Question 26

You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.
You need to ensure that the project can be scanned for known security vulnerabilities in the open source libraries.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question 27

You create an alert rule in Azure Monitor as shown in the following exhibit.

Which action will trigger an alert?
  • Question 28

    Which branching strategy should you recommend for the investment planning applications suite?
  • Question 29

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
    The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt.
    You need to recommend changes to reduce the accumulated technical debt.
    Solution: You recommend increasing the code duplication.
    Does this meet the goal?
  • Question 30

    You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1.
    You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines.
    What should you do?