ECCouncil 312-97 Value Pack (Frequently Bought Together)

Sophia, a DevSecOps engineer, is working on improving the security posture of her organization's cloud-native applications. She wants to integrate continuous threat modeling directly into the software development process to ensure that developers can identify security risks while writing code. To achieve this, she introduces a tool that allows developers to annotate source code with security concerns, generate data flow diagrams (DFDs), and create threat model reports dynamically. This approach enables real-time visibility into security risks and bridges the gap between development and security teams. Which tool should Sophia use to achieve this?

• A. JIRA.
• B. Bandit.
• C. ThreatSpec.
• D. Threagile.

An healthcare organization suffered a data breach after attackers exploited a known vulnerability in the OpenSSL library within one of its containerized applications. Upon investigation, the DevSecOps team discovered that the container image used in production was outdated, exposing it to security risks.There was no automated vulnerability scanning during the development and deployment phases. The lack of a secure container registry led to unverified and potentially insecure images being deployed. To prevent such security incidents in the future, the team decides to implement a solution that securely stores container images and automatically scans them for vulnerabilities before deployment. Which tool should the team use?

• A. Terraform.
• B. Amazon Elastic Container Registry (ECR).
• C. Jenkins.
• D. Kubernetes.

A DevOps team is using AWS CloudWatch to monitor their EC2 instances and Lambda functions in a hybrid cloud environment. They want to receive notifications when CPU utilization exceeds 80% on an EC2 instance, automatically scale the instance when CPU usage remains high for 5 minutes, Store and analyze application logs from multiple AWS services in a centralized location. Which CloudWatch feature should the team configure to achieve these goals?

• A. Set up CloudWatch Alarms to monitor metrics and trigger an auto-scaling policy when the threshold is exceeded.
• B. Enable AWS Config to monitor resource changes and trigger Lambda functions when needed.
• C. Use CloudWatch Logs to store and retrieve metrics for EC2 and Lambda functions.
• D. Manually track CPU utilization and scale the instances when required.

An organization has implemented a DevSecOps model where development, security, and operations teams collaborate from the initial design phase. Instead of treating security as a separate process, these teams jointly design software architectures that incorporate security and compliance requirements from the beginning. This ensures that security is proactively embedded rather than added later in the development cycle. Which DevSecOps process is the organization following?

• A. Continuous Authority to Operate (ATO).
• B. Collaborative Software Design.
• C. Security as Code (SaC).
• D. Orchestration.

Attackers exploited a vulnerability in a healthcare organization's application, injected malicious commands into user input fields, gained unauthorized access to the underlying server, exfiltrated patient records, and tampered with critical files. In this case, which of the following tools can assist the DevSecOps engineer of the organization in flagging the injection vulnerability in the codebase and provide actionable recommendations to fix the issue in their Azure DevOps pipeline?

• A. Gradle.
• B. Azure Defender for Cloud.
• C. Packer.
• D. CodeQL.