SC-100 · Question #329
You have an Azure subscription that contains 15 custom apps. The source files for the apps are stored in Git repositories. The apps are deployed by using Azure DevOps. You need to recommend a…
The correct answer is A. GitHub Advanced Security. GitHub Advanced Security (GHAS) provides native secret scanning and code scanning (SAST) capabilities directly within GitHub repositories and integrates with Azure DevOps pipelines. Its secret scanning feature specifically scans source code for hard-coded credentials, API keys…
Question
You have an Azure subscription that contains 15 custom apps. The source files for the apps are stored in Git repositories. The apps are deployed by using Azure DevOps. You need to recommend a DevSecOps solution to implement static application security testing (SAST) of the app code to identify hard-coded secrets. What should you include in the recommendation?
Options
- AGitHub Advanced Security
- BMicrosoft Defender for Key Vault
- CMicrosoft Dev Box
- DMicrosoft Defender for Cloud DevOps security
How the community answered
(26 responses)- A73% (19)
- B4% (1)
- C8% (2)
- D15% (4)
Explanation
GitHub Advanced Security (GHAS) provides native secret scanning and code scanning (SAST) capabilities directly within GitHub repositories and integrates with Azure DevOps pipelines. Its secret scanning feature specifically scans source code for hard-coded credentials, API keys, tokens, and other secrets - exactly the SAST requirement described. Since the source code is already stored in Git repositories and the deployment is managed through Azure DevOps, GHAS integrates seamlessly into the existing workflow without additional infrastructure. Defender for Key Vault (B) monitors key vault access, not source code. Microsoft Dev Box (C) is a cloud developer workstation service. Defender for Cloud DevOps security (D) aggregates findings from tools like GHAS but is not itself a SAST scanning engine.
Topics
Community Discussion
No community discussion yet for this question.