A software vendor preparing for the EU Cyber Resilience Act must publish a detailed inventory of the components used in its applications. Its engineers report they have limited experience producing such an inventory. Which requirement of the Act is this scenario describing?
Explanation
A central requirement of the Act will be the publication of software bills of materials (SBOMs), which provide a detailed inventory of the components used
An organization wants to reliably enforce security checks and generate SBOMs across all its software releases at scale. According to the source material, what is the most effective mechanism for enforcing these security checks given current technology?
Explanation
given the current state of technology, the only effective way to enforce security checks is through CI/CD pipelines
Locked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to review