Which of the following BEST describes the role of Interactive Application Security Testing (IAST) in a DevSecOps pipeline, as emphasized in modern software development security practices? A. It scans source code for vulnerabilities without executing the application, focusing on syntax and structure. B. It analyzes running applications in a simulated environment to identify runtime vulnerabilities like injection attacks. C. It instruments the application to combine static and dynamic analysis, providing real-time feedback on vulnerabilities during execution. D. It examines third-party components and dependencies for known vulnerabilities and license compliance issues.

Who knew you could do this?

Boom Totally DIDN'T expect it. Even filled in the survey saying the exam is nothing like the course outline. Was convinced I'd failed so an absolute result to find out I hadn't. Thanks to @Vincent Primiani and the whole community for your help

A defense contractor is building a system that will store design data for classified weapons. Engineers must ensure that a user cleared for “Secret” cannot modify “Top Secret” design files, and that data from lower classifications can never compromise higher-level data integrity. Which information flow model BEST satisfies these requirements? A. Bell–LaPadula Model B. Biba Integrity Model C. Clark–Wilson Model D. Brewer–Nash (Chinese Wall) Model

During a major security incident, analysts determine that an attacker gained access through a compromised third-party API used by several internal applications. The organization has contained the affected systems and begun restoring from backups. According to proper incident response procedures, what should the security team do NEXT? A. Notify law enforcement of the breach and provide forensic evidence. B. Perform a lessons-learned review to identify control gaps and process improvements. C. Conduct a full forensic analysis to confirm the attack vector and scope of compromise. D. Resume normal operations once all backups are verified and systems are restored.