312-97: EC-Council Certified DevSecOps Engineer (ECDE)Demo

By ECCouncil · Question Mode

QuestionQ94

DevSecOps Pipeline-Code Stage

Jordon Garrett recently joined a startup IT company in Chicago, Illinois, as a DevSecOps engineer. His team leader asked him to identify a SAST tool that can secure the organization’s Azure environment. Which of the following SAST tools can Jordon choose to secure his organization’s Azure environment?

Choose two
  • A Tenable.io
  • B Coverity
  • C DevSkim
  • D Accurics
Explanation

Both Coverity and DevSkim perform static analysis of source code to identify security defects without running the application. Coverity provides static analysis for application security, and DevSkim is a security linter that analyzes source code for common security issues. Tenable.io and Accurics focus on vulnerability/exposure management and cloud-security posture rather than being SAST tools.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!