AZ-400 Dependency Management 2

Question 1

Your team wants to prevent developers from publishing packages with known critical CVEs to Azure Artifacts. Which feature should you enable?

Accepted Answer

Artifact policies with vulnerability scanning

Answer

Artifact policies with vulnerability scanning (via Microsoft Defender for DevOps or integrated tools) can block publishing of packages containing critical CVEs.

Question 2

A developer runs 'npm audit' in their pipeline and it reports high-severity vulnerabilities. Which Azure DevOps pipeline task provides built-in npm audit integration?

Accepted Answer

npm task with 'custom' command set to 'audit'

Answer

The built-in npm pipeline task supports running 'npm audit' by setting the command to 'custom' and specifying 'audit' as the custom command.

Question 3

You want NuGet packages published to Azure Artifacts to be automatically deleted after 30 days unless promoted to the 'Release' view. Which feature handles this?

Accepted Answer

Retention policies

Answer

Retention policies in Azure Artifacts automatically delete older package versions based on age or version count, with promotions to views protecting packages from deletion.

Question 4

Which Maven scopes are NOT included in the final packaged artifact by default, making them safe for test-only dependencies?

Accepted Answer

test and provided

Answer

Maven 'test' scope dependencies are only on the test classpath and 'provided' scope is expected from the runtime environment, so neither is packaged in the final artifact.

Question 5

Your organization uses Azure Artifacts with upstream sources. A developer requests a package version that exists in the upstream but not locally. What happens?

Accepted Answer

The package is fetched from upstream, cached locally, and returned

Answer

Azure Artifacts upstream sources fetch the requested package from the upstream source, save a cached copy in your feed, and return it to the client transparently.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Dependency Management 2