Cheryl Hines has been working as a senior DevSecOps engineer over the past 5 years in an IT company. Due to the robust features offered by Keywhiz secret management tool such as compatibility with all software, untraceable secrets, no impact of power cut or server outage, etc., Cheryl's organization is using it for managing and distributing secrets. To add a secret using Keywhiz CLI, which of the following commands should Cheryl use?

• A. $ keywhiz.cli --DevSecTrustStore --user keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• B. $ keywhiz.cli --devsecTrustStore --admin keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• C. $ keywhiz.cli --devTrustStore --admin keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• D. $ keywhiz.cli --devTrustStore --user keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.

Sophia Adams, a DevSecOps Engineer at CyberShield Solutions, is responsible for securing the organization's software development pipeline. Her team uses GitLab CI/CD to automate builds and deployments, and they want to ensure that third-party dependencies in their projects do not contain known vulnerabilities. To automate this process, Sophia decides to integrate Checkmarx SCA scans into the GitLab CI/CD pipeline. She modifies a configuration file to include a security scan stage, ensuring that every code commit, and merge request is checked for vulnerabilities in open-source dependencies before proceeding to deployment. Which of the following actions should Sophia take to properly integrate Checkmarx SCA scans into GitLab CI/CD?

• A. Perform a one-time scan with Checkmarx instead of integrating it into the pipeline.
• B. Enable GitLab's built-in security settings without configuring Checkmarx.
• C. Modify the .gitlab-ci.yml file to include a Checkmarx SCA scan stage.
• D. Manually run Checkmarx scans on project dependencies before each release.

Cindy Williams has recently joined an IT company as a DevSecOps engineer. She configured Bundle-Audit in Travis CI. Cindy detected vulnerability in Gemfile dependencies and resolved it by adding some line of codes. How does Bundler scan Gemfile.lock for insecure versions of gems?

• A. By taking the information from the travis.yml and comparing it with the unknown vulnerabilities.
• B. By taking the information from the Gemfile and comparing it with the known vulnerabilities.
• C. By taking the information from the travis.yml file and comparing it with the known vulnerabilities.
• D. By taking the information from the Gemfile and comparing it with the unknown vulnerabilities.

John is a DevSecOps Engineer working at a software company that is implementing security early in its DevOps workflow, also known as &quot;shifting security left.&quot; The Chief Technology Officer (CTO) and Chief Information Officer (CIO) are particularly interested in improving developer productivity while ensuring security is integrated into the development lifecycle from the start. To which category of DevSecOps stakeholders do the CTO and CIO belong?

• A. Compliance Stakeholders.
• B. Security Stakeholders.
• C. Technology Stakeholders.
• D. Business Stakeholder.

An healthcare organization suffered a data breach after attackers exploited a known vulnerability in the OpenSSL library within one of its containerized applications. Upon investigation, the DevSecOps team discovered that the container image used in production was outdated, exposing it to security risks.There was no automated vulnerability scanning during the development and deployment phases. The lack of a secure container registry led to unverified and potentially insecure images being deployed. To prevent such security incidents in the future, the team decides to implement a solution that securely stores container images and automatically scans them for vulnerabilities before deployment. Which tool should the team use?

• A. Terraform.
• B. Amazon Elastic Container Registry (ECR).
• C. Jenkins.
• D. Kubernetes.