ECCouncil 312-97 Value Pack (Frequently Bought Together)

A cloud operations team manages a fleet of virtual machines (VMs) in Google Cloud Platform (GCP). The team wants to automate OS patching across all VM instances without manual intervention, ensure compliance by keeping all VMs up to date with the latest security patches and monitor and manage software configurations across multiple VM instances efficiently. To achieve these goals, the team decides to leverage a GCP service that provides centralized patch management, configuration enforcement, and automation. Which GCP service should the team use?

• A. GCP Firewall Rules.
• B. Cloud Logging.
• C. Cloud Run.
• D. GCP VM Manager.

An enterprise healthcare application was recently targeted by a sophisticated attack. The attackers exploited misconfigured data flows and improperly secured API endpoints, exposing sensitive patient records. The DevSecOps team immediately deployed a tool to analyze the application's architecture by modeling its assets in a YAML file. This analysis revealed the exact vulnerabilities and provided detailed mitigation strategies, such as securing data flows with encryption and implementing stricter API access controls. The generated report helped the team resolve the issues swiftly and prevent future breaches. Which tool was likely used to handle this scenario?

• A. Snyk.
• B. Threagile.
• C. AWS Shield.
• D. GitLab Duo.

Curtis Morgan is working as a DevSecOps engineer at Orchid Pvt. Ltd. His organization develops online teaching software. Beth McCarthy is working in a software development team, and she requested Curtis to help her in making pre-commit hooks executable on her local machine. Curtis went through the "repo.git\hooks" directory and removed the ".sample" extension from "pre- commit.sample" file by using "chmod +x filename" command and made the pre-commit hook executable on Beth's local machine. On the next day while developing the code for the software product, Beth accidentally committed the code with sensitive information. What will be the result of this commit?

• A. The script will exit with 0.
• B. The script will exit with 3.
• C. The script will exit with 2.
• D. The script will exit with 1.

John, a software developer, wants to monitor the status of a running Kubernetes service without navigating through multiple dashboards. Instead, he interacts with Kubiya using a simple command to retrieve service logs and performance metrics, ensuring that the application is running smoothly and identifying potential issues. This interaction is focused on observability, monitoring, and system performance tracking, which are key aspects of maintaining and managing deployed applications. Which CI/CD pipeline phase does this interaction fall under?

• A. Feedback.
• B. Testing.
• C. Deployment.
• D. Operations.

A multinational e-commerce company has been following the Waterfall methodology for years to develop its internal applications. However, the company has been facing challenges in keeping up with frequent market changes, leading to delays in product releases. The development team struggles with late-stage problem identification, as issues cannot be addressed until the repair phase. Additionally, customers often report that the final product does not fully meet their expectations due to misalignment in project requirements. To overcome these challenges, the company's leadership has decided to transition to a more iterative and flexible software development approach that allows continuous testing, faster releases, and incremental enhancements based on feedback. Which software development methodology should the company adopt to resolve these issues?

• A. V-Model methodology.
• B. Waterfall methodology.
• C. Agile methodology.
• D. DevOps methodology.