Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: DevOps Engineer Expert · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
CI is where Static Code Analysis can be performed.
B. Static code analysis You can analyse your source code without executing it(during CI phase), detect security weaknesses before integrate your code to the main source code. Penetration testing, typically performed after CI/CD processes, identify vulnerabilities and assess the security, simultating real-attacks Dynamic code analysis, unlike Static code analysis this evaluates the app during runtime (not during CI) Threat modeling, identifies potential threats and vulnerabilities for the app
https://docs.microsoft.com/en-us/azure/security/develop/security-code-analysis-overview "With the Microsoft Security Code Analysis extension, teams can add security code analysis to their Azure DevOps continuous integration and delivery (CI/CD) pipelines" Answer is B