312-97試験無料問題集（150題）「ECCouncil EC-Council Certified DevSecOps Engineer (ECDE) 認定」

出題：1

Jayson Smith is working as a DevSecOps engineer in an MNC company located in Tampa, Florida. The senior software developer of his company, Sandra Oliver, has uploaded an application in her GitHub repository that might contain security vulnerabilities and has provided the URL to the DevSecOps team. Jayson would like to analyze the application developed by Sandra to detect and mitigate the security issues in the application code; therefore, he would like to clone Sandra's GitHub repository to his computer. Which of the following commands should Jayson use to clone the repository of another user to his computer?

A. $ git clone https://github.com/REPOSITORY/USERNAME.git.

B. $ git clone https://github.com/USERNAME/REPOSITORY.git.

C. $ github clone https://github.com/ REPOSITORY/USERNAME.git.

D. $ github clone https://github.com/USERNAME/REPOSITORY.git.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A DevSecOps team is integrating Prisma Cloud with AWS to enhance security monitoring for their CloudFormation templates. The team wants to scan AWS infrastructure for misconfigurations using Prisma Cloud, ensure that Prisma Cloud has the necessary permissions for read-only access, and enable automated remediation for detected policy violations. Which steps should they take to achieve this?

A. Combine AWS Read Access for scanning with AWS Remediation Stack for automated policy enforcement.

B. Use AWS Remediation Stack to allow Prisma Cloud to modify misconfigured settings via SSM parameters, Lambda functions, and SQS queues.

C. Manually inspect CloudFormation templates before deployment instead of integrating Prisma Cloud.

D. Grant AWS read access to Prisma Cloud by creating IAM roles with managed security audit policies and configure SNS notifications.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

A software development team is running a high-traffic web application on Google Cloud and wants to optimize CPU and memory usage. They decide to use Google Cloud Profiler to identify the parts of their code consuming the most CPU and memory, analyze performance without impacting the application's production environment, optimize resource-intensive functions to improve efficiency. Which feature of Google Cloud Profiler allows the team to analyze performance in production without significant impact?

A. Its integration with Cloud Logging, which enables real-time CPU and memory usage monitoring.

B. Its low-overhead design, which allows continuous profiling with minimal performance impact.

C. Its ability to automatically optimize inefficient code without developer intervention.

D. Its built-in security features that protect applications from performance-related attacks.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Paul McCartney has been working as a senior DevSecOps engineer in an IT company over the past 5 years. He would like to integrate Conjur secret management tool into the CI/CD pipeline to secure the secret credentials in various phases of development. To integrate Conjur with Jenkins, Paul downloaded Conjur.hpi file and uploaded it to the Upload Plugin section of Jenkins. Paul declared a policy branch using a code and saved it as a .yml file. Which of the following commands should Paul use to load this policy in Conjur root?

A. $ conjur policy load -f root -p < file-name >.

B. $ conjur policy load -p root -f < file-name >.

C. $ conjur policy load -b root -f < file-name >.

D. $ conjur policy load -f root -b < file-name >.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Sarah, a DevSecOps engineer, is responsible for managing her organization's multi-cloud infrastructure and ensuring that all cloud resources remain secure, compliant, and cost-efficient. She needs a policy-driven solution that can continuously monitor cloud resources for security and compliance violations, automatically enforce corrective actions when a misconfiguration or cost anomaly is detected and support defining and applying rules across different cloud environments without requiring manual intervention. Which tool should Sarah use to automate this process?

A. Terraform Sentinel.

B. Kubernetes Gatekeeper.

C. Cloud Custodian.

D. AWS CloudFormation.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Rachel McAdams applied for the position of DevSecOps engineer at TetraSoft Pvt. Ltd. She gave her interview on February 23, 2022, and was selected as a DevSecOps engineer. Her team is working on securing Ruby on Rails application. Rachel's team leader asked her to integrate Brakeman SAST tool with Jenkins. To perform the integration, she navigated to Jenkins Plugin Manager and installed Warnings Next Generation Plugin. To run the tool in Jenkins, she invoked Brakeman as part of an Execute shell build step. In the Execute shell column, she wrote the following commands with brakeman options bash -l -c ` rvm install 3.0.0 && \ rvm use 3.0.0@brakeman -create && \ gem install brakeman && \ brakeman -no-progress -no-pager -no-exit-on-warn -o brakeman-output.json What is the function of the -no-exit-on-warn option in the above-mentioned command?

A. It tells Brakeman to return a 1 exit code even if warnings are found.

B. It tells Brakeman to return a 0 exit code even if warnings are found.

C. It tells Brakeman to return a 2 exit code even if warnings are found.

D. It tells Brakeman to return a 3 exit code even if warnings are found.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Kevin Williamson has been working as a DevSecOps engineer in an MNC company for the past 5 years. In January of 2017, his organization migrated all the applications and data from on-prem to AWS cloud due to the robust security feature and cost-effective services provided by Amazon.
His organization is using Amazon DevOps services to develop software products securely and quickly. To detect errors in the code and to catch bugs in the application code, Kevin integrated PHPStan into the AWS pipeline for static code analysis. What will happen if security issues are detected in the application code?

A. The integrated PHPStan into the AWS pipeline will invoke AWS CloudFormation to parse and send result to the security hub.

B. The integrated PHPStan into the AWS pipeline will invoke AWS Config to parse and send result to the security hub.

C. The integrated PHPStan into the AWS pipeline will invoke the AWS Lambda function to parse and send result to the security hub.

D. The integrated PHPStan into the AWS pipeline will invoke AWS Elastic BeanStalk to parse and send result to the security hub.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

312-97試験無料問題集「ECCouncil EC-Council Certified DevSecOps Engineer (ECDE) 認定」