Practice question 74 of 498 · hard
A delivery pipeline uses a long-lived Owner secret shared between test and production. Which replacement best reduces exposure?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Separate scoped deployment identities with supported federation and restrictions on the authorized workflow or environment
Separate scoped deployment identities with supported federation and restrictions on the authorized workflow or environment: This removes shared standing secrets and constrains authority. Store the same Owner secret in an encrypted repository file that all test jobs can decrypt: Shared access still lets test jobs obtain production authority. Give all build agents tenant-wide administrator rights: This increases privilege rather than reducing it. Keep the shared secret and rely only on application SAST: Code scanning does not constrain deployment credentials.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.