Free ECCouncil 312-97 Exam Dumps Questions & Answers

(Matt LeBlanc has been working as a DevSecOps engineer in an IT company that develops software products and web applications for IoT devices. His team leader has asked him to use GitRob tool to find sensitive data in the organizational public GitHub repository. To install GitRob, Matt ensured that he has correctly configured Go >= 1.8 environment and that $GOPATH/bin is in his $PATH. The GitHub repository URL from which he is supposed to install the tool ishttps://github.com/michenriksen/gitrob. Which of the following command should Matt use to install GitRob?.)

• A.  $ go git github.com/michenriksen/gitrob.
• B.  $ go git gitrob github.com/michenriksen/gitrob.
• C.  $ go get github.com/michenriksen/gitrob.
• D.  $ go get gitrob github.com/michenriksen/gitrob.

(Thomas McInerney has been working as a senior DevSecOps engineer in an IT company that develops software products and web applications related to the healthcare sector. His organization deployed various applications in Docker containers. Thomas' team leader would like to prevent a container from gaining new privileges. Therefore, he asked Thomas to set no_new_priv bit, which functions across clone, execve, and fork to prevent a container from gaining new privileges. Which of the following commands should Thomas use to list out security options for all the containers?)

• A.  docker ps -quiet -all | xargs docker inspect --format ': SecurityOpt'.
• B.  docker ps --quiet --all | xargs docker inspect --format ': SecurityOpt'.
• C.  docker ps -quiet -all | xargs docker inspect --format ': SecurityOpt='.
• D.  docker ps --quiet --all | xargs docker inspect --format ': SecurityOpt='.

(Rachel McAdams has been working as a senior DevSecOps engineer in an IT company for the past 5 years.
Her organization embraced AWS cloud service due to robust security and cost-effective features offered by it.
To take proactive decisions related to the security issues and to minimize the overall security risk, Rachel integrated ThreatModeler with AWS. ThreatModeler utilizes various services in AWS to produce a robust threat model. How can Rachel automatically generate the threat model of her organization's current AWS environment in ThreatModeler?.)

• A.  By using STRIDE per Element.
• B.  By using Accelerator.
• C.  By using YAML spec-based orchestration tools.
• D.  By using Architect.

(Thomas Gibson has been working as a DevSecOps engineer in an IT company that develops software products and web applications related to law enforcement. To automatically execute a scan against the web apps, he would like to integrate InsightAppSec plugin with Jenkins. Therefore, Thomas generated a new API Key in the Insight platform. Now, he wants to install the plugin manually. How can Thomas install the InsightAppSec plugin manually in Jenkins?)

• A.  By creating a .zip file and uploading to his Jenkins installation.
• B.  By creating a .hpi file and uploading to his Jenkins installation.
• C.  By creating a .war file and uploading to his Jenkins installation.
• D.  By creating a .conf file and uploading to his Jenkins installation.

(Kenneth Danziger is a certified DevSecOps engineer, and he recently got a job in an IT company that develops software products related to the healthcare industry. To identify security and compliance issues in the source code and quickly fix them before they impact the source code, Kenneth would like to integrate WhiteSource SCA tool with AWS. Therefore, to integrate WhiteSource SCA Tool in AWS CodeBuild for initiating scanning in the code repository, he built a buildspec.yml file to the source code root directory and added the following command to pre-build phase curl -LJOhttps://github.com/whitesource/unified-agent- distribution/raw/master/standAlone/wss_agent.sh. Which of the following script files will the above step download in Kenneth organization's CodeBuild server?.)

• A.  ssw_agent.sh.
• B.  aws_agent.sh.
• C.  cbs_agent.sh.
• D.  wss_agent.sh.