nerdexam
Microsoft

AZ-400 · Question #180

You use WhiteSource Bolt to scan a Node.js application. The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not…

The correct answer is A. Run and specify the flag. D. Configure WhiteSource Bolt to scan the node_modules directory only. To resolve NPM dependencies, you should first run "npm install" command on the relevant folders before executing the plugin. Doing whitesource scan for node_modules directory and when scanning ,in resolving…

Submitted by ahmad_uae· Mar 6, 2026Develop a security and compliance plan

Question

You use WhiteSource Bolt to scan a Node.js application. The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment. You need to ensure that WhiteSource Bolt only scans production dependencies. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • ARun and specify the flag.
  • BModify the WhiteSource Bolt policy and set the action for the licenses used by the development
  • CModify the devDependencies section of the project's Package.json file.
  • DConfigure WhiteSource Bolt to scan the node_modules directory only.

How the community answered

(54 responses)
  • A
    85% (46)
  • B
    9% (5)
  • C
    6% (3)

Explanation

To resolve NPM dependencies, you should first run "npm install" command on the relevant folders before executing the plugin. Doing whitesource scan for node_modules directory and when scanning ,in resolving https://whitesource.atlassian.net/wiki/spaces/WD/pages/34209870/NPM+Plugin https://stackoverflow.com/questions/72784118/unable-resolve-npm-dependencies-while- whitesource-scan-in-jenkins

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-400 Practice