Discuss Linux Foundation CGOA Exam Topic 4 Question 4

In the context of GitOps, what is one example of how DevSecOps principles manifested, enhancing the traditional DevOps lifecycle?

AGitOps enhances the DevSecOps experience by detecting security policy drift.

BDevSecOps in GitOps focuses primarily on post-deployment security audits.

CGitOps uses DevSecOps to enforce manual security checks at each deployment stage.

DIn GitOps, DevSecOps leads to the segregation of security tasks, assigning them exclusively to security teams.

Suggested Answer: A

In GitOps, DevSecOps integrates security into the GitOps workflow by treating security policies as code and storing them in Git. This enables automatic detection of security policy drift and ensures that any misconfiguration or violation is reconciled, just like application and infrastructure code.

''GitOps applies DevSecOps by managing security policies as code. This enables detection of drift in security configurations, ensuring environments remain compliant and secure.''

Thus, the correct answer is A.

===========

Get Premium CGOA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Darnell 8 months ago

Right! A integrates security throughout the lifecycle, not just at the end.

Julianna 8 months ago

D is a bad idea. Security should be everyone's responsibility, not just a team.

Helga 9 months ago

I don’t like C. Manual checks slow down the process.

Cristy 9 months ago

B seems relevant too, but it feels reactive, not proactive.

Darnell 9 months ago

I think A is the best choice. Detecting security policy drift is crucial.

Jesusa 9 months ago

Wait, are we really segregating security tasks? That’s surprising!

Gayla 9 months ago

D sounds wrong; security should be everyone's job!

Renea 10 months ago

C seems outdated, manual checks slow things down.

Silva 10 months ago

I disagree with B; it’s more than just audits.

Justa 10 months ago

I recall that option D doesn't align with the collaborative nature of DevSecOps, which emphasizes integrating security throughout the process, not just assigning it to a separate team.

Gertude 10 months ago

Option C seems off to me; I thought GitOps was more about automation rather than manual checks at each stage.

Chun 10 months ago

I'm not entirely sure, but I remember a practice question that mentioned post-deployment audits, which might relate to option B.

Tommy 11 months ago

I think option A sounds familiar because we discussed how GitOps can automate security checks and monitor for policy drift.

Sean 11 months ago

A) is spot on! Security drift detection is key.

Becky 11 months ago

Exactly! Continuous monitoring is key in GitOps.

Becky 11 months ago

Agreed! A really enhances security in GitOps.

Robt 11 months ago

C) GitOps uses DevSecOps to enforce manual security checks at each deployment stage.

Daron 12 months ago

Haha, "DevSecOps" sounds like a new superhero team. They'll save the day by writing secure code and merging it to the main branch!

Junita 12 months ago

I'm not sure about that. Isn't DevSecOps more about integrating security throughout the entire lifecycle, not just at the end?

Tijuana 1 year ago

That's a great answer! GitOps is all about keeping everything in code, so it makes sense that it would help with security policy management.

Linsey 1 year ago

A) GitOps enhances the DevSecOps experience by detecting security policy drift.

Starr 1 year ago

This is a tricky one. I think the key is to understand how GitOps and DevSecOps work together to improve the overall development and deployment lifecycle. Option A seems to capture that idea of using GitOps to detect security policy drift, which is a core DevSecOps principle.

Karl 1 year ago

I'm a bit confused by the wording of the question. It's asking for an "example" of how DevSecOps principles are manifested in GitOps, but the answer choices seem to be more general statements. I'll need to carefully read through each option to see which one provides a specific example.

Katie 1 year ago

Okay, let me think this through. I know GitOps is all about managing infrastructure as code, so I'm guessing the DevSecOps aspect has to do with automating security checks and enforcement as part of the deployment process. Option A sounds like the best fit for that.

Yvonne 1 year ago

Hmm, this question seems to be testing our understanding of how DevSecOps principles are applied in the context of GitOps. I think the key is to focus on how GitOps enhances the traditional DevOps lifecycle by incorporating security practices.

Sommer 7 months ago

↳ replying to Yvonne

D seems off. Security shouldn’t be just for specific teams.

Catarina 7 months ago

↳ replying to Yvonne

A makes more sense. It’s proactive about security.

Janna 8 months ago

↳ replying to Yvonne

I’m leaning towards B. Post-deployment audits are important too.

Maybelle 10 months ago

↳ replying to Yvonne

I believe A is the right choice. Security policy drift is crucial.

Linux Foundation CGOA Exam - Topic 4 Question 4 Discussion