PeopleCert Exam DevSecOps Topic 2 Question 50 Discussion

Actual exam question for PeopleCert's DevSecOps exam

Question #: 50
Topic #: 2

[All DevSecOps Questions]

Which of the following is BEST deserved as "being outside the scope of risk management in DevSecOps"?

AManage major events that caused harm or loss

Binform business risk decisions for applications

CAssess me effectiveness of cybersecurity program

DEnsure the acuity to meet compliance controls

Show Suggested Answer

Suggested Answer: C

by Rolland at Jan 12, 2025, 02:07 PM

Limited Time Offer

25%

Off

Get Premium DevSecOps Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nell

14 days ago

Oof, this one's a real head-scratcher. But I'm gonna have to go with C. Assessing the effectiveness of the cybersecurity program is about as relevant to risk management in DevSecOps as a fish riding a bicycle.

upvoted 0 times

Frank

1 days ago

User 1: I think C is the best choice too.

upvoted 0 times

...

Joanne

15 days ago

You know, this question's making my head spin like a top! But I'm gonna go with D. Ensuring the ability to meet compliance controls seems like a pretty important part of risk management, even in DevSecOps.

upvoted 0 times

...

Amina

17 days ago

Nah, I'm gonna have to disagree with you, Marylou. I reckon A is the best answer here. Managing major events that caused harm or loss is definitely not within the scope of risk management in DevSecOps.

upvoted 0 times

...

Kenny

1 months ago

But wouldn't ensuring compliance controls also be outside the scope?

upvoted 0 times

...

Kanisha

1 months ago

I agree with Marylin, that seems more like incident response than risk management.

upvoted 0 times

...

Marylou

2 months ago

Hmm, I think B is the way to go. Informing business risk decisions for applications is totally relevant to risk management in DevSecOps.

upvoted 0 times

Karan

7 days ago

I see your point, but managing major events that caused harm or loss is also a critical aspect of risk management in DevSecOps.

upvoted 0 times

...

Terina

8 days ago

C is essential too, assessing the effectiveness of cybersecurity program is key in risk management.

upvoted 0 times

...

Lindsay

16 days ago

I think D is also important, ensuring compliance controls is crucial for managing risks.

upvoted 0 times

...

Rodolfo

1 months ago

I agree, B is definitely within the scope of risk management in DevSecOps.

upvoted 0 times

...

Marylin

2 months ago

I think managing major events that caused harm or loss is outside the scope.

upvoted 0 times

...

Alesia

2 months ago

Whoa, this one's a toughie! I'm gonna go with C. Assessing the effectiveness of the cybersecurity program seems a bit out of scope for risk management in DevSecOps.

upvoted 0 times

Iola

20 days ago

Yeah, focusing on managing major events or informing business risk decisions seems more aligned with DevSecOps risk management.

upvoted 0 times

...

Sunshine

23 days ago

I agree, it seems like more of a separate task that falls outside the scope of risk management.

upvoted 0 times

...

Noah

24 days ago

I think C makes sense, assessing cybersecurity effectiveness is not directly related to risk management in DevSecOps.

upvoted 0 times

...