312-97: EC-Council Certified DevSecOps Engineer (ECDE)Demo

By ECCouncil · Question Mode

QuestionQ72

Introduction to DevSecOps

Joe Adler has recently been offered a position as a DevSecOps engineer at an IT company that builds software products and web applications for the healthcare industry. He wants to implement the DevSec Hardening Framework to add a layer to the automation framework that configures operating systems and services and handles difficult settings, compliance guidelines, cryptography recommendations, and secure defaults. To apply the DevSec Hardening Framework to the machine, he first scanned the machine using the Nessus scanning tool, and then reviewed the compliance results before using the DevSec Hardening Framework.

Which of the following commands should Joe use to run the DevSec Hardening Framework?

  • A Chef-solo -h solo.rb -m solo.json
  • B Chef-solo -c solo.rb -j solo.json
  • C Chef-solo -m solo.rb -h solo.json
  • D Chef-solo -j solo.rb -c solo.json
Explanation

The DevSec Hardening Framework is deployed using Chef Solo, whose correct command-line syntax is chef-solo -c <config_file> -j <json_attributes_file>. The -c flag points Chef Solo to its configuration file (typically named solo.rb), which specifies cookbook paths and other run settings, while the -j flag points to a JSON file (solo.json) containing the node attributes and run-list needed to apply the hardening recipes. This is the standard, documented way to invoke a Chef Solo run for applying hardening configurations after reviewing compliance scan results (e.g., from Nessus).

Community Discussion

No comments yet. Be the first to start the discussion!