350-201 Question 283
Select 3A security operations team is adopting DevOps practices to improve their ability to respond to threats in real-time. Which of the following actions align with DevOps principles in a cybersecurity context?
- A
Integrating automated security testing into the CI/CD pipeline.
- B
Establishing a separate, isolated team to handle security reviews post-deployment.
- C
Implementing Infrastructure as Code (IaC) to enforce consistent security configurations.
- D
Performing manual vulnerability assessments only during quarterly reviews.
- E
Utilizing continuous monitoring and feedback loops to detect and respond to security incidents.
Show answer and explanation
Correct answers: A, C, E
Explanation
DevOps practices in cybersecurity emphasize speed, collaboration, automation, and continuous processes. Actions such as integrating automated security testing, using Infrastructure as Code for consistent configurations, and employing continuous monitoring help teams respond to threats proactively and efficiently. Isolating security reviews or relying solely on infrequent manual assessments contradicts these principles.
- A. Correct.
Integrating automated security testing into the CI/CD pipeline allows for real-time detection of vulnerabilities during development, a core DevOps practice.
- B. Incorrect.
Creating isolated teams for post-deployment security reviews conflicts with DevOps principles, which emphasize collaboration and integration throughout the development lifecycle.
- C. Correct.
Using Infrastructure as Code (IaC) ensures consistent, repeatable security configurations across all environments, which aligns with DevOps practices.
- D. Incorrect.
Relying solely on manual assessments during quarterly reviews delays the detection of vulnerabilities and does not align with the continuous nature of DevOps.
- E. Correct.
Continuous monitoring and feedback loops are fundamental to DevOps, enabling rapid detection and response to potential threats.