Exam AZ-400 topic 3 question 17 discussion

Ans is correct!

Performing a Subscription Health scan when packages are created does not directly prevent the configuration of the project from changing over time. A Subscription Health scan primarily helps identify potential issues related to subscription-level resources and their compliance with best practices, but it does not specifically enforce configuration immutability within a project. To prevent changes to a project’s configuration, you would typically use other mechanisms, such as: Azure DevOps policies: These can be used to enforce rules around code changes, including branch policies and approval requirements, to prevent unwanted configuration changes. Infrastructure as Code (IaC): Using tools like ARM templates, Terraform, or Azure DevOps pipelines to manage and enforce configurations programmatically. Role-Based Access Control (RBAC): Limiting permissions for users who can make changes to the project's configuration.

Correct is B

Correct answer is no

“Secure DevOps Kit for Azure (AzSK) is being sunset”. Some of the tools that will phase out seem to be ARM Checker, DevOps Kit CICD Extension and AAD Scanner (AzSK.AAD). The tool that will replace them is Azure Tenant Security Solution (AzTS). Based on the original note, ADO Scanner - used to secure your Azure DevOps set-up will continue to be updated. If you are looking for ARM template validation and verification only you can also check the following approaches: Test-AzDeployment What-if operation Validate templates So, if you have a dependency on Secure DevOps Kit for Azure (AzSK) make sure the update, there are options available. DevSecOps in Azure Reference architecture is available here. https://github.com/azsk/AzTS-docs https://learn.microsoft.com/en-us/azure/architecture/solution-ideas/articles/devsecops-in-azure

Probably no longer relevant because DevOps Kit (AzSK) is being sunset by end of FY21. https://github.com/azsk/DevOpsKit-docs/blob/master/04-Continous-Assurance/Readme.md

No is the answer for sure

Continuous Assurance

Selected during exam. No.

correct

this question came today, July 28, 2021

Is this still relevant?