Online Access Free DevSecOps Practice Test

When of the following BEST describes now the security principle of validation of a user's access and actions differ within a DevSecOps mindset versus a more traditional approach to this principle?

• A.The act of validation is at the point of request
• B.The act of validation focuses on credentials.
• C.The act of validation is continuous and ongoing
• D.The ad of validation is at the point of access

Which of the following BEST describes the goats of phishing?
1. Update web browser
2. Install risky malware
3. Steal key user data
4. Push new products

• A.1 and 4
• B.2 and 3
• C.1 and 2
• D.3 and 4

Which of following BEST describes the types of identity-confirming credentials in four-factor authentication?
1. Recognition
2. Ownership
3. Knowledge
4. inherence

• A.1 and 4
• B.1 and 2
• C.3 and 4
• D.3 and 3

When of the following statements BEST describes penetration testing?

• A.A coordinated cyber attack to check for planned vulnerabilities
• B.A coordinated cyber attack to check simulated vulnerabilities
• C.A simulated cyber attack to check for exploitable vulnerabilities
• D.A planned cyber attack to check for actionable vulnerabilities

Which of the following is BEST described as "how container images are dynamically analyzed before they are deployed"?

• A.Software composition analysis (SCA)
• B.Dynamic threat analysis (DTA)
• C.interactive application security testing (IAST)
• D.Dynamic application security testing (DAST)