Microsoft · AZ-400
Secrets and security scanning
AZ-400 · Lesson 14 of 15 · 1:24:01
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-400 exam (Microsoft Certified: DevOps Engineer Expert). In this lesson: secrets in pipelines with Azure Key Vault and workload identity federation, secure files and leak prevention, a scanning strategy for dependencies, code, secrets, licenses, and containers, GitHub Advanced Security, Dependabot, and Defender for Cloud DevOps security. Includes three original practice questions.
Preview the topics
- An Azure pipeline must sign an Android app with a keystore file, which must not be stored in the repository. What fits?
- A team wants to block a push as soon as it contains a credential, before the secret ever reaches the repository. What fits?
- A security team needs one console that shows the security posture of code across Azure DevOps, GitHub, and GitLab. What fits?