Hands-On Security in DevOps

Questions

1. Which one of the following is not included in CERT Secure Coding standards?
   1. C/C++
   2. Java
   3. Android
   4. PHP

2. Find Security Bugs is mainly used for which of the following programming language?
   1. C/C++
   2. Python
   3. Java
   4. Go
3. Which one of the following can be a release criterion for secure coding?
   1. All source code must be reviewed with specified code scanning tools.
   2. All of the compiler warnings should be checked and cleared.
   3. All the warnings in scanning results which were generated by scanning tools must be checked
   4. All of above
4. What's the main purpose of using vulnerable projects to evaluate code scanning tools?
   1. Detection rate and false positive rates
   2. Budget
   3. Licenses
   4. Performance
5. Which one of the following does not mitigate against buffer ...