ECCouncil 312-97 : EC-Council Certified DevSecOps Engineer (ECDE)

A cybersecurity team at a fintech company is implementing a DevSecOps pipeline to enhance the security and quality of their AWS-hosted applications. As part of their workflow, they integrate SonarCloud with AWS CodePipeline and CodeBuild to analyze source code for vulnerabilities before deployment. During a security audit, the team notices inconsistencies in scan results, with some repositories not being analyzed as expected. After reviewing their integration setup, they suspect that a misconfiguration occurred when linking SonarCloud with their version control system.Which of the following actions should be taken to ensure the correct integration of SonarCloud with AWS CodePipeline and CodeBuild?

• A. Verify the repository selection and bind the correct branch.
• B. Modify the buildspec.yml file and re-run the build.
• C. Enable AWS Inspector to perform vulnerability analysis.
• D. Reinstall the SonarCloud plugin and enable scans.

CyberNova Technologies, a software development company, has been focusing on improving the security posture of its applications. To enhance security, the company has implemented role-based access controls, enforced encryption for data transmission, standardized authentication mechanisms, and established secure channels for inter-service communication. Additionally, it has ensured that all security policies, compliance requirements, and risk assessments are properly conveyed to the development and operations teams to minimize security gaps. Which of the following secure coding principles is best demonstrated by CyberNova Technologies?

• A. Secure by default.
• B. Secure by design.
• C. Secure by communication.
• D. Secure by implementation.

A DevOps team is using AWS CloudWatch to monitor their EC2 instances and Lambda functions in a hybrid cloud environment. They want to receive notifications when CPU utilization exceeds 80% on an EC2 instance, automatically scale the instance when CPU usage remains high for 5 minutes, Store and analyze application logs from multiple AWS services in a centralized location. Which CloudWatch feature should the team configure to achieve these goals?

• A. Enable AWS Config to monitor resource changes and trigger Lambda functions when needed.
• B. Set up CloudWatch Alarms to monitor metrics and trigger an auto-scaling policy when the threshold is exceeded.
• C. Manually track CPU utilization and scale the instances when required.
• D. Use CloudWatch Logs to store and retrieve metrics for EC2 and Lambda functions.

A DevSecOps engineer is configuring Chef InSpec to perform security compliance checks on an Azure environment. The engineer needs to authenticate with azure using a Service Principal Name (SPN), execute InSpec scans against the Azure environment and Ensure authentication is handled securely and efficiently. Which is the best way to configure authentication before running the InSpec scan?

• A. Authenticate using the Azure CLI before every InSpec execution without storing credentials.
• B. Store Azure credentials in the ~/.azure/credentials file and execute inspec exec azure_profile -t azure://.
• C. Use only AZURE_SUBSCRIPTION_ID as an environment variable to authenticate.
• D. Manually enter Azure credentials every time before running an InSpec scan.

Aditi Sharma, a DevSecOps engineer at a Pune SaaS company, wants to define security policies as code - such as "no container may run with privileged: true" - that are automatically enforced by the Kubernetes API server before any non-compliant resource is admitted to the cluster. Which technology should Aditi use?

• A. Grafana dashboard
• B. Open Policy Agent (OPA) / Gatekeeper admission controller
• C. Jenkins build agent
• D. Prometheus alerting rules