SC-100 Certification Practice Question #39

Question

You have an Azure DevOps organization that is used to manage the development and deployment of internal apps to multiple Azure subscriptions.

You need to implement a DevSecOps strategy based on Microsoft Cloud Adoption Framework for Azure principles. The solution must meet the following requirements:

•	All pull requests must be enforced.
•	All deployments to production must be approved.

What should you include in the solution for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

Enforcing all pull requests is achieved through Azure Repos branch policies on protected branches — MS Learn states these policies "require PRs for any changes on these protected branches, and reject any changes pushed directly." Gating production deployments behind approval is the defining capability of Azure Pipelines Environments, where Approvals and checks are configured on the production environment so a deployment pauses until approved. Both map cleanly to the DevSecOps governance guidance in the Cloud Adoption Framework. The Highly Voted answer (10 👍) plus a corroborating comment citing the official approvals-and-checks documentation align with MS Learn, and the alternatives (Resource locks, Triggers) are unrelated to PR enforcement or deployment approval, yielding high confidence.

More SC-100 practice questions