312-97 Practice Test

312-97 Practice Test practice questions, page 3 of 4, with answer review and explanations.

Question 11

Sandra Oliver joined SinClare Soft Pvt. Ltd. as a DevSecOps engineer in January of 2010. Her organization develops software and web applications related to the healthcare industry. Using IAST runtime security testing technology, she is detecting and diagnosing security issues in applications and APIs. The IAST solution used by Sandra encompasses a web scanner with an agent that works inside the server that hosts the application to provide additional analysis details such as the location of the vulnerability in the application code. Based on the given information, which of the following IAST solutions is Sandra using?

  1. Active IAST
  2. Semi-active IAST
  3. Semi-passive IAST
  4. Passive IAST

Question 12

Katie Holmes is working as a DevSecOps engineer at SeCSafe Anti-virus. The DevOps team of her organization has developed a distributed application with multiple microservices. Katie deployed all the microservices to the Kubernetes nodes successfully. The DevOps team approached Katie and informed her that the application is not working. Katie wants to check whether the Kubernetes cluster is working or not. Which of the following commands should Katie run step by step to verify that the Kubernetes is working?

  1. kube-etcd version kube-etcd cluster-info
  2. kube version kube cluster-info
  3. kubectl version kubectl cluster-info
  4. kubernetes version kubernetes cluster-info

Question 13

Brady Coleman is a senior DevSecOps engineer at CloudVac Security Private Ltd. He has created a new container named “eccbrad” from the centos:7 image using the command docker run -i -t --name geeklab centos:7 /bin/bash. Now, Brady wants to install the httpd package inside the eccbrad container. Which of the following commands should Brady use to install the httpd package inside the container?

  1. yum install httpd
  2. sudo install-httpd
  3. sudo install httpd
  4. yum install-httpd

Question 14

Peter Dinklage has been working as a senior DevSecOps engineer at SacramentSoft Solution Pvt. Ltd. He has deployed applications in docker containers. His team leader asked him to check the exposure of unnecessary ports. Which of the following commands should Peter use to check all the containers and the exposed ports?

  1. docker ps --quiet | xargs docker inspect --format : Ports
  2. docker ps --quiet | xargs docker inspect --all --format ‘:Ports=’
  3. docker ps --quiet | xargs docker inspect --all --format : Ports=
  4. docker ps --quiet | xargs docker inspect --format ‘: Ports=’

Question 15

Thomas Gibson has been working as a DevSecOps engineer in an IT company that develops software products and web applications related to law enforcement. To automatically execute a scan against the web apps, he would like to integrate InsightAppSec plugin with Jenkins. Therefore, Thomas generated a new API Key in the Insight platform. Now, he wants to install the plugin manually. How can Thomas install the InsightAppSec plugin manually in Jenkins?

  1. By creating a .hpi file and uploading to his Jenkins installation
  2. By creating a .conf file and uploading to his Jenkins installation
  3. By creating a .war file and uploading to his Jenkins installation
  4. By creating a .zip file and uploading to his Jenkins installation