Discuss Microsoft AZ-400 Exam Topic 4 Question 56

You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.

You need to ensure that all the open source libraries comply with your company's licensing standards.

Which service should you use?

AAnsible

BMaven

CWhiteSource Bolt

DHelm

Suggested Answer: C

WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server.

Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source repositories.

Note: Blackduck would also be a good answer, but it is not an option here.

https://www.azuredevopslabs.com/labs/vstsextend/whitesource/

Get Premium AZ-400 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Aimee 12 months ago

I’m surprised there’s no mention of other tools like Snyk or FOSSA!

Cordelia 1 year ago

WhiteSource Bolt is specifically designed for this, so it makes sense.

Asha 1 year ago

Wait, isn't Helm also used for managing dependencies?

Dominga 1 year ago

Definitely agree, it integrates well with Azure DevOps!

Shawna 1 year ago

I think WhiteSource Bolt is the right choice for license compliance.

Norah 1 year ago

I practiced a similar question, and I think WhiteSource Bolt was mentioned as a good option for managing open source licenses.

Junita 1 year ago

I'm not entirely sure, but I feel like Maven is more about building projects rather than checking licenses.

Glenna 1 year ago

I remember studying about open source compliance tools, and I think WhiteSource Bolt might be the right choice for this scenario.

Valentin 1 year ago

Helm seems like it’s more focused on Kubernetes package management, so I doubt it would help with licensing compliance.

Teresita 1 year ago

Hmm, I'm a bit unsure about this one. I need to carefully read through the question and options to determine which component includes the HPE OneView license.

Leanora 1 year ago

Hmm, this looks like a tricky one. I'll need to carefully read through the question and options to understand the requirements around duplicate node handling.

Helaine 1 year ago

I feel like we had a similar practice question, but I can't recall if it was specifically about shipments. I think it's probably A or D.

Microsoft AZ-400 Exam - Topic 4 Question 56 Discussion