DOL DOL Security and Compliance 2

Question 1

What is the purpose of a Software Bill of Materials (SBOM) in a DevOps security context?

Accepted Answer

Providing an inventory of open-source and third-party components to identify vulnerable dependencies

Answer

An SBOM gives organizations visibility into all software components so they can quickly identify exposure when new vulnerabilities are disclosed.

Question 2

Which principle of least privilege means in a DevOps pipeline context?

Accepted Answer

Giving pipelines and service accounts only the minimum permissions required to perform their tasks

Answer

Least privilege limits the blast radius of a compromise by ensuring pipelines and accounts can only access what they strictly need.

Question 3

A DevOps team discovers that secrets are being hardcoded in source code. What is the recommended corrective action?

Accepted Answer

Move secrets to a secrets management vault and inject them at runtime

Answer

Secrets management vaults (e.g., HashiCorp Vault, AWS Secrets Manager) store credentials securely and inject them at runtime, keeping secrets out of source control.

Question 4

What is dynamic application security testing (DAST) and when is it typically run in a DevSecOps pipeline?

Accepted Answer

It tests a running application by simulating attacks, run against a deployed test environment

Answer

DAST interacts with a live application to find runtime vulnerabilities, making it most effective when run against a deployed staging or test environment.

Question 5

How does immutable infrastructure improve security in a DevOps environment?

Accepted Answer

It eliminates configuration drift by replacing servers rather than patching them, ensuring a known-good state

Answer

Immutable infrastructure ensures every deployment starts from a vetted image, eliminating accumulated drift and unauthorized changes that could introduce vulnerabilities.

(DOL) DevOps Leader Practice Test

(DOL) DevOps Leader Practice Test

DOL DOL Security and Compliance 2