- (Topic 4)
Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.
You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.
What should you use?
Correct Answer:
D
WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server.
Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source repositories.
Reference: https://www.azuredevopslabs.com/labs/vstsextend/whitesource/
- (Topic 4)
Your company has a release pipeline in an Azure DevOps project.
You plan to deploy to an Azure Kubernetes Services (AKS) cluster by using the Helm package and deploy task.
You need to install a service in the AKS namespace for the planned deployment. Which service should you install?
Correct Answer:
D
Before you can deploy Helm in an RBAC-enabled AKS cluster, you need a service account and role binding for the Tiller service.
Reference:
https://docs.microsoft.com/en-us/azure/aks/kubernetes-helm
- (Topic 4)
You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for auto scaling.
You have a project m Azure DevOps named Project 1. Project! is used to build a web app named App1 and deploy App1 to VMSSt.
You need to ensure that an email alert is generated whenever VMSS1 scales in or out. Solution: From Azure Monitor, configure the auto scale settings.
Does this meet the goal?
Correct Answer:
B
- (Topic 4)
You manage source code control and versioning by using GitHub.
You need to ensure that a PowerShell script is executed automatically before rebase operations are performed.
What should you use?
Correct Answer:
C
- (Topic 4)
You have an Azure key vault named KV1 and three web servers. You plan to deploy an app named App1 to the web server.
You need to ensure that App1 can retrieve a secret from KV1. The solution must meet the following requirements:
• Minimize the number of permission grants required
• Follow the principle of least privilege. What should you include in the solution?
Correct Answer:
B