CCAK

Some of the reasons to integrate security in the early stages of the systems development life cycle include (select all that apply):

What are example benefits of including dynamic application security testing (DAST) in software security testing? (Select all that apply.)

Which of the following is not a primary function of a version control repository? (Select the BEST answer.)

What technology should be considered and assessed to manage the extensive credentials typically embedded and used by CI/CD pipelines?

5. On what elements should the auditor rely for auditability and accountability in a DevSecOps approach? (Select all that apply.)

In continuous integration pipelines, pull requests refer to what type of operations?

Which of the following is not primarily a security-specific type of test?

Which of the following is a key concept for auditors regarding testing in a continuous integration/continuous deployment (CI/CD) pipeline?