Secure Software Deployment Operations And Management

During an incident response, you identify that a threat actor has gained unauthorized access to an application's environment variables. What is the immediate correct step to take regarding credential management?

To ensure secure deployment of software artifacts, you must verify the integrity of the binaries. Which mechanism is most effective for ensuring that artifacts have not been tampered with since they were signed by the build system?

Which TWO methods are effective in hardening the production environment against 'Zero-Day' vulnerabilities?

Which of the following is a primary objective of 'Secure Configuration Management' in the software lifecycle?

You are auditing your software deployment process. Which practice is best to prevent 'Dependency Confusion' attacks where malicious packages are pulled from public registries instead of internal ones?

Which of the following is a key component of a 'Secure Software Deployment' plan?

You are implementing CI/CD pipelines using Jenkins. You need to ensure that container images are scanned for vulnerabilities before they are promoted to production. Which tool integration is most effective for this stage?

You are evaluating container orchestration security. What is the purpose of a 'Sidecar Container' in a Service Mesh?

A security analyst notices anomalous outbound traffic from a containerized microservice that was recently deployed. Which Kubernetes feature should be used to restrict this traffic to only known authorized endpoints?

A retail company runs a payment microservice in production. During a security review, the team must confirm that the service can detect and respond to anomalous administrative actions in near real time. The service runs on a container platform and writes structured events to a central log store. Which practice best ensures that administrative actions are detected and acted upon promptly?

Which THREE configuration management practices help reduce 'Configuration Drift' in a secure software environment?

When managing infrastructure as code (IaC) using Terraform, which practice is the most critical for secure configuration management of state files?

A financial services firm is rolling out a new release of its customer portal. The release includes updated third-party libraries and a modified container base image. Before promoting the build to production, the release manager must ensure the integrity and provenance of the artifacts. Which action best provides verifiable provenance and tamper detection for the container image?

You are configuring log aggregation for a microservices architecture. Which practice is essential for secure logging management?

Which THREE security controls are essential when implementing a 'Secure CI/CD' pipeline?

Which TWO aspects of the software deployment process directly impact the 'Confidentiality' of the application data?

Which THREE actions are essential for ensuring a secure Incident Response process for deployed software?

Which TWO security monitoring strategies should be implemented to secure an application during its operational lifecycle?

A security engineer at a healthcare SaaS provider is planning the disposal of decommissioned application servers that hosted an electronic health records system. The servers held encrypted databases and application logs. Which action best satisfies secure decommissioning requirements for the data at rest on these disks while preserving the ability to repurpose the hardware internally?

Which TWO actions should be taken when preparing a software build for a secure production deployment?