az-400 Practice Question 1981
Exam: az-400
Domain: Develop a security and compliance plan
Topic: Implement security in the pipeline
Difficulty: medium
In a scenario where you are implementing dependency scanning using WhiteSource to identify and mitigate security vulnerabilities in your Azure DevOps pipeline, which of the following steps should you take to ensure that the pipeline only deploys if all dependencies are secure?
Answer Options
A
Manually review each dependency before deployment.
B
Configure the pipeline to fail the build if any dependency has a vulnerability.
C
Notify the development team via email if any dependency has a vulnerability.
D
Allow the pipeline to continue regardless of the security checks.
Correct Answer
B: Configure the pipeline to fail the build if any dependency has a vulnerability.
Explanation
The correct answer is B because it ensures that the pipeline will not proceed to the next stage if any of the dependencies have known vulnerabilities. Option A is incorrect as it does not address the security check. Option C is incorrect as it suggests a manual intervention which is not ideal for an automated pipeline. Option D is incorrect as it implies that the pipeline will always deploy regardless of the security checks.