2.3 Summarize secure application development, deployment, and automation concepts.

Question 1

Elasticity

Answer 1

the ability to resize an environment based on the load. Elasticity is a part of virtualization and can reduce costs. A user can increase or decrease resources as necessary. It is commonly used with cloud technologies.

Question 2

Scalability

Answer 2

the capacity to resize current resources based on workload resources. It is commonly used on cloud technologies.

Question 3

Containers

Answer 3

use the kernel as a host, but do not host an operating system. A container isolates and protects applications from other parts of the system.

Question 4

Redundancy

Answer 4

the process of duplicating critical components to provide fault tolerance.

Question 5

An administrator reconfigured a system back to its baseline settings after a vulnerability scanner detected deviation from the baseline configuration to improve the overall security posture of the system. What did the admin exercise in the Group Policy?

Answer 5

Integrity measurements

Question 6

What is done to identify baseline deviations. Automated tools continuously monitor the system for any baseline changes. If changes are found, Group Policy will force the system back to its original state.

Answer 6

Integrity measurements

Question 7

Least functionality

Answer 7

employs the principle of deploying systems with only the services and protocols required to perform the job. This is a component of system hardening but is not forced upon finding a vulnerability.

Question 8

Blacklisting

Answer 8

Group Policy that blocks certain applications to be installed but allows all else.

Question 9

Sandboxing

Answer 9

an isolated area for testing and developing.

Question 10

Code obfuscation

Answer 10

the method of disguising coding methods by way of renaming variables, replacing strings, and hiding comments.

Question 11

Continuous delivery

Answer 11

an agile software engineering approach that streamlines the processes of building, testing, and releasing software. This leads directly to faster delivery of software updates to the customer, reduced development risk through frequent, smaller updates, and cost reductions through process efficiency.

Question 12

Continuous deployment

Answer 12

automates the process of delivering software to a production environment, which can decrease the software development lifecycle. However, while this can indirectly lead to the benefits described in the question, it doesn’t directly answer the question’s focus on reducing risk, cutting cost, and faster delivery to the customer.

Question 13

Continuous integration

Answer 13

a method that frequently merges code changes into a main repository where it’s regularly built and tested. This practice reduces integration issues and bugs in the development phase, but it doesn’t directly address the reduction of risk, cost, and speed of delivery to the customer as described in the question.

Question 14

DevSecOps

Answer 14

more focused on integrating security considerations into every phase of the development process.

Question 15

change management

Answer 15

process that follows a change to a system from identification to implementation. It is used for controlled identification and implementation of required changes within a computer system.

Question 16

Version control

Answer 16

tracks the versions of software in real time. It will record who has accessed the code, and what was changed. Version Control also allows for rollback if necessary.

Question 17

Waterfall

Answer 17

The waterfall method of development maintains a top to bottom approach. When one stakeholder has finished his or her piece of work, then another can begin.