Exam AZ-400 topic 7 question 57 discussion

correct answer should be build only as static code analysis is done at compile time not runtime.

Here a picture of Microsoft's answer: https://docs.microsoft.com/en-us/azure/devops/migrate/media/security-validation-cicd-pipeline/feedback.png So pull request and CI (guess this is build).

Build Stage

Answer is D . Testing can’t cover every possible code execution path. But a static code analyzer can. It checks the code as you work on your build. You’ll get an in-depth analysis of where there might be potential problems in your code, based on the rules you’ve applied. link : https://www.perforce.com/blog/sca/what-static-analysis#:~:text=Static%20code%20analysis%20is%20performed,during%20the%20%E2%80%9CCreate%E2%80%9D%20phase.

It should be D. We usually use Dynamic code analysis in stage A and static code analysis in the early stages of Software development life cycle as build stage .

The Secure Development Lifecycle (SDL) Guidelines recommend that teams perform static analysis during the integration and implementation and phase of their development cycle. Got a similar practice question from Linux Academy (now Cloud Guru)

Several other answers to similar questions in this series equally chose 'Build' I go for D

On Build

can confirm is D

Correct answer is Build! https://docs.microsoft.com/en-us/azure/security/develop/security-code-analysis-onboard#adding-specific-build-tasks-to-your-azure-devops-pipeline

correct answer should be build only as static code analysis is done at compile time not runtime. Correct answer is B

D. build

@ExamTopics... you are doing it wrong! The correct answer is D! You do static analysis during build, not during testing, specially not integration testing.

It can be build only, but developers don't intend to fix these issues due to sheer pressure, so it can be at the build time if you have good developers and can be at CI time when you want to enforce it, I think enforcing would be a better as developers will be obliged to fix them

Its D - during BUILD

Its D - during BUILD

Read the question, its a phase and not stage so the answer is A