PeopleCert Exam DevSecOps Topic 8 Question 48 Discussion

Actual exam question for PeopleCert's DevSecOps exam

Question #: 48
Topic #: 8

[All DevSecOps Questions]

Which of the following is BEST deserved as "being outside the scope of risk management in DevSecOps"?

AManage major events that caused harm or loss

Binform business risk decisions for applications

CAssess me effectiveness of cybersecurity program

DEnsure the acuity to meet compliance controls

Show Suggested Answer

Suggested Answer: C

by Carmen at Nov 18, 2024, 10:10 AM

Limited Time Offer

25%

Off

Get Premium DevSecOps Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ruby

13 days ago

I disagree. Assessing the effectiveness of cybersecurity program seems less relevant to risk management in DevSecOps.

upvoted 0 times

...

Joanne

17 days ago

I agree with Peggie. It's more about preventing risks than dealing with aftermath.

upvoted 0 times

...

Stevie

28 days ago

Haha, 'acuity'? I think you mean 'ability' to meet compliance controls. But Option D does seem relevant to risk management in DevSecOps.

upvoted 0 times

...

Peggie

1 months ago

I think managing major events that caused harm or loss is outside the scope.

upvoted 0 times

...

Arlean

1 months ago

I'm going with Option C. Assessing the effectiveness of the cybersecurity program is crucial for risk management in DevSecOps.

upvoted 0 times

Van

15 days ago

I agree, but I think managing major events that caused harm or loss is also crucial for risk management in DevSecOps.

upvoted 0 times

...

Viola

20 days ago

Option C is definitely important. Assessing the effectiveness of the cybersecurity program is key.

upvoted 0 times

...

Malcom

1 months ago

I disagree. Informing business risk decisions for applications is definitely within the scope of risk management in DevSecOps. That's a key part of the job.

upvoted 0 times

...

Carma

1 months ago

Option A seems to be the best answer here. Risk management in DevSecOps is primarily focused on identifying and mitigating risks, not managing major events that have already occurred.

upvoted 0 times