Security Engineering Automation Quiz

1. What is the primary advantage of API-driven security automation?

Increased manual work

Seamless integration between security tools

Elimination of tool diversity

Reduced visibility into systems

2. Which approach best integrates security automation with DevOps workflows?

Keeping security separate from development

Embedding security checks early in the pipeline (shift-left)

Security only at the end of deployment

Manual security approval for every change

3. What is the primary purpose of automated compliance checking in security automation?

To increase administrative overhead

To continuously verify systems meet regulatory requirements

To eliminate compliance officers

To hide non-compliance

4. Which tool is commonly used for secrets management in automated security workflows?

Storing credentials in scripts

HashiCorp Vault or AWS Secrets Manager

Using default passwords

Hardcoding API keys

5. In security automation, what does the term 'idempotence' mean?

Running the same automation multiple times produces different results

Running the same automation multiple times produces the same safe state

Automation that requires manual intervention

Automation that deletes data

6. What is the benefit of version control for security automation scripts?

No audit trail

Traceability, rollback capability, and collaboration

Slower deployment

Elimination of security reviews

7. Which automation capability reduces the mean time to detect (MTTD) threats?

Manual alert review

Automated log aggregation and real-time analysis

Disabling alerts

Reducing monitoring coverage

8. In container security, what does automated scanning address?

Physical security only

Vulnerabilities in container images before deployment

Network bandwidth

Employee productivity

9. What is the role of webhooks in security automation?

To replace human decision-making

To trigger automated actions based on external events

To eliminate logging

To increase system complexity

10. Which practice ensures security automation doesn't introduce new vulnerabilities?

Skipping code review

Testing automation scripts in production

Code review and testing in isolated environments

Disabling security controls

11. Which scripting language is most commonly used for cross-platform security automation tasks?

Python

COBOL

Assembly

Fortran

12. Which automation approach is best for managing security configurations across multiple cloud providers?

Manual configuration per provider

Infrastructure-as-Code with multi-cloud frameworks

Avoiding cloud entirely

Using only proprietary tools

13. In security automation, what is a playbook?

A marketing document

A defined set of automated steps to respond to security events

A physical security policy

A list of employees

14. What does SIEM integration with automation enable?

Real-time automated incident response

Elimination of all false positives

Removal of security monitoring

Increased data storage costs

15. Which of the following is a key component of a security automation workflow?

Alert suppression

Event enrichment and correlation

Disabling logging

Manual log review only

16. What is the primary benefit of automating threat detection and response?

Reduced incident response time and consistency

Complete elimination of all threats

Removal of security analysts

Increased attack surface

17. Which automation framework uses YAML for defining playbooks?

Puppet

Ansible

Chef

SaltStack

18. In CI/CD pipelines, what is the primary purpose of security scanning automation?

Slow down deployment

Detect vulnerabilities before code reaches production

Replace manual testing entirely

Increase project complexity

19. Which tool is primarily used for security orchestration and automated response (SOAR)?

Terraform