Correct Answer: GitHub Advanced Security Secret Scanning
Secret scanning is a feature of GitHub Advanced Security that monitors repositories for known secret formats (like Azure access keys, AWS tokens, API keys). If a secret is committe...
Correct Answer
GitHub Advanced Security Secret Scanning
Why This Answer Is Correct
Secret scanning is a feature of GitHub Advanced Security that monitors repositories for known secret formats (like Azure access keys, AWS tokens, API keys). If a secret is committed, it immediately flags it and can alert administrators or even block the push (with push protection enabled).
This question evaluates your knowledge of DevSecOps — a core concept tested in Microsoft Certified: DevOps Engineer Expert (AZ-400). Understanding DevSecOps is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are implementing DevSecOps practices. You need to scan your open-source dependencies (npm, NuGet) for known security vulnerabilities and licensing compliance issues during the CI build process. Which third-party tool natively integrates with Azure DevOps to provide this capability?
You are using Azure Pipelines and want to run Static Application Security Testing (SAST) on your code. You configure the SonarQube tasks in your pipeline. In which exact order must the SonarQube tasks be placed for a .NET application?