exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 2 question 54 discussion

Actual exam question from Microsoft's SC-200
Question #: 54
Topic #: 2
[All SC-200 Questions]

HOTSPOT
-

You have an Azure subscription named Sub1 that uses Microsoft Defender for Cloud.

You have an Azure DevOps organization named AzDO1.

You need to integrate Sub1 and AzDO1. The solution must meet the following requirements:

• Detect secrets exposed in pipelines by using Defender for Cloud.
• Minimize administrative effort.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
VeiN
6 months, 1 week ago
1. Environment 2. ? I`m not sure here since after adding devops via Def For Cloud I can see on devops organization> extensions that extensions were automatcally added: Microsoft Security DevOps Microsoft Defender for DevOps Container Mapping IDK did this change ? Was it previously not automatic ?
upvoted 1 times
...
chepeerick
1 year, 6 months ago
Correct
upvoted 2 times
...
NICKTON81
1 year, 7 months ago
The answer is correct! https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-devops?branch=main https://learn.microsoft.com/en-us/azure/defender-for-cloud/azure-devops-extension
upvoted 4 times
Ramye
1 year, 2 months ago
But it appears the Azure DevOps environment is already exist as it the question says the below: so does it have to be created? You have an Azure DevOps organization named AzDO1.
upvoted 1 times
xRiot007
4 months, 3 weeks ago
Organization is not Environment. Two different things :P
upvoted 1 times
...
Ramye
1 year, 2 months ago
By created I meant to say added.
upvoted 1 times
Ramye
1 year, 2 months ago
The answers given are correct. I was under the impression this AzDO1 was within Azure but the fact is it is outside of Azure just like AWS or GCP environment. Those environments first need to be onboarded to be protected.
upvoted 1 times
...
...
...
...
mali1969
1 year, 7 months ago
To integrate Sub1 and AzDO1, you should do the following: In Defender for Cloud: - Enable a plan for your subscription. This will allow you to use Defender for Cloud features such as secret detection, vulnerability assessment, and threat protection. - Configure workflow automation to send alerts and notifications to AzDO1 when secrets are exposed in pipelines2. You can use webhooks or Azure Logic Apps to create custom workflows. In AzDO1: - Install an extension called Azure DevOps Secrets Scanner from the marketplace3. This will enable you to scan your code and pipelines for secrets and report them to Defender for Cloud. - Configure OAuth to authorize the extension to access your Azure subscription and Defender for Cloud. You can use the Azure Active Directory OAuth provider to grant permissions.
upvoted 3 times
mali1969
1 year, 7 months ago
Correct answer : In Defender for Cloud, add an environment In AzDO1, install an extension
upvoted 6 times
pigl3t
1 year, 7 months ago
right answer based on this: https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-devops?branch=main
upvoted 1 times
...
...
...
Fez786
1 year, 7 months ago
This new question arrived today 9th september 2023. Can someone please verify the correct answer?
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago