Question

You are an influential technical lead for a company that architects, designs, implements, and maintains the XYZ operating system and corresponding software tools. While having a conversation with your colleagues, Chief Technology and Security Officers, it was mentioned you should be integrating DevOps practices to support XYZ operating systems security. Give a well explained and informative answer on the structure and corresponding value of DevOps for the support of XYZ operating system security. Include examples of data-driven decisions that are supported by DevOps.

Answer 1

• Devops is the new techniques that is now widely used to deploy your code from the local to the production environment.
• From the system administration to application maintenance to server and application monitoring, the whole process comes under the Devops operation.
• The DevOps is the operation which mainly focuses on continuous integration and continuous deployment.
• Using git the developers commit their code and using Jenkins the committed code is being compiled and a build is formed.
• Then the build is deployed in the application server.
• Then the code and the application is being tested and upon approval the code is then deployed to the production environment.
• Coming to the security, the servers are being secured with SSL security from a proper certificate authority.
• This servers should be properly patched and upgraded under DevOps.
• Moreover, data cleanup process should also be part of maintenance part.
• The servers should be maintained in every weekend and that maintenance process should be done automated.
• One of the example of data driven decision is the continuous integration and continuous deployment.
• Where the change in code is being immediately deployed in the production environment without stopping the server.