CDP Study Guide 2026
Everything you need to pass the CDP exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 CDP Exam Format at a Glance
📚 CDP Topics to Study (37)
✍️ Sample CDP Questions & Answers
1. Which tool is most commonly used to automate static application security testing (SAST) within a CI/CD pipeline?
SonarQube integrates directly into CI/CD pipelines to perform automated static code analysis and identify security vulnerabilities early in development.
2. Image scanning in a container registry is used to:
Registry-integrated scanners check image layers against vulnerability databases and block or alert on images that exceed policy thresholds.
3. Which metric measures how long an attacker remains in an environment before detection, directly reflecting monitoring program gaps?
Dwell time—the attacker's undetected presence duration—is the direct measure of how large the monitoring blind spots are.
4. Security regression testing in CI/CD is intended to:
Regression tests for security ensure that code changes do not accidentally reopen vulnerabilities that were previously remediated.
5. What distinguishes Dynamic Application Security Testing (DAST) from Static Application Security Testing (SAST)?
SAST inspects source code or binaries without running the application, while DAST exercises a live application to find runtime vulnerabilities like injection flaws.
6. Which logging standard helps ensure log integrity and non-repudiation in an incident investigation?
Immutable, write-once centralized log storage prevents attackers from covering tracks and preserves admissible forensic evidence.