CDP Continuous Monitoring & Incident Response 4

Question 1

A CI/CD pipeline secret is leaked in a public GitHub repository. According to incident response best practices, what is the immediate first action?

Accepted Answer

Revoke and rotate the exposed secret immediately

Answer

Once a secret is public it must be treated as compromised and rotated immediately since git history is cached and mirrored within seconds.

Question 2

What is the primary benefit of integrating Security Orchestration, Automation and Response (SOAR) with a SIEM in DevSecOps?

Accepted Answer

Automating repetitive response actions to reduce MTTR for common incident types

Answer

SOAR automates high-volume, well-defined response playbooks so analysts focus on complex cases, reducing Mean Time to Respond.

Question 3

Which anomaly detection technique is best suited for detecting insider threats in a DevSecOps environment?

Accepted Answer

User and Entity Behavior Analytics (UEBA)

Answer

UEBA establishes behavioral baselines per user and detects deviations like unusual data access or off-hours activity that signatures cannot catch.

Question 4

What does the NIST SP 800-137 framework define as continuous monitoring?

Accepted Answer

Ongoing awareness of information security, vulnerabilities, and threats to support risk management decisions

Answer

NIST SP 800-137 defines continuous monitoring as maintaining ongoing situational awareness to support timely risk management decisions across the information security program.

Question 5

A security team is designing incident response for a serverless application. Which challenge is unique to this architecture?

Accepted Answer

Ephemeral execution environments that disappear before forensics can be performed

Answer

Serverless functions execute and terminate in milliseconds, leaving no persistent runtime environment to inspect after an incident.

(CDP) Certified DevSecOps Professional Practice Test

(CDP) Certified DevSecOps Professional Practice Test

CDP Continuous Monitoring & Incident Response 4