QUESTION: 177 Exam Topic: Develop a security and compliance plan Questions

DRAG DROP (Drag and Drop is not supported)
You have a GitHub organization that contains three users named User1, User2, and User3. You have a project that contains a repository named repo1.

You need to configure permissions for repo1. The solution must meet the following requirements:

•Ensure that User1 can actively push to repo1.
•Ensure that User2 can manage issues and pull requests for repo1.
•Ensure that User3 can manage repo1.
•Prevent User3 from accessing sensitive data in repo1.

Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Reveal Solution Next Question

QUESTION: 178 Exam Topic: Develop a security and compliance plan Questions

You have an Azure key vault named KV1 and three web servers.

You plan to deploy an app named App1 to the web servers.

You need to ensure that App1 can retrieve a secret from KV1. The solution must meet the following requirements:

• Minimize the number of permission grants required.
• Follow the principle of least privilege.

What should you include in the solution?

role-based access control (RBAC) permission
a system-assigned managed identity
a user-assigned managed identity
a service principal

Answer(s): C

Reveal Solution Next Question

QUESTION: 179 Exam Topic: Develop a security and compliance plan Questions

You plan to use Azure DevOps to build and deploy an app that will be hosted in a Kubernetes cluster.

You need to scan the app image for vulnerabilities before the image is deployed to the cluster.

What should you include in the solution?

Microsoft Defender for Containers
Microsoft Defender for App Service
Microsoft Defender for DevOps
Microsoft Defender for Storage

Answer(s): A

Reveal Solution Next Question

QUESTION: 180 Exam Topic: Develop a security and compliance plan Questions

DRAG DROP (Drag and Drop is not supported)
You have an Azure Pipelines application CI/CD pipeline named Pipeline1.You need to add OWASP ZAP testing to Pipeline1.Which four actions should you add to Pipeline1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.