DevSecOps Sample Questions Answers

Designed

Embedded

integrated

Automated

Not prioritizing the set of critical customer feature in the current sprint

Not including the addition of security controls in the definition of done

Not developing comprehensive documentation and training material

Not establishing all the product requirements prior to the first iteration

Source code must be checked for programmatic and stylistic errors

Secrets information must be stored for secure back-end service calls

They must be designed to run safely outside of the secure network

Data must be kept secure to prevent leaking to other applications

Sortability

Abstraction

indexation

Readability

Layers of a container are dependent on the layer immediately above it

A layer within a container is designed withinmicroservicesarchitecture

Layers are immutable files that represent a snapshot of a container.

A layer consists of multiple containers withsimilarmicroservices architecture

Story based

Kinesthetic

Demonstration

Observe live

1 and 2

3 and 3

3 and 4

1 and 4

It provides strict guidance on the compliance regulations of web application design.

It provides a starting place for awareness, education and development of test models

It provides audit assessment tools to determine if a web application is NIST compliant.

It provides a check list for designing applications using microservices architecture

Security and auditing guidelines

Open-source testing procedures

A maturity model for assessment

Training and certification courses