Cisco Exam 300-915 Topic 14 Question 58 Discussion

Actual exam question for Cisco's 300-915 exam

Question #: 58
Topic #: 14

Refer to the exhibit.

When a Docker image is built using this Dockerfile, which two statements are valid on Cisco IOx 1.8 and before? (Choose two.)

AIt builds an image that can be executed on all Cisco platforms.

BIt builds a Docker image that cannot be used directly on Cisco IOx.

CIt compiles a 'hello world' program in C.

DIt creates two separate images.

EIt builds an IOx package that can be deployed directly.

Show Suggested Answer

Suggested Answer: D, E

by Linn at Mar 09, 2024, 01:50 AM

Limited Time Offer

25%

Off

Get Premium 300-915 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lorrine

10 months ago

I think it could be helpful, but I believe focusing on automated code reviews and team training is more critical for security.

upvoted 0 times

...

Rosendo

10 months ago

What do you think about the other options like B) Implement auto-provisioning security inspection for the code?

upvoted 0 times

...

Julieta

10 months ago

That's a good point, Lorrine. It's important to continually test the system for security weaknesses.

upvoted 0 times

...

Lorrine

10 months ago

Performing on-going penetration testing on the system could also help in identifying and fixing security vulnerabilities.

upvoted 0 times

...

Rosendo

10 months ago

I agree with Julieta, but I also think E) Train members of the team in a secure software development lifecycle methodology such as OWASP is crucial.

upvoted 0 times

...

Julieta

11 months ago

I think A) Perform automated code reviews prior to deployment is really important for security.

upvoted 0 times

...

Carylon

11 months ago

That's a good point, Destiny. It's always good to have multiple security measures in place.

upvoted 0 times

...

Destiny

12 months ago

I believe option B should also be considered. Implementing auto-provisioning security inspection can add an extra layer of security.

upvoted 0 times

...

Susy

12 months ago

I agree with you, Carylon. Automated code reviews and training in secure development are crucial.

upvoted 0 times

...

Carylon

1 years ago

I think option A and E are important for making the software development lifecycle more secure.

upvoted 0 times

...

Haha, Lai makes a good point. 'Auto-provisioning security inspection' does sound like some buzzword-compliant nonsense. But hey, maybe the exam writers are trying to trip us up with that one. I'd stick with the tried-and-true methods - code reviews and OWASP training. Can't go wrong there.

upvoted 0 times

Weldon

1 years ago

E) Train members of the team in a secure software development lifecycle methodology such as OWASP.

upvoted 0 times

...

Evette

1 years ago

A) Perform automated code reviews prior to deployment.

upvoted 0 times

...

Lakeesha

1 years ago

C) Perform on-going penetration testing on the system.

upvoted 0 times

...

Selma

1 years ago

E) Train members of the team in a secure software development lifecycle methodology such as OWASP.

upvoted 0 times

...

Brandee

1 years ago

A) Perform automated code reviews prior to deployment.

upvoted 0 times

...

Lai

1 years ago

Hmm, I'm not so sure about option B. 'Auto-provisioning security inspection' - what does that even mean? Sounds like some made-up consultant jargon to me. I'd much rather see a good old-fashioned code review, and make sure the team is trained on OWASP principles. Keep it simple, you know?

upvoted 0 times

...

Leonora

1 years ago

I agree with Gayla. Automated code reviews and training the team on secure software development are so important. You can't just rely on penetration testing at the end - you need to build security in from the start. I also think option B, 'Implement auto-provisioning security inspection for the code,' is a good one. Catching security issues early in the pipeline is key.

upvoted 0 times

...

Gayla

1 years ago

This is a great question that really gets at the heart of securing the software development lifecycle, especially for an IoT project where security is critical. I think the two best options here are A) Perform automated code reviews prior to deployment and E) Train members of the team in a secure software development lifecycle methodology such as OWASP.

upvoted 0 times

...

Cisco Exam 300-915 Topic 14 Question 58 Discussion

Contribute your Thoughts:

Lorrine

Rosendo

Julieta

Lorrine

Rosendo

Julieta

Carylon

Destiny

Susy

Carylon

Laurel

Weldon

Evette

Lakeesha

Selma

Brandee

Lai

Leonora

Gayla