Microsoft · AZ-401 · BETA
Security and compliance scanning
AZ-401 · Lesson 15 of 18 · 2:03:21
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Lesson 15 of the free AZ-401 series (domain 4): a scanning strategy, GitHub Secret Protection and GitHub Code Security on GitHub and for Azure DevOps (secret, code, and dependency scanning, push protection, Copilot Autofix), and Defender for Cloud DevOps security. With three quick checks and a recap.
Preview the topics
- Contoso wants to stop developers from pushing commits that contain credentials to its private GitHub repositories. What should it enable?
- Contoso enabled Code Security on an Azure Repos repository, but no code scanning alerts ever appear. What is most likely missing?
- Contoso’s security team wants one place to see the posture of repositories in Azure DevOps and GitHub, linked to the cloud resources they affect. What should it use?