ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 149 - AZ-400 discussion

Report
Export

You use WhiteSource Bolt to scan a Node.js application.

The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment. You need to ensure that WhiteSource Bolt only scans production dependencies.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.
Run npm install and specify the --production flag.
Answers
A.
Run npm install and specify the --production flag.
B.
Modify the WhiteSource Bolt policy and set the action for the licenses used by the development tools to Reassign.
Answers
B.
Modify the WhiteSource Bolt policy and set the action for the licenses used by the development tools to Reassign.
C.
Modify the devDependencies section of the project's Package.json file.
Answers
C.
Modify the devDependencies section of the project's Package.json file.
D.
Configure WhiteSource Bolt to scan the node_modules directory only.
Answers
D.
Configure WhiteSource Bolt to scan the node_modules directory only.
Suggested answer: A, C

Explanation:

A: To resolve NPM dependencies, you should first run "npm install" command on the relevant folders before executing the plugin. C: All npm packages contain a file, usually in the project root, called package.json - this file holds various metadata relevant to the project. This file is used to give information to npm that allows it to identify the project as well as handle the project's dependencies. It can also contain other metadata such as a project description, the version of the project in a particular distribution, license information, even configuration data - all of which can be vital to both npm and to the end users of the package.

Reference: https://whitesource.atlassian.net/wiki/spaces/WD/pages/34209870/NPM+Plugin https://nodejs.org/en/knowledge/getting-started/npm/what-is-the-file-package-json

asked 02/10/2024
Wilson Geneblazo
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first