Passing exam with 312-97 latest training materials

William Edwards is working as a DevSecOps engineer at SVR Software Solution Pvt. Ltd. His organization develops software products and applications related to digital marketing. William integrated Prisma Cloud with Jenkins to detect threat-intelligence based threat detection. This integration will allow him to scan container images and serverless functions for security issues in the CI/CD pipeline. Which of the following is employed by Prisma Cloud to understand the normal network behavior of each customer's cloud environment to detect network anomalies and zero- day attacks effectively with minimal false positives?

• A. Advanced supervised data mining.
• B. Advanced unsupervised data mining.
• C. Advanced supervised machine learning.
• D. Advanced unsupervised machine learning.

Cindy Williams has recently joined an IT company as a DevSecOps engineer. She configured Bundle-Audit in Travis CI. Cindy detected vulnerability in Gemfile dependencies and resolved it by adding some line of codes. How does Bundler scan Gemfile.lock for insecure versions of gems?

• A. By taking the information from the travis.yml file and comparing it with the known vulnerabilities.
• B. By taking the information from the travis.yml and comparing it with the unknown vulnerabilities.
• C. By taking the information from the Gemfile and comparing it with the unknown vulnerabilities.
• D. By taking the information from the Gemfile and comparing it with the known vulnerabilities.

Henrik Larsson, a DevSecOps engineer at a Gothenburg automotive manufacturer, wants his CI pipeline to fail the build if any Dockerfile violates best practices, such as running as root or using the "latest" tag for a base image. Which type of tool should Henrik integrate?

• A. Dockerfile linter (e.g., Hadolint)
• B. Kubernetes NetworkPolicy
• C. Load balancer health check
• D. SIEM correlation rule

Cheryl Hines has been working as a senior DevSecOps engineer over the past 5 years in an IT company. Due to the robust features offered by Keywhiz secret management tool such as compatibility with all software, untraceable secrets, no impact of power cut or server outage, etc., Cheryl's organization is using it for managing and distributing secrets. To add a secret using Keywhiz CLI, which of the following commands should Cheryl use?

• A. $ keywhiz.cli --DevSecTrustStore --user keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• B. $ keywhiz.cli --devTrustStore --user keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• C. $ keywhiz.cli --devTrustStore --admin keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.
• D. $ keywhiz.cli --devsecTrustStore --admin keywhizAdmin login $ keywhiz.cli add secret --name mySecretName < mySecretFile.

Emily Carter, a DevSecOps Engineer at CloudSecure Solutions, is responsible for ensuring the security of open-source dependencies used in her company's cloud-based applications running on Google Cloud Platform (GCP). The organization follows CI/CD best practices, and Emily needs a tool that can automate security checks throughout the development lifecycle. She decides to integrate Snyk Open Source into the GCP CI/CD pipeline. Emily's team wants to ensure that potential vulnerabilities are identified before code is merged into the main branch. Which approach should Emily take to achieve this?

• A. Use historical vulnerability reports to track security risks over time.
• B. Perform security audits on dependencies after the application is deployed.
• C. Configure automated scans in the CI/CD pipeline to analyze dependencies in pull requests.
• D. Enable real-time security alerts to notify developers of potential threats.