Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 1 of 28
Free Preview · 28 of 92 · questions 1–28 of 92 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
these Q & A only allows you to be familer with the exam question styles, they are not legit questions to the exam, please don't rely on them.
C. Scan the packages and libraries for malware prior to installation. ace the aaism For practice tests, I spent a good amount of time using CertsTopic. The questions were well structured and quite similar in style to what I saw on the actual exam. They helped me check my understanding and identify areas where I needed more review.
C. Using open-source libraries introduces software supply chain risks. Threat actors frequently target public repositories (like PyPI, npm, or GitHub) by compromising legitimate packages, typosquatting (creating malicious packages with names similar to popular ones), or exploiting dependency chains. Scanning these packages for malware, known vulnerabilities, and integrity issues before integrating them into the development environment is a critical DevSecOps practice to ensure the software's integrity.