Hands-On Security in DevOps

Questions

1. The suggested security testing kit should include which of the following?
   1. Privacy checklist
   2. Testing toolkits
   3. Security testing plan templates
   4. All of the above
2. Which industry reference refers to the mobile security?
   1. OWASP testing guide
   2. NIST 800-115 pentest
   3. Moible Security Testing Guide (MSTG)
   4. PCI Pentest Guide
3. What is the testing strategy?
   1. It's a security checklist
   2. It defines the testing approaches for the high-risk functions
   3. It's a white-box testing
   4. It's a black-box testing

4. Which of the following is not a typical high-risk module?
   1. Administration management
   2. Authentication
   3. Installation
   4. Password reset
5. Which one of the following security tools is not used for web security?
   1. Nmap
   2. OWASP ZAP
   3. Arachni
   4. Burp
6. Which of the following ...