Practice Integrating Security In Ci/cd Pipelines (3)

Practise this section

10 questions

Flashcard drill
5 cards from this section. Quick, good the night before a test.
Exercise
6 questions · about 4 min · pass mark 70%. Hints available.
Sign up to start the exercise
Quiz
4 questions · about 3 min · pass mark 70%. Hints available.
Sign up to start the quiz

6 sample questions

Question 1.
What does CI/CD stand for?
Show hintHide hint
Think about the software development lifecycle.
Question 2.
Name one SAST tool.
Show hintHide hint
Recall the tools we discussed that analyze source code.
3Question 3.
What does SAST stand for?
- Static Application Security Testing
- Static Application Software Testing
- Secure Application Security Testing
Show hintHide hint
Focus on the analysis type.
4Question 4.
True or False: DAST assesses the application before it is deployed.
- True
- False
Show hintHide hint
Remember when DAST is conducted.
Question 5.
You have a CI/CD pipeline, but security is an afterthought. What steps would you recommend to integrate security seamlessly into all phases?
Show hintHide hint
Think about integrating tools that enhance each phase.
Question 6.
During a code review, a team notices a third-party library has a known vulnerability. How should the team react and what steps should be taken?
Show hintHide hint
Consider the importance of maintaining current software dependencies.

6 more questions in this section. Enroll free to practise them all.