312-97 practice question 23 of 35

(Charles Drew has been working as a DevSecOps team leader in an IT company located in Nashville, Tennessee. He would like to look at the applications…

Full set: 100 questions
(Charles Drew has been working as a DevSecOps team leader in an IT company located in Nashville, Tennessee. He would like to look at the applications from an attacker’s perspective and make security a part of the organizations’ culture. Imagine, you are working under Charles as a DevSecOps engineer. Charles has asked you to install ThreatPlaybook, which is a unified DevSecOps Framework that allows you to go from iterative, collaborative threat modeling to application security testing orchestration. After installation, you must configure ThreatPlaybook CLI; therefore, you have created a directory for the project and then you go to the current directory where you would like to configure ThreatPlaybook. Which of the following commands will you use to configure ThreatPlaybook? (Here, represents your email id; represents IP address; and represents the nginx port.))
Answer options
A: playbook configure -e -h -p .
B: ThreatPlaybook configure -e -u -p .
C: ThreatPlaybook configure -e -h -p . Correct answer
D: playbook configure -e -u -p .
Correct Answer:
C. ThreatPlaybook configure -e < your-email > -h < host-info > -p < port >.
Explanation

ThreatPlaybook is a DevSecOps framework with a command-line interface (CLI) for configuration and operation. The official documentation specifies that the command to configure the CLI is threatplaybook configure. This command requires parameters for the user's email, the host information (IP address or domain name) of the ThreatPlaybook server, and the port number. The correct flags for these parameters are -e for email, -h for host, and -p for port, making the complete command ThreatPlaybook configure -e -h -p .

Why Incorrect

A. This option uses the shorthand playbook instead of the full command name ThreatPlaybook, which may not be a valid alias. The full name is the documented command.
B. The -u flag is incorrect for specifying the host information. The correct flag, as per the tool's documentation, is -h.
D. This option uses both an incorrect command shorthand (playbook) and an incorrect flag for the host (-u instead of -h).

References

- ThreatPlaybook Official Documentation (GitHub Repository), README.md or docs section. The setup and configuration instructions detail the CLI commands. The "Configure CLI" section shows the command: threatplaybook configure --email --host --port . The short flags are -e, -h, and -p. (github.com/we45/ThreatPlaybook/blob/master/docs/clidoc.md)

Scroll to Top