Practice question 496 of 498 · hard
A product team wants a secure supply chain without removing automated deployment. Which THREE controls together address source, artifact, and runtime risk? Select THREE.
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Deploy threat detection and route actionable runtime findings to accountable owners
- Protect source and workflow changes with review and controlled release permissions
- Scan components and validate artifact integrity and provenance before release
Protect source and workflow changes with review and controlled release permissions: This constrains unauthorized changes before deployment. Scan components and validate artifact integrity and provenance before release: This checks dependency and artifact risks along the delivery path. Deploy threat detection and route actionable runtime findings to accountable owners: Runtime controls address attacks and weaknesses after deployment. Trust a valid artifact signature as proof that all dependencies are vulnerability-free: Signing alone does not establish dependency safety. Give the build runner broad standing production authority to avoid approval delays: That creates an unnecessary compromise path. Remove runtime monitoring once all pre-release tests pass: Pre-release success cannot cover all future runtime threats.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.