312-97無料問題集「ECCouncil EC-Council Certified DevSecOps Engineer (ECDE)」

質問 1

(Elizabeth Moss has been working as a DevSecOps engineer in an IT company located in San Diego, California. Due to the robust security and cost-effective service provided by AWS, her organization transferred all the workloads from on-prem to AWS cloud in 2017. Elizabeth would like to prevent committing AWS keys into repositories; therefore, she created a global git-templates directory using command line. Then, she created another directory, named it as hooks, wherein she created a file named pre- commit. In the pre-commit file, Elizabeth pasted the script that would prevent committing AWS keys into the repositories. She would like to ensure that the hook is executable. Which of the following command should Elizabeth run to make sure that the pre-commit hook is executable?)

（A）chmod a+x ~/.git-templates/hooks/pre-commit.

（B）chmod a+e ~/.hooks/git-templates/pre-commit.

（C）chmod a+x ~/.hooks/git-templates/pre-commit.

（D）chmod a+e ~/.git-templates/hooks/pre-commit.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

(Alex Hales has been working as a DevSecOps in an IT company that develops software products and web applications for visualizing scientific data. He would like to trigger a Jenkins build job using Git post commit script or hooks that helps his team in saving time by automating commit. Therefore, before triggering the build job, Alex made changes and saved the code in the respective IDE under Git repository and added the changes in the master branch using git add command and ran the post commit script to check the status of the build. Then, he navigated to the Jenkins project and selected the "Trigger build remotely from Build triggers" radio button. It would automate the trigger every time a change gets committed to the project. Alex navigated back to Bash terminal to trigger the build job. Which of the following commands should Alex use in Bash terminal to trigger the build job?)

（A）github commit -m "commit from terminal".

（B）github commit -b "commit from terminal".

（C）git commit -b "commit from terminal".

（D）git commit -m "commit from terminal".

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

(Orange International Pvt. Ltd. is an IT company that develops software products and web applications for Android phones. The organization recognizes the importance of secure coding principles and would like to enforce it. Therefore, Orange International Pvt. Ltd. established access management, avoided reinventing the wheel, secured the weak links, implemented in-depth defense, and reduced third-party involvement in the application. Based on the above-mentioned information, which of the following secure coding principles is achieved by the organization?.)

（A）Secure by design.

（B）Secure by implementation.

（C）Secure by communication.

（D）Secure by default.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

(Lara Grice has been working as a DevSecOps engineer in an IT company located in Denver, Colorado. Her team leader has told her to save all the container images in the centos repository to centos-all.tar. Which of the following is a STDOUT command that Lara can use to save all the container images in the centos repository to centos-all.tar?.)

（A）# docker save centos < centos all.tar.

（B）# docker save centos > centos-all.tar.

（C）# docker save centos > centos all.tar.

（D）# docker save centos < centos-all.tar.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

(Patricia Cornwell has been working as a DevSecOps engineer in an IT company that provides custom software solutions. She would like to use GitMiner to mine the secret credentials such as usernames and passwords, API credentials, and other sensitive data from GitHub. Therefore, to start the scanning, she cloned the repo to the local machine by using the git clonehttp://github.com/UnkL4b/GitMinercommand; then, she moved to the current directory using $ cd GitMiner command. Which of the following commands should Patricia use to install the dependencies?)

（A）pip3 install -q requirement.txt.

（B）pip3 install -d requirement.txt.

（C）pip3 install -r requirement.txt.

（D）pip3 install -m requirement.txt.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

(Peter Dinklage has been working as a senior DevSecOps engineer at SacramentSoft Solution Pvt. Ltd. He has deployed applications in docker containers. His team leader asked him to check the exposure of unnecessary ports. Which of the following commands should Peter use to check all the containers and the exposed ports?)

（A）docker ps --quiet | xargs docker inspect --format : Ports.

（B）docker ps --quiet | xargs docker inspect --all --format : Ports=.

（C）docker ps --quiet | xargs docker inspect --all --format ': Ports='.

（D）docker ps --quiet | xargs docker inspect --format ': Ports='.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

(Amy Ryan is a DevSecOps engineer in an IT company that develops software products and web applications related to cyber security. She is using Anchore tool for container vulnerability scanning and Software Bill of Materials (SBOM) generation. It helped her to perform quick scanning and generating a list of known vulnerabilities from an SBOM, container image, or project directory. Which of the following commands should Amy run to include software from all the image layers in the SBOM?.)

（A）syft packages < image > scope all_layers SBOM.

（B）syft packages < image > --scope all-layers Anchore.

（C）syft packages < image > scope all_layers.

（D）syft packages < image > --scope all-layers.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

(Terry Crews has been working as a DevSecOps engineer at an IT company that develops software products and web applications related to IoT devices. She integrated Sqreen RASP tool with Slack for sending notifications related to security issues to her team. How can Sqreen send notification alerts to Slack?)

（A）By creating a cookbook, defining a trigger, security response, and notification.

（B）By creating a cookbook, defining a trigger, Alert a response, and notification.

（C）By creating a playbook, defining a trigger, security response, and notification.

（D）By creating a playbook, defining a trigger, Alert a response, and notification.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

(Peter McCarthy is working in TetraVerse Soft Solution Pvt. Ltd. as a DevSecOps engineer. His organization develops customized software products and web applications. To develop software products quickly and securely, his organization has been using AWS cloud-based services, including AWS DevOps services. Peter would like to use CloudMapper to examine the AWS cloud environment and perform auditing for security issues. Which of the following privileges should Peter possess in order to collect information about the AWS account?.)

（A）arn:aws:iam::aws:policy/AWSLambdaFullAccess arn:aws:iam::aws:policy/job-role/ViewOnlyAccess.

（B）arn:aws:iam::aws:policy/SecurityAudit::SecurityCheck arn:aws:iam::aws:policy/job-role
/ViewOnlyAccess:: EditOnlyAccess.

（C）arn:aws:iam::aws:policy/SecurityCheck arn:aws:iam::aws:policy/job-function/ViewOnlyAccess::
EditOnlyAccess.

（D）arn:aws:iam::aws:policy/SecurityAudit arn:aws:iam::aws:policy/job-function/ViewOnlyAccess.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

312-97 無料問題集「ECCouncil EC-Council Certified DevSecOps Engineer (ECDE)」

弊社を連絡する

関連リンク

トップ試験