peoplecert devsecops practice test

Which of the following BEST describes how containers and image layers are related?

• A. Layers of a container are dependent on the layer immediately above it
• B. A layer within a container is designed within microservices architecture
• C. Layers are immutable files that represent a snapshot of a container.
• D. A layer consists of multiple containers with similar microservices architecture

When of the following BEST describes a type of firewall?

• A. Computer-based
• B. System-based
• C. User-based
• D. Cloud-based

The Open Web Application Security Project @ (OWASP) is a nonprofit and open community mat
supports the goals of DevSecOps that provides many resources to the community.
Which of the following BEST represents a key resource that they make available to the community?

• A. Security and auditing guidelines
• B. Open-source testing procedures
• C. A maturity model for assessment
• D. Training and certification courses

When of the following BEST describes a benefit of immutable objects?

• A. Deployments are more predictable
• B. Feature changes are less risky
• C. Releases are completed faster
• D. Changes are more successful

ABC Corporation has just experienced multiple DDoS attacks.
Which of the following BEST describes what a possible goal of me perpetrator(S) was?

• A. To minimize the legitimate users' access
• B. To attempt to steal vital information
• C. To gain unauthorized system access
• D. To discredit or damage a rival business

Which is the BEST combination of desired slots for the future workforce?

• A. Creativity and financial modeling
• B. Collaboration and management
• C. Financial modeling and coding
• D. Leadership and problem -solving

When of the following is BEST described as "a benefit of using a standard naming convention"?

• A. Sortability
• B. Abstraction
• C. indexation
• D. Readability

Which of the following BEST describes the goal of the security principle of accountability and non-
repudiation?

• A. Neither the sender nor the recipient of information or activity can later deny the transaction took place
• B. Trust between two parties is enhanced by a set of practices that validate integrity of data transmissions
• C. Corporate reputation is maintained when practicing good authentication and data validation procedures
• D. Confidence between consumer and provider is achieved when users manage passwords *i a defined way

An organization is developing a web-based application using a representational state transfer (REST)
web-based architecture that’s based on an HTTP protocol.
When of the following BEST describes the key elements of a REST request model?1
1. Client side software
2. Microservice design
3. Object oriented
4. Server-side API

• A. 1 and 2
• B. 2 and 3
• C. 3 and 4
• D. 1 and4

Which of the following BEST describes the meaning of DevSecOps?

• A. A security analysis of all software is performed prior to the release to ensure they are secure in operations.
• B. Security monitoring of software is performed during operations to detect security events more quickly.
• C. A security analysis of software is incorporated and automated throughout development and operations.
• D. Security events are analyzed after they occur to help understand how to prevent them in the future