Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

BCS CISMP-V9 Exam - Topic 2 Question 113 Discussion

What Is the PRIMARY difference between DevOps and DevSecOps?
C) DevSecOps includes security on the same level as continuous integration and delivery.
A) Within DevSecOps security is introduced at the end of development immediately prior to deployment.
B) DevSecOps focuses solely on iterative development cycles.
D) DevOps mandates that security is integrated at the beginning of the development lifecycle.

BCS CISMP-V9 Exam - Topic 2 Question 113 Discussion

Actual exam question for BCS's CISMP-V9 exam
Question #: 113
Topic #: 2
[All CISMP-V9 Questions]

What Is the PRIMARY difference between DevOps and DevSecOps?

Show Suggested Answer Hide Answer
Suggested Answer: C

The primary difference between DevOps and DevSecOps lies in the integration of security practices. DevOps is a methodology that emphasizes collaboration between development and operations teams to automate the software development process, including continuous integration (CI) and continuous delivery (CD). However, DevOps does not inherently prioritize security as part of the development process.

DevSecOps, on the other hand, extends the DevOps principles by integrating security into every aspect of the software development lifecycle. This approach is often summarized by the term ''shift-left,'' which means incorporating security from the beginning and throughout the development process, rather than treating it as an afterthought or a final step before deployment. In DevSecOps, security is considered a shared responsibility among all team members, and it is addressed through continuous security processes that are as integral as CI/CD in the DevOps culture.


by Tashia at May 14, 2026, 10:19 AM

Limited Time Offer

25%

Off

Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Tien
4 days ago
D sounds good too, but it’s more about DevOps, not DevSecOps.
upvoted 0 times
...
Mireya
9 days ago
Exactly! C is the right choice. Security is essential throughout.
upvoted 0 times
...
Sabine
14 days ago
I feel like A is misleading. Security can't just be at the end.
upvoted 0 times
...
Estrella
19 days ago
Yeah, C makes sense. Security should be on par with CI/CD.
upvoted 0 times
...
Andrew
25 days ago
I think the main difference is security integration.
upvoted 0 times
...
Felicitas
30 days ago
D is misleading, security should be a priority from the start!
upvoted 0 times
...
Quiana
1 month ago
I’m not sure about C, seems like a lot to manage.
upvoted 0 times
...
Nobuko
1 month ago
Wait, I thought DevSecOps was just DevOps with a security team at the end?
upvoted 0 times
...
Desirae
2 months ago
Totally agree with C, it’s all about that continuous security!
upvoted 0 times
...
Karrie
2 months ago
C is the right answer! Security is integrated throughout.
upvoted 0 times
...
Kallie
2 months ago
B doesn't make sense. It's not just about iterative cycles!
upvoted 0 times
...
In
2 months ago
Wait, so security isn't just an afterthought in DevSecOps?
upvoted 0 times
...
Daron
2 months ago
Definitely agree with C! It's all about integration.
upvoted 0 times
...
Kenneth
2 months ago
I thought DevSecOps was just about adding security at the end?
upvoted 0 times
...
Horace
3 months ago
C is the right answer! Security is part of the whole process.
upvoted 0 times
...
Cathrine
3 months ago
I thought DevSecOps was about making security a priority throughout, so I guess that aligns with option C, but I need to double-check that.
upvoted 0 times
...
Lenna
3 months ago
I feel like DevOps focuses more on speed, while DevSecOps adds that security layer, but I can't recall if it’s at the beginning or the end.
upvoted 0 times
...
Juliann
3 months ago
I remember a practice question where they mentioned security being part of the whole development cycle, so I think C might be the right choice here.
upvoted 0 times
...
Marci
5 months ago
I think the main difference is about integrating security early in the process, but I'm not sure if that's what DevSecOps really emphasizes.
upvoted 0 times
...

Save Cancel