test models
- C. It provides strict guidance on the compliance regulations of web application design.
- D. It provides a check list for designing applications using microservices architecture
正解: B
質問 28
Which of the following BEST fills in the bank?
"In DevSecOps environments information security is__________as much as possible into the daily work of development and operations".
- A. integrated
- B. Designed
- C. Embedded
- D. Automated
正解: B
質問 29
How can in-house security experts BEST support DevSecOps in the organization?
- A. Perform regular security assessments and pen tests
- B. Transform themselves into coaches and tool smiths
- C. Get involved in the SDLC before a service goes live
- D. Attend trainings to enhance practical security skills
正解: C
質問 30
Which of the following BEST describes the goal of the security principle of accountability and non-repudiation?
- A. Corporate reputation is maintained when practicing good authentication and data validation procedures
- B. Neither the sender nor the recipient of information or activity can later deny the transaction took place
- C. Confidence between consumer and provider is achieved when users manage passwords *i a defined way
- D. Trust between two parties is enhanced by a set of practices that validate integrity of data transmissions
正解: D
質問 31
Which of the following BEST describes a key characteristic of a lesson learned that ensures it will be used to reduce or eliminate the potential foe failures and future mishaps?
- A. It is a confirmed historical act or outcome
- B. A third party has identified the past activity as significant
- C. It is valid in factual and technical correctness
- D. The majority of stakeholders believe the data to be true
正解: C
質問 32
The Open Web Application Security Project @ (OWASP) is a nonprofit and open community mat supports the goals of DevSecOps that provides many resources to the community.
Which of the following BEST represents a key resource that they make available to the community?
- A. Open-source testing procedures
- B. Security and auditing guidelines
- C. A maturity model for assessment
- D. Training and certification courses
正解: B
質問 33
......
試験問題解答ブレーン問題集でDevSecOps試験問題集PDF問題：https://www.passtest.jp/Peoplecert/DevSecOps-shiken.html
DevSecOpsテスト準備トレーニング練習試験問題練習テスト：https://drive.google.com/open?id=1Hc3Ao9HIvaCf-mD7g8G8QHCtP8cSykL6