ECCouncil 312-97 Value Pack (Frequently Bought Together)

Attackers exploited a vulnerability in a healthcare organization's application, injected malicious commands into user input fields, gained unauthorized access to the underlying server, exfiltrated patient records, and tampered with critical files. In this case, which of the following tools can assist the DevSecOps engineer of the organization in flagging the injection vulnerability in the codebase and provide actionable recommendations to fix the issue in their Azure DevOps pipeline?

• A. CodeQL.
• B. Packer.
• C. Gradle.
• D. Azure Defender for Cloud.

During a recent sprint, your development team realized that security vulnerabilities were often detected too late in the deployment cycle, leading to delays and increased remediation costs. To address this issue, you integrated Snyk with Bitbucket to ensure early identification of security flaws in the codebase. Your goal is to make vulnerabilities immediately visible during the code review phase so that developers can address security concerns before merging code into the main branch. This will help enforce security best practices and prevent high-risk vulnerabilities from being introduced into production. Which configuration should you implement to achieve this?

• A. Enable Code Insights in Bitbucket to display security issues in pull requests.
• B. Configure an alert in Bitbucket for vulnerabilities in each commit.
• C. Set up automated email notifications for vulnerabilities discovered by Snyk.
• D. Set up a custom security dashboard to track vulnerabilities in Bitbucket.

Amy Ryan is a DevSecOps engineer in an IT company that develops software products and web applications related to cyber security. She is using Anchore tool for container vulnerability scanning and Software Bill of Materials (SBOM) generation. It helped her to perform quick scanning and generating a list of known vulnerabilities from an SBOM, container image, or project directory. Which of the following commands should Amy run to include software from all the image layers in the SBOM?

• A. syft packages < image > --scope all-layers.
• B. syft packages < image > --scope all-layers Anchore.
• C. syft packages < image > scope all_layers.
• D. syft packages < image > scope all_layers SBOM.

Kenneth Danziger is a certified DevSecOps engineer, and he recently got a job in an IT company that develops software products related to the healthcare industry. To identify security and compliance issues in the source code and quickly fix them before they impact the source code, Kenneth would like to integrate WhiteSource SCA tool with AWS. Therefore, to integrate WhiteSource SCA Tool in AWS CodeBuild for initiating scanning in the code repository, he built a buildspec.yml file to the source code root directory and added the following command to pre-build phase curl -LJO https://github.com/whitesource/unified-agent- distribution/raw/master/standAlone/wss_agent.sh. Which of the following script files will the above step download in Kenneth organization's CodeBuild server?

• A. cbs_agent.sh.
• B. aws_agent.sh.
• C. wss_agent.sh.
• D. ssw_agent.sh.

Sophia Carter, a Senior DevSecOps Engineer at TechShield Solutions, is responsible for enhancing security in the company's AWS-based software development lifecycle. In 2018, her company suffered a major cybersecurity breach, resulting in financial losses and reputational damage. Following the incident, the organization migrated to AWS cloud-based services to develop secure and resilient software products more efficiently. To detect security issues during code review, Sophia decides to integrate SonarQube with AWS CodePipeline by creating a pipeline using an AWS CloudFormation template, selecting SonarQube as the analysis tool from the AWS tools dropdown, configuring required stack parameters, and providing an email address to receive notifications for pipeline status and approvals. After configuring and deploying the CI/CD pipeline, what will happen when changes are committed to the application repository?

• A. An AWS CloudWatch event is triggered.
• B. An AWS Security Hub alert is created.
• C. An AWS Lambda function is invoked automatically.
• D. An AWS Config event is generated.