Question 340
A second organization executes dependency scans after deployment instead of enforcing policy before distribution. Which unsupported assumption should the engineer challenge FIRST?
Explanation
Correct Answer
A report file labeled security scan completed does not prove an unacceptable vulnerability was blocked. This is the relevant unsupported assumption because automated security testing must lead to enforceable decisions rather than passive report generation.
Incorrect Answers
One green matrix member cannot substitute for failures on other required operating systems or runtimes. What must be demonstrated is: A report file labeled security scan completed does not prove an unacceptable vulnerability was blocked.
Disabling a feature flag is not a substitute for removing sensitive authorization checks from the application. The appropriate comparison is: A report file labeled security scan completed does not prove an unacceptable vulnerability was blocked.
A completed job does not guarantee every cached credential or workspace artifact was removed from its host. The relevant evidence instead is: A report file labeled security scan completed does not prove an unacceptable vulnerability was blocked.






Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Tests