312-97: EC-Council Certified DevSecOps Engineer (ECDE)Demo

By ECCouncil · Question Mode

QuestionQ60

Introduction to DevSecOps

Charles Drew works as a DevSecOps team leader for an IT company based in Nashville, Tennessee. He wants to view applications from an attacker's perspective and embed security into the organization's culture. Suppose you are a DevSecOps engineer reporting to Charles. He has asked you to install ThreatPlaybook, a unified DevSecOps framework that lets you move from iterative, collaborative threat modeling to application security testing orchestration.

After installing it, you need to configure the ThreatPlaybook CLI. To do this, you create a directory for the project and then navigate to that directory where you want to configure ThreatPlaybook.

Which of the following commands would you use to configure ThreatPlaybook?

(Here, <your-email> represents your email address, <host-info> represents the IP address, and <port> represents the nginx port.)

  • A ThreatPlaybook configure -e < your-email > -h < host-info > -p < port >
  • B playbook configure -e < your-email > -u < host-info > -p < port >
  • C ThreatPlaybook configure -e < your-email > -u < host-info > -p < port >
  • D playbook configure -e < your-email > -h < host-info > -p < port >
Explanation

The ThreatPlaybook CLI executable is named 'playbook' (distinct from the package name ThreatPlaybook), and its official configuration syntax, as documented in the ThreatPlaybook Configure CLI guide, is playbook configure -e <your-email> -u <host-info> -p <port>. The '-e' flag specifies the email address for the admin account, the '-u' flag specifies the addressable host/IP information for the server, and the '-p' flag specifies the nginx port used to reach the ThreatPlaybook web UI/API. This is executed from within the project directory created after installation, before any threat modeling or test orchestration work begins.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!