100 practice questions for EC-Council Certified DevSecOps Engineer (ECDE), exam 312-97, with full explanations.
Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.
- 100 questions mapped to the ECDE exam blueprint
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Instant delivery by email the moment you check out
- Free monthly updates for as long as the exam is live
- Pass or your money back
A 312-97 attempt costs US$550. This pack is US$39, paid once.
Try 10 questions free before you buy.
Last updated September 2026 · 100 questions
What makes the ECDE hard
ECDE is organised around the pipeline rather than around security topics. The blueprint walks the DevOps lifecycle stage by stage, plan, code, build and test, release and deploy, operate and monitor, and asks what security belongs at each stage and which tool does it, in both on-premises pipelines and AWS and Azure native tooling.
100 questions in four hours gives plenty of time, and most of the questions are scenarios about where in the pipeline a control should go.
Plan and code cover threat modelling and secure coding, with SAST and secret detection tools. Build and test cover software composition analysis, container image scanning, DAST, IAST and fuzzing. Release and deploy cover infrastructure as code security, container and Kubernetes orchestration security, and secrets management. Operate and monitor cover logging, runtime security, SIEM integration and continuous compliance. The passing score is 70%.
About the exam
312-97 (Certified DevSecOps Engineer) earns the EC-Council ECDE certification. It covers DevOps and DevSecOps culture and principles and the security of each pipeline stage: plan, code, build and test, release and deploy, and operate and monitor, on-premises and in AWS and Azure. There are no prerequisites with official training; self-study candidates need two years of experience and an eligibility application.
Exam modules
- Understanding DevOps culture
- Introduction to DevSecOps
- DevSecOps pipeline: plan stage
- DevSecOps pipeline: code stage
- DevSecOps pipeline: build and test stage
- DevSecOps pipeline: release and deploy stage
- DevSecOps pipeline: operate and monitor stage
100 multiple choice questions, 240 minutes, passing score 70%, US$550 per attempt, ECC Exam Portal with remote proctoring, certification valid for three years with EC-Council continuing education.
Reviews
There are no reviews yet.