IBM Cloud DevSecOps v2 Specialty Sample Questions:

1. Which of the following statements accurately describe the drivers behind DevSecOps adoption?
(Choose Two)

A) Increasing demand for faster delivery of software updates
B) Reducing the number of software releases
C) Decreasing the need for security compliance
D) Enhancing collaboration between development and operations teams

2. Which best practice is critical for successful DevSecOps implementation?

A) Automated security scanning integrated into CI/CD pipelines
B) Regularly scheduled manual security reviews
C) Encouraging minimal communication between security and development teams
D) Isolating development and operations teams to increase focus

3. DevSecOps saves time and money by __________.

A) Having a pipeline for each environment allowing teams to work in silos
B) Creating more security debt for developers
C) Addressing security concerns throughout the entire development process
D) Delaying release to production to ensure that development teams meet security standards

4. Integrating DevSecOps into all stages of the development release cycle results in which of the following?

A) Decreases the ability to manage newly identified security vulnerabilities
B) Separates vulnerability scanning and patching
C) Manages the threat window to exploit vulnerabilities
D) Quickly identify common vulnerabilities and exposures (CVE)

5. What is the primary purpose of using delivery pipelines in DevSecOps?

A) To ensure that software is developed in secrecy
B) To minimize the communication between development and operations teams
C) To increase the manual intervention required in software deployment
D) To automate the software delivery process, ensuring that changes are reliable and secure

Solutions: