nerdexam
Microsoft

AZ-400 · Question #348

You need to consider the underlined segment to establish whether it is accurate. To find when common open source libraries are added to the code base, you should add Jenkins to the build pipeline. Sel

The correct answer is C. WhiteSource. WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silentl

Submitted by anna_se· Mar 6, 2026Develop a security and compliance plan

Question

You need to consider the underlined segment to establish whether it is accurate. To find when common open source libraries are added to the code base, you should add Jenkins to the build pipeline. Select "No adjustment required" if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

Options

  • ANo adjustment required.
  • BSourceGear Vault
  • CWhiteSource
  • DOWASP ZAP

How the community answered

(32 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    91% (29)

Explanation

WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source Azure DevOps integration with WhiteSource Bolt will enable you to: 1. Detect and remedy vulnerable open source components. 2. Generate comprehensive open source inventory reports per project or build. 3. Enforce open source license compliance, including dependencies’ licenses. 4. Identify outdated open source libraries with recommendations to update. Note: Black duck would also be a good answer, but it is not an option here.

Community Discussion

No community discussion yet for this question.

Full AZ-400 Practice