Practice Test 3 | Designing And Implementing Microsoft DevOps Solutions | AZ-400 | Dumps | Mock Test
A company wants to follow the Azure DevOps strategy for its development and deployment process. They want to ensure that during the development phase the following requirements are taken care of:
- Scanning of 3rd party packages in the code base for vulnerabilities
- Checking for unlicensed libraries in the code base
The company decides to implement these checks as part of the Continuous Integration process.
Would this fulfill the requirement?
A. Yes
B. No
Answer – A
For both the requirements, we need to perform a Software Composition Analysis (SCA) scan. This scan should be part of the Continuous Integration process to check these vulnerabilities.
The Microsoft documentation mentions the following representation on the CI/CD pipeline.
For more information on software composition analysis in the CI/CD pipeline, please visit the following URL-
Comments are closed, but trackbacks and pingbacks are open.