SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ157

Design security solutions for applications and data

You have an Azure subscription that contains multiple apps. The apps are deployed by using continuous integration and continuous delivery (CI/CD) pipelines in Azure DevOps.

You need to integrate static application security testing (SAST) and security smoke testing into the pipelines based on Microsoft Cloud Adoption Framework for Azure principles.

At which stage of the CI/CD process should each test type be integrated?

Select
SAST:
Security smoke testing:
Explanation

SAST scans source code for vulnerabilities when code is committed, providing early feedback before build and deployment stages. Security smoke tests run at the production-release stage to confirm that the deployed application’s essential security functions and configuration work correctly.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!