Practice Test GeeksCDP - Certified DevOps Practitioner Practice Test
← All CDP Flashcard Decks

Threat Modeling & Vulnerability Management Flashcards

7 cards from real CDP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Threat Modeling & Vulnerability Management flashcards as text

  1. What is the scoring range for CVSS (Common Vulnerability Scoring System) base scores?

    Answer: 0.0 to 10.0

    CVSS base scores range from 0.0 to 10.0, with 10.0 representing the most severe vulnerabilities requiring the most urgent remediation.

  2. What does CVE stand for in the context of vulnerability management?

    Answer: Common Vulnerabilities and Exposures

    CVE (Common Vulnerabilities and Exposures) is a standardized list of publicly known security vulnerabilities maintained by MITRE Corporation.

  3. Which open-source tool is widely used in DevSecOps pipelines to scan container images for known vulnerabilities?

    Answer: Trivy

    Trivy, developed by Aqua Security, is a comprehensive open-source vulnerability scanner for containers, filesystems, IaC, and code repositories commonly integrated into CI/CD pipelines.

  4. What is the key difference between Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)?

    Answer: SAST analyzes source code without executing it while DAST tests running applications

    SAST analyzes source code, bytecode, or binaries without executing the application (white-box), while DAST tests the application in its running state from the outside (black-box).

  5. What is the National Vulnerability Database (NVD) primarily used for in vulnerability management?

    Answer: Enriching CVE records with CVSS severity scores and additional metadata

    The NVD is a U.S. government repository managed by NIST that enriches CVE data with CVSS scores, CWE classifications, CPE applicability statements, and remediation guidance.

  6. A CVSS v3 base score of 9.8 would be categorized under which severity level?

    Answer: Critical

    In CVSS v3, scores between 9.0 and 10.0 are classified as Critical severity, requiring immediate remediation due to the potential for widespread, severe impact.

  7. What is a zero-day vulnerability?

    Answer: A vulnerability that is unknown to the software vendor and has no available patch

    A zero-day vulnerability is a security flaw unknown to the vendor, giving them zero days to prepare a fix before it can be exploited by attackers.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. practical-devsecops.com — Test delivery, eligibility, time limit, score validity, fees, registration deadline, renewal, retake fee, retake policy, test dates · verified Oct 2026