CDP Continuous Monitoring & Incident Response 5

Question 1

Which approach best supports continuous compliance monitoring in a DevSecOps pipeline?

Accepted Answer

Policy-as-code with automated checks integrated into CI/CD gates

Answer

Policy-as-code encodes compliance rules as executable checks that run automatically in the pipeline, providing continuous rather than point-in-time compliance evidence.

Question 2

A blue team detects lateral movement via stolen service account credentials in a cloud environment. Which containment action minimizes blast radius without causing full outage?

Accepted Answer

Revoke the service account's active sessions and rotate credentials while scoping IAM policies

Answer

Revoking active sessions and rotating credentials stops the attacker while minimizing disruption; blocking only the IP leaves the credential usable from other locations.

Question 3

What is the purpose of a 'canary token' in a DevSecOps monitoring strategy?

Accepted Answer

A decoy credential or file that triggers an alert when accessed, indicating a breach

Answer

Canary tokens are fake credentials or files planted in sensitive locations; any access triggers an alert because only an attacker would find and use them.

Question 4

Which logging standard helps ensure log integrity and non-repudiation in an incident investigation?

Accepted Answer

Forwarding logs to an immutable, centralized, write-once storage system in real time

Answer

Immutable, write-once centralized log storage prevents attackers from covering tracks and preserves admissible forensic evidence.

Question 5

In a devsecops environment, what is 'chaos engineering' used for in the context of incident response readiness?

Accepted Answer

Deliberately injecting failures to test and improve system resilience and response procedures

Answer

Chaos engineering validates that monitoring detects failures and that incident response procedures work correctly before real outages occur.

(CDP) Certified DevSecOps Professional Practice Test

(CDP) Certified DevSecOps Professional Practice Test

CDP Continuous Monitoring & Incident Response 5