Choose 312-97 most accurate study material

Rafael Costa, a DevSecOps engineer at a Rio de Janeiro streaming company, wants to gradually enable a new recommendation algorithm for a subset of internal employees before opening it to all users, and needs the ability to instantly disable it without redeploying code if issues arise.
Which technique should Rafael use?

• A. Infrastructure as Code
• B. Immutable infrastructure
• C. Service mesh mTLS
• D. Feature flags/toggles

SinCaire is a software development company that develops web applications for various clients.
To measure the successful implementation of DevSecOps, the organization enforced U.S.
General Service Administrator (GSA) high-value DevSecOps metrics. Which of the following metrics implemented by SinCaire can measure the time between the code commit and production, and tracks the bug fix and new features throughout the development, testing, and production phases?

• A. Time to value.
• B. Change lead time (for application).
• C. Change volume (for application).
• D. Mean time to recovery (for applications).

Viktor Petrov, a DevSecOps engineer at a Sofia energy company, discovers that a critical zero- day vulnerability has been disclosed in a widely used logging library that his organization's applications depend on. He needs to quickly identify every application and service across the company using that specific library and version. Which artifact/practice enables Viktor to do this quickly?

• A. Rebuilding all applications from scratch
• B. SBOM inventory queries
• C. Disabling all logging company-wide
• D. Manual codebase grep across all repositories

Jayson Smith is working as a DevSecOps engineer in an MNC company located in Tampa, Florida. The senior software developer of his company, Sandra Oliver, has uploaded an application in her GitHub repository that might contain security vulnerabilities and has provided the URL to the DevSecOps team. Jayson would like to analyze the application developed by Sandra to detect and mitigate the security issues in the application code; therefore, he would like to clone Sandra's GitHub repository to his computer. Which of the following commands should Jayson use to clone the repository of another user to his computer?

• A. $ github clone https://github.com/USERNAME/REPOSITORY.git.
• B. $ git clone https://github.com/USERNAME/REPOSITORY.git.
• C. $ github clone https://github.com/ REPOSITORY/USERNAME.git.
• D. $ git clone https://github.com/REPOSITORY/USERNAME.git.

Sophia Carter, a Senior DevSecOps Engineer at TechShield Solutions, is responsible for enhancing security in the company's AWS-based software development lifecycle. In 2018, her company suffered a major cybersecurity breach, resulting in financial losses and reputational damage. Following the incident, the organization migrated to AWS cloud-based services to develop secure and resilient software products more efficiently. To detect security issues during code review, Sophia decides to integrate SonarQube with AWS CodePipeline by creating a pipeline using an AWS CloudFormation template, selecting SonarQube as the analysis tool from the AWS tools dropdown, configuring required stack parameters, and providing an email address to receive notifications for pipeline status and approvals. After configuring and deploying the CI/CD pipeline, what will happen when changes are committed to the application repository?

• A. An AWS Security Hub alert is created.
• B. An AWS CloudWatch event is triggered.
• C. An AWS Lambda function is invoked automatically.
• D. An AWS Config event is generated.