Question 1
(Terry Crews has been working as a DevSecOps engineer at an IT company that develops software products and web applications related to IoT devices. She integrated Sqreen RASP tool with Slack for sending notifications related to security issues to her team. How can Sqreen send notification alerts to Slack?)
- AOption A:
By creating a cookbook, defining a trigger, security response, and notification.
- BOption B:
By creating a cookbook, defining a trigger, Alert a response, and notification.
- COption C:
By creating a playbook, defining a trigger, Alert a response, and notification.
- DOption D:
By creating a playbook, defining a trigger, security response, and notification.
Show answer and explanation
Correct answer: D
Sqreen provides runtime application self-protection (RASP) capabilities that allow teams to detect and respond to security threats in real time. Sqreen uses a structured automation mechanism called a playbook to define how security events are handled. A playbook consists of three key components: a trigger that detects suspicious or malicious behavior, a security response that defines what action Sqreen should take (such as blocking a request or flagging an attack), and a notification that sends alerts to external systems like Slack. The term “cookbook” is not used in Sqreen’s alerting and response model, making options A and B incorrect. Option C incorrectly uses the phrase “Alert a response” instead of “security response,” which does not accurately describe Sqreen’s configuration model. By using playbooks, Sqreen enables automated detection, response, and team notification during the Operate and Monitor stage, ensuring rapid awareness and collaboration when security incidents occur.