A cybersecurity team is responsible for enhancing security in a multi-cloud environment, with a significant reliance on Google Cloud services. As part of their DevSecOps strategy, they integrate Snyk with Google Cloud to identify security vulnerabilities in their cloud infrastructure. To complete the integration and successfully initiate a security scan, the team must ensure that the correct authentication and access details are provided in Snyk. Which key information must be entered into Snyk to properly configure the cloud environment and start the scan?

• A. Cloud Storage bucket configurations and API gateway settings.
• B. CI/CD pipeline configurations and Git branch metadata.
• C. Google Cloud IAM roles and compute resource details.
• D. Service account email and identity provider.

A multinational retail company is adopting AWS to modernize its software development lifecycle and improve automation, scalability, and deployment efficiency. The DevOps team is currently facing several challenges, including manual code compilation and testing, slow-release cycles, and frequent deployment errors that lead to application downtime. To address these issues, the company plans to integrate AWS DevOps services to optimize its CI/CD pipeline. The team needs a solution that can compile source code, run automated tests, and generate deployment-ready artifacts without requiring manual setup or server management. By implementing this solution, they aim to process multiple builds in parallel, improve test automation, and accelerate software delivery. Which AWS DevOps service should the company use to meet this requirement?

• A. AWS CodeDeploy.
• B. AWS CodePipeline.
• C. AWS CodeCatalyst.
• D. AWS CodeBuild.

Ethan Ramirez, a security analyst at a tech startup in Austin, discovers that developers are accidentally committing API keys and passwords to the company's public Git repository. Concerned about the security risks, he decides to put measures in place to prevent sensitive information from being committed in the first place. Which approach will best help Ethan enforce this security control?

• A. A firewall rule to block unauthorized Git commits.
• B. A pre-commit hook using the pre-commit framework.
• C. Manual code reviews before every commit.
• D. A scheduled security scan after deployment.

John, a software developer, wants to monitor the status of a running Kubernetes service without navigating through multiple dashboards. Instead, he interacts with Kubiya using a simple command to retrieve service logs and performance metrics, ensuring that the application is running smoothly and identifying potential issues. This interaction is focused on observability, monitoring, and system performance tracking, which are key aspects of maintaining and managing deployed applications. Which CI/CD pipeline phase does this interaction fall under?

• A. Testing.
• B. Feedback.
• C. Deployment.
• D. Operations.

Daniel, a DevSecOps engineer, is responsible for tracking and managing security risks and vulnerabilities in his organization's applications. To ensure an efficient workflow, he uses Jira to create security issues whenever a risk or vulnerability is detected. When a critical vulnerability is identified in the application, Daniel needs to determine whether the issue should follow a fix path, where the development team patches the code and revalidates it, or an accept risk path, where the issue is reviewed and deemed non-severe enough to proceed without a fix. Which approach should Daniel take if the vulnerability is critical and needs to be resolved before deployment?

• A. Accept the risk and close the issue without fixing it.
• B. Transfer the issue to a third party without further testing.
• C. Send the issue back to the development team.
• D. Ignore the issue if it does not cause immediate failure.