ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 75 - AZ-400 discussion

Report
Export

You have 50 Node.js-based projects that you scan by using WhiteSource. Each project includes Package.json, Package-lock.json, and Npm-shrinkwrap.json files. You need to minimize the number of libraries reports by WhiteSource to only the libraries that you explicitly reference. What should you do?

A.
Configure the File System Agent plug-in.
Answers
A.
Configure the File System Agent plug-in.
B.
Add a devDependencies section to Package-lock.json.
Answers
B.
Add a devDependencies section to Package-lock.json.
C.
Configure the Artifactory plug-in.
Answers
C.
Configure the Artifactory plug-in.
D.
Delete Package-lock.json.
Answers
D.
Delete Package-lock.json.
Suggested answer: B

Explanation:

Separate Your Dependencies

Within your package.json file be sure you split out your npm dependencies between devDependencies and (production) dependencies. The key part is that you must then make use of the --production flag when installing the npm packages. The --production flag will exclude all packages defined in the devDependencies section.

Reference: https://blogs.msdn.microsoft.com/visualstudioalmrangers/2017/06/08/manage-your-open-source-usage-and-security-as-reported-by-your-cicd-pipeline/

asked 02/10/2024
Wessel Beulink
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first