nerdexam
Cisco

300-745 · Question #22

A company published software that had a security vulnerability, and an attacker used the vulnerability to steal critical information from the environment. The issue was reported by the security…

The correct answer is D. source code management. Shift-left security means running security tests earlier in the development lifecycle. By integrating tests in the source code management stage (e.g., Git repositories), vulnerabilities can be detected and fixed before software is built and deployed, reducing the risk of…

Artificial Intelligence, Automation, and DevSecOps

Question

A company published software that had a security vulnerability, and an attacker used the vulnerability to steal critical information from the environment. The issue was reported by the security team, and the administrator was instructed to run shift-left security tests before publishing the software. Which component of the software development pipeline must be recommended to run the tests?

Options

  • Acontinuous deployment
  • Bcloud security posture management
  • Csoftware bill of material analysis
  • Dsource code management

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    14% (6)
  • C
    7% (3)
  • D
    77% (33)

Explanation

Shift-left security means running security tests earlier in the development lifecycle. By integrating tests in the source code management stage (e.g., Git repositories), vulnerabilities can be detected and fixed before software is built and deployed, reducing the risk of publishing insecure

Topics

#shift-left security#source code management#software pipeline#pre-deployment testing

Community Discussion

No community discussion yet for this question.

Full 300-745 Practice