Free PeopleCert DevSecOps Exam DevSecOps Exam Practice Test

Which of the following BEST describes the goal of the security principle of accountability and non-repudiation?

• Neither the sender nor the recipient of information or activity can later deny the transaction took place
• Trust between two parties is enhanced by a set of practices that validate integrity of data transmissions
• Corporate reputation is maintained when practicing good authentication and data validation procedures
• Confidence between consumer and provider is achieved when users manage passwords *i a defined way

When of the following BEST describes now developers and organizations can use the Open web Security Project (OWASP) top ten security risks tor web applications?

• It provides strict guidance on the compliance regulations of web application design.
• It provides a starting place for awareness, education and development of test models
• It provides audit assessment tools to determine if a web application is NIST compliant.
• It provides a check list for designing applications using microservices architecture

Which of the following BEST describes the goats of phishing?1. Update web browser2. Install risky malware3. Steal key user data4. Push new products

• 1 and 2
• 2 and 3
• 3 and 4
• 1 and 4

Monitoring detected that a batch fob started and completed at specific times.Which of the following is the MOST appropriate response to this event?

• No action is immediately required
• Operations is notified to investigate
• An modem is togged to record me runtime
• A management escalation notification is triggered

Which of the following BEST describes a key characteristic of a lesson learned that ensures it will be used to reduce or eliminate the potential foe failures and future mishaps?

• It is valid in factual and technical correctness
• It is a confirmed historical act or outcome
• The majority of stakeholders believe the data to be true
• A third party has identified the past activity as significant

Which of the following is BEST described by the statement containers that access an disks mounted on the host and have read-write access to files''?

• A risk of using privileged containers
• A benefit of container credentials
• A requirement for container isolation
• A need for container immutability

Which of the following BEST describes the combination that provided the foundational principles that ted to DevOps?1. Agile2. Lean3. ITIL4. SAFE

• 1 and 2
• 2 and 3
• 3 and 4
• 1 and 4

Which of the following BEST describes a public key cryptography architect?

• A person sends a message that is encrypted by using their private key, and the receiver must also use that private key to decipher the message.
• Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of public keys.
• Messages are encrypted into cipher text and then are deciphered upon receipt by using a pair of secure private keys.
• A person sends a message that is encrypted by the use of a public key, and the receiver can decipher the message using their private key.

ABC Corporation has just experienced multiple DDoS attacks.Which of the following BEST describes what a possible goal of me perpetrator(S) was?

• To minimize the legitimate users' access
• To attempt to steal vital information
• To gain unauthorized system access
• To discredit or damage a rival business

How can in-house security experts BEST support DevSecOps in the organization?

• Transform themselves into coaches and tool smiths
• Get involved in the SDLC before a service goes live
• Attend trainings to enhance practical security skills
• Perform regular security assessments and pen tests