ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 161 - AZ-400 discussion

Report
Export

You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries. You need to ensure that all the open source libraries comply with your company's licensing standards. Which service should you use?

A.
NuGet
Answers
A.
NuGet
B.
Maven
Answers
B.
Maven
C.
Black Duck
Answers
C.
Black Duck
D.
Helm
Answers
D.
Helm
Suggested answer: C

Explanation:

Secure and Manage Open Source Software

Black Duck helps organizations identify and mitigate open source security, license compliance and code-quality risks across application and container portfolios. Black Duck Hub and its plugin for Team Foundation Server (TFS) allows you to automatically find and fix open source security vulnerabilities during the build process, so you can proactively manage risk. The integration allows you to receive alerts and fail builds when any Black Duck Hub policy violations are met.

Note: WhiteSource would also be a good answer, but it is not an option here.

Reference: https://marketplace.visualstudio.com/items?itemName=black-duck-software.hub-tfs

asked 02/10/2024
Jasper John Cecilio
30 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first