Peoplecert DevSecOps 認定試験の出題範囲:
| トピック | 出題範囲 |
|---|
| トピック 1 | - Realizing DevSecOps Outcomes: This section assesses the skills of Security Engineers in making security continuously adaptive and auditable by breaking security silos. Security-specific practices and integrated toolsets as code enable automated security KPIs and observable security practices in the DevOps value stream.
|
| トピック 2 | - Pipelines & Continuous Compliance: This domain focuses on the skills of DevOps Engineers in building security into the value stream efficiently. Development teams are empowered to implement features securely, shift-left security testing, and use tools for automated feedback. The section emphasizes culture improvements and continuous cross-skilling and collaboration between security and software engineers.
|
| トピック 3 | - Responsive DevSecOps Model: This domain measures the skills of DevOps Engineers in building collaboration and trust between security and other business units. It addresses removing gaps between traditional waterfall security cultures and fast-paced DevOps cultures. It emphasizes basing decisions on advice from everyone affected and people with expertise using systems thinking.
|
| トピック 4 | - DevSecOps Practices: This section evaluates the capabilities of Security Engineers in integrating security test and scanning tools into the CI
- CD pipeline to find known vulnerabilities (CVEs) and common software weaknesses (CWEs). The section discusses automating repetitive security tasks, such as configurations, fuzz testing, and long-running security tasks.
|
| トピック 5 | - Cyber Threat Landscape (CTL): This section assesses the skills of Security Engineers in understanding the cyber threat landscape. It covers the tactics, techniques, and procedures (TTPs) used by threat agents to orchestrate and manage attacks. It emphasizes optimizing security by identifying objectives and vulnerabilities (e.g., OWASP top ten) and defining countermeasures.
|
参照:https://www.peoplecert.org/browse-certifications/devops/DevOps-13/devsecops-foundation-3778
Peoplecert DevSecOps 試験概要: