Amara Nwosu, a security operations engineer at a Lagos telecom, wants to aggregate logs from applications, containers, and cloud infrastructure into a centralized platform where she can correlate events and detect anomalous patterns indicating a potential breach. Which category of tool should Amara deploy?

• A. SAST scanner
• B. SIEM (Security Information and Event Management)
• C. Load testing tool
• D. Secrets vault

Jayson Smith is working as a DevSecOps engineer in an MNC company located in Tampa, Florida. The senior software developer of his company, Sandra Oliver, has uploaded an application in her GitHub repository that might contain security vulnerabilities and has provided the URL to the DevSecOps team. Jayson would like to analyze the application developed by Sandra to detect and mitigate the security issues in the application code; therefore, he would like to clone Sandra's GitHub repository to his computer. Which of the following commands should Jayson use to clone the repository of another user to his computer?

• A. $ git clone https://github.com/REPOSITORY/USERNAME.git.
• B. $ github clone https://github.com/ REPOSITORY/USERNAME.git.
• C. $ github clone https://github.com/USERNAME/REPOSITORY.git.
• D. $ git clone https://github.com/USERNAME/REPOSITORY.git.

Paul McCartney has been working as a senior DevSecOps engineer in an IT company over the past 5 years. He would like to integrate Conjur secret management tool into the CI/CD pipeline to secure the secret credentials in various phases of development. To integrate Conjur with Jenkins, Paul downloaded Conjur.hpi file and uploaded it to the Upload Plugin section of Jenkins. Paul declared a policy branch using a code and saved it as a .yml file. Which of the following commands should Paul use to load this policy in Conjur root?

• A. $ conjur policy load -p root -f < file-name >.
• B. $ conjur policy load -f root -p < file-name >.
• C. $ conjur policy load -f root -b < file-name >.
• D. $ conjur policy load -b root -f < file-name >.

A global e-commerce company is struggling with frequent code integration issues and delayed software releases due to manual testing and deployment processes. Developers push code changes multiple times a day, but without an automated system in place, these changes often introduce bugs and inconsistencies in production. The company's leadership decides to adopt a structured DevOps approach to streamline development and deployment. They want a solution where code is frequently integrated into a shared repository, automated tests validate the changes, and every build remains in a deployable state. However, deployments should still require manual intervention before going live to ensure stability and compliance with business requirements. Which DevOps practice should the company implement?

• A. Continuous Deployment (CD).
• B. Manual Release Management.
• C. Continuous Delivery (CD).
• D. Continuous Integration (CI).

Cheryl Hines has been working as a senior DevSecOps engineer over the past 5 years in an IT company. Due to the robust features offered by Keywhiz secret management tool such as compatibility with all software, untraceable secrets, no impact of power cut or server outage, etc., Cheryl's organization is using it for managing and distributing secrets. To add a secret using Keywhiz CLI, which of the following commands should Cheryl use?

• A. $ keywhiz.cli --DevSecTrustStore --user keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• B. $ keywhiz.cli --devTrustStore --user keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• C. $ keywhiz.cli --devsecTrustStore --admin keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• D. $ keywhiz.cli --devTrustStore --admin keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.