SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ268

Design security solutions for applications and data

You have a Microsoft 365 tenant.

You have an Azure subscription containing Azure App Service web apps. The apps have these characteristics:

  • The apps use third-party and open-source components.
  • The apps were developed using C#, Python, and Java.
  • The app deployment process is managed by using Azure DevOps.
  • The app source code is stored in GitHub Enterprise Cloud repositories and is protected by using GitHub Advanced Security.

You need to reduce the risk of supply-chain attacks throughout the application lifecycle.

What should you implement?

  • A secret scanning
  • B Dependabot alerts
  • C app governance in Microsoft Defender for Cloud Apps
  • D NuGet Audit
Explanation

Dependabot alerts identify dependencies with known vulnerabilities by comparing a repository’s dependency graph with security advisories. This helps teams remediate vulnerable third-party and open-source components across supported ecosystems before attackers can exploit them.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!