Pass with professional 312-97 actual quiz materials

Cindy Williams has recently joined an IT company as a DevSecOps engineer. She configured Bundle-Audit in Travis CI. Cindy detected vulnerability in Gemfile dependencies and resolved it by adding some line of codes. How does Bundler scan Gemfile.lock for insecure versions of gems?

• A. By taking the information from the Gemfile and comparing it with the unknown vulnerabilities.
• B. By taking the information from the Gemfile and comparing it with the known vulnerabilities.
• C. By taking the information from the travis.yml file and comparing it with the known vulnerabilities.
• D. By taking the information from the travis.yml and comparing it with the unknown vulnerabilities.

A security engineer is conducting a security audit of an organization's Google Cloud Platform (GCP) environment. As part of the assessment, they are tasked with integrating Intruder, a vulnerability assessment tool, into the CI/CD pipeline to enhance security monitoring. To ensure seamless, read-only access to required GCP resources, the engineer chooses to use OAuth for authentication. However, during the configuration phase, the integration fails due to insufficient permissions. Upon reviewing the settings, the engineer determines that the issue is related to missing OAuth scopes required for proper integration. Which of the following actions should the engineer take to resolve the issue?

• A. Assign limited OAuth permissions only to Compute Engine and Cloud DNS, restricting Cloud Platform access.
• B. Modify OAuth settings to exclude Cloud Platform project scope while keeping DNS and Compute Engine permissions.
• C. Manually configure OAuth to access DNS, Compute Engine, and Cloud Platform project scopes.
• D. Replace OAuth authentication with a service account that has elevated privileges to bypass scope restrictions.

A technology company recently implemented a continuous monitoring system to improve security, performance, and compliance across its cloud-based infrastructure and applications. The operations team set up monitoring tools to track infrastructure health, network stability, and application performance. After a routine system update, the company started experiencing intermittent service disruptions. Some users reported delayed responses, while others faced unexpected session timeouts. They investigated and reported that firewall settings and bandwidth usage, confirming that traffic flow remained stable. Analysis also shows that CPU, memory, and storage usage were within normal limits. Which aspect of continuous monitoring should the team investigate next?

• A. Security monitoring to analyze unauthorized access attempts or compliance issues.
• B. Application monitoring to assess system responses, error rates, and transaction stability.
• C. Infrastructure monitoring to verify system uptime and storage capacity.
• D. Network monitoring to check for anomalies in packet flow and connection stability.

A software development company relies on Jenkins to automate its CI/CD workflows. Recently, the DevOps team identified a need for a new plugin that would improve Jenkins maintainability and reliability, ensure critical data is retained for future use, support scheduled operations to improve workflow management, and provide flexibility in configuring what is stored Which Jenkins plugin would best suit their needs?

• A. Performance Publisher.
• B. Pipeline.
• C. Job DSL.
• D. ThinBackup.

Steven Smith has been working as a DevSecOps engineer in an IT company that develops software products related to the financial sector. His team leader asked him to integrate Conjur with Jenkins to secure the secret credentials. Therefore, Steven downloaded Conjur.hpi file and uploaded it in the Upload Plugin section of Jenkins. He declared host and layers, and declared the variables. Which of the following commands should Steven use to set the value of variables?

• A. $ conjur variable set -i < policy-path-of-variable-name > -v < secret-value >.
• B. $ conjur variable set -p < policy-path-of-variable-name > -s < secret-value >.
• C. $ conjur variable set -s < policy-path-of-variable-name > -p < secret-value >.
• D. $ conjur variable set -v < policy-path-of-variable-name > -i < secret-value >.