312-97 試験問題を無料オンラインアクセス

A healthcare organization recently suffered a security breach due to an exposed SSH key in one of its public Git repositories. To prevent similar incidents, the DevSecOps team decides to enforce a security mechanism that blocks sensitive information such as private keys and authorization tokens from being committed at the source. What is the best approach to achieve this?

• A.Relying on endpoint security software to detect leaks after the commit.
• B.Encrypting all commits before pushing them to the repository.
• C.Reviewing the Git bash command output to detect leaks after the commit.
• D.Using a repository hook before each commit or push.

Camila Duarte, a DevSecOps engineer at a Sao Paulo media company, is setting up her Jenkins pipeline to store database credentials, API keys, and TLS certificates outside of source code and configuration files, with automatic rotation and fine-grained access policies. Which type of tool should she integrate?

• A.Secrets management tool (e.g., HashiCorp Vault)
• B.Container registry
• C.Static code analyzer
• D.Load balancer

A DevOps team is using AWS CloudWatch to monitor their EC2 instances and Lambda functions in a hybrid cloud environment. They want to receive notifications when CPU utilization exceeds 80% on an EC2 instance, automatically scale the instance when CPU usage remains high for 5 minutes, Store and analyze application logs from multiple AWS services in a centralized location. Which CloudWatch feature should the team configure to achieve these goals?

• A.Set up CloudWatch Alarms to monitor metrics and trigger an auto-scaling policy when the threshold is exceeded.
• B.Manually track CPU utilization and scale the instances when required.
• C.Enable AWS Config to monitor resource changes and trigger Lambda functions when needed.
• D.Use CloudWatch Logs to store and retrieve metrics for EC2 and Lambda functions.

A DevSecOps engineer is responsible for identifying and mitigating security risks across cloud-based deployments and web applications in an enterprise DevSecOps environment. The organization follows a shift-left security approach, ensuring that vulnerabilities are detected early and remediated before deployment. To enhance the security posture, the engineer implements a security solution that provides Continuous monitoring of cloud workloads, automated vulnerability detection and risk assessment, and System hardening to reduce the attack surface. This tool integrates with Azure to identify vulnerable machines, detect compromised systems, and help secure cloud infrastructure. Which security tool is the engineer using?

• A.Tenable.io.
• B.Nikto.
• C.Burp Suite.
• D.Nexpose.

A multinational retail company is adopting AWS to modernize its software development lifecycle and improve automation, scalability, and deployment efficiency. The DevOps team is currently facing several challenges, including manual code compilation and testing, slow-release cycles, and frequent deployment errors that lead to application downtime. To address these issues, the company plans to integrate AWS DevOps services to optimize its CI/CD pipeline. The team needs a solution that can compile source code, run automated tests, and generate deployment-ready artifacts without requiring manual setup or server management. By implementing this solution, they aim to process multiple builds in parallel, improve test automation, and accelerate software delivery. Which AWS DevOps service should the company use to meet this requirement?

• A.AWS CodeCatalyst.
• B.AWS CodeBuild.
• C.AWS CodeDeploy.
• D.AWS CodePipeline.