Cisco Exam 300-915 Topic 8 Question 54 Discussion

Actual exam question for Cisco's 300-915 exam

Question #: 54
Topic #: 8

As part of an IoT project, an organization is developing an edge application that will run on a gateway to securely transmit sensor information it receives into an IoT cloud. Based on the Agile software development lifecycle, the development team is planning to implement a CI/CD pipeline.

Which two methods should be suggested to make the software development lifecycle more secure during the implementation and testing? (Choose two.)

APerform automated code reviews prior to deployment.

BImplement auto-provisioning security inspection for the code.

CPerform on-going penetration testing on the system.

DPerform a GAP analysis on current security activities and policies.

ETrain members of the team in a secure software development lifecycle methodology such as OWASP.

Show Suggested Answer

Suggested Answer: D, E

by Allene at Dec 14, 2023, 12:22 PM

Limited Time Offer

25%

Off

Get Premium 300-915 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Solange

8 months ago

Haha, OWASP - sounds like a Marvel superhero! But in all seriousness, I think that's a great idea. Gotta make sure the whole team is up to speed on secure coding practices.

upvoted 0 times

...

Daron

8 months ago

Yeah, those are good points. I was also thinking about option E - training the team in a secure software development lifecycle methodology like OWASP. That kind of knowledge and expertise on the team could be really valuable.

upvoted 0 times

...

Brynn

8 months ago

Agreed. I'm immediately drawn to options A and C - automated code reviews and ongoing penetration testing. Those seem like really important steps to ensure the code is secure before deployment.

upvoted 0 times

...

Santos

8 months ago

Hmm, this is an interesting question. I think the key here is to focus on methods that can make the software development lifecycle more secure, specifically during implementation and testing.

upvoted 0 times

Chauncey

8 months ago

E) Train members of the team in a secure software development lifecycle methodology such as OWASP.

upvoted 0 times

...

Santos

8 months ago

A) Perform automated code reviews prior to deployment.

upvoted 0 times

...