SC-100 Practice Question 4006
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: medium
You are designing a secure DevOps pipeline in GitHub Enterprise. You need to ensure developers do not accidentally commit API keys, connection strings, or certificates into git repositories. What feature should you mandate?
Answer Options
A
Secret Scanning with Push Protection in GitHub / Defender for DevOps
B
Deleting the git repository after every deployment
C
Encrypting source code files with local zip passwords
D
Restricting commits to weekend hours only
Correct Answer
A: Secret Scanning with Push Protection in GitHub / Defender for DevOps
Explanation
Enable Secret Scanning with Push Protection in GitHub (or Microsoft Defender for DevOps) to intercept and block git push attempts containing detected secret strings.