Study with 312-97 Actual Test Questions

Ethan Roberts has been working as a backend developer in a fintech company. His team has built a Python-based web application. During a routine code review, Ethan noticed that some third-party dependencies in the application might have security vulnerabilities. To address this, he consulted Sophia Bennett, a DevSecOps specialist, to identify the insecure dependencies. Sophia utilized an SCA tool to scan for known vulnerabilities in Python libraries and successfully detected all the insecure dependencies.

• A. Retire.js.
• B. Tenable.io.
• C. Bandit.
• D. Bundler-Audit.

A managed services provider wants to enhance its incident management process by integrating Incident.io with OpsGenie. The company handles critical infrastructure monitoring and needs a system that improve visibility into incidents and streamline communication across teams. Which key advantage does this integration provide?

• A. It automates incident escalation workflows based on severity, type, or resolution time.
• B. It enables OpsGenie to resolve incidents automatically without analyst intervention.
• C. It eliminates the need for human involvement in incident management.
• D. It prevents all system failures and security breaches before they occur.

Kevin Williamson has been working as a DevSecOps engineer in an MNC company for the past 5 years. In January of 2017, his organization migrated all the applications and data from on-prem to AWS cloud due to the robust security feature and cost-effective services provided by Amazon.
His organization is using Amazon DevOps services to develop software products securely and quickly. To detect errors in the code and to catch bugs in the application code, Kevin integrated PHPStan into the AWS pipeline for static code analysis. What will happen if security issues are detected in the application code?

• A. The integrated PHPStan into the AWS pipeline will invoke AWS CloudFormation to parse and send result to the security hub.
• B. The integrated PHPStan into the AWS pipeline will invoke AWS Config to parse and send result to the security hub.
• C. The integrated PHPStan into the AWS pipeline will invoke the AWS Lambda function to parse and send result to the security hub.
• D. The integrated PHPStan into the AWS pipeline will invoke AWS Elastic BeanStalk to parse and send result to the security hub.

Ryan Peterson is a cloud security architect at SecureCloud Inc., responsible for designing and securing the company's AWS cloud environment. To automate and enhance the security design, Ryan's team has decided to integrate ThreatModeler with AWS. This integration will help them identify and mitigate security risks early in the cloud architecture phase. ThreatModeler provides two key components, Architect and Accelerator, which assist AWS users in modeling threats and streamlining security integration. While integrating ThreatModeler with AWS Accelerator, Ryan explores the available methods for integration. Which of the following is a valid way for ThreatModeler to integrate with AWS Accelerator?

• A. Via IAM Role.
• B. Via Chef.
• C. Via API Gateway Configuration.
• D. Via Lambda Function Deployment.

Liam Harris, a senior software engineer in a cybersecurity company based in San Francisco, California, is responsible for maintaining secure coding practices across the team. Recently, during a critical application development cycle, a plugin integrated into Visual Studio Code flagged multiple vulnerabilities in open-source dependencies and infrastructure as code (IaC) configurations. If left unresolved, these vulnerabilities could expose the application to severe risks in production. The plugin identified the vulnerabilities and provided detailed remediation steps, helping Liam's team mitigate the risks swiftly. Which tool was Liam's team using to enhance the security of their codebase?

• A. Snyk.
• B. Checkstyle.
• C. SonarLint.
• D. GitLab.