SC-100 Certification Practice Question #279

Question

You need to recommend a solution to scan the application code. The solution must meet the application development requirements.
What should you include in the recommendation?

Accepted Answer

The requirement is to scan the application *code*. GitHub Advanced Security is Microsoft's purpose-built solution for this, providing code scanning (CodeQL), secret scanning, and dependency review on source repositories — exactly what the application-development requirement calls for. The Suggested Answer and a unanimous community (30 votes, plus 17 + 8 + 3 + 2 👍 confirmations) all select A, and every alternative addresses a different concern (secret storage, VM provisioning, or runtime telemetry) rather than scanning code.

More SC-100 practice questions