BCS CISMP-V9 Exam - Topic 2 Question 113 Discussion

Actual exam question for BCS's CISMP-V9 exam

Question #: 113
Topic #: 2

[All CISMP-V9 Questions]

What Is the PRIMARY difference between DevOps and DevSecOps?

AWithin DevSecOps security is introduced at the end of development immediately prior to deployment.

BDevSecOps focuses solely on iterative development cycles.

CDevSecOps includes security on the same level as continuous integration and delivery.

DDevOps mandates that security is integrated at the beginning of the development lifecycle.

Show Suggested Answer

Suggested Answer: C

The primary difference between DevOps and DevSecOps lies in the integration of security practices. DevOps is a methodology that emphasizes collaboration between development and operations teams to automate the software development process, including continuous integration (CI) and continuous delivery (CD). However, DevOps does not inherently prioritize security as part of the development process.

DevSecOps, on the other hand, extends the DevOps principles by integrating security into every aspect of the software development lifecycle. This approach is often summarized by the term ''shift-left,'' which means incorporating security from the beginning and throughout the development process, rather than treating it as an afterthought or a final step before deployment. In DevSecOps, security is considered a shared responsibility among all team members, and it is addressed through continuous security processes that are as integral as CI/CD in the DevOps culture.

by Tashia at May 14, 2026, 10:19 AM

Limited Time Offer

25%

Off

Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marci

I think the main difference is about integrating security early in the process, but I'm not sure if that's what DevSecOps really emphasizes.

upvoted 0 times

...