Hands-On Security in DevOps

Questions

1. Which of the following can be security requirements for the release gate of the design stage?
   1. Threat modeling activities should be performed
   2. Review the uses of third-party components
   3. Review the top common secure design issues
   4. All of the above

2. Which of the following is not the security gate for the coding stage?
   1. Source codes were scanned by one static code analysis tool
   2. No sensitive information was found in the source code
   3. Service logs were ready for security analysis
   4. High-severity issues in the code scanning results were all checked
3. Does CVSS stand for Common Vulnerability Scoring System?
4. Which of the following technologies is commonly used to do authorization for a big data framework?
   1. Apache Ranger
   2. Apache Ambari
   3. TLS ...