Question 480
Another organization executes marketplace actions that are not pinned or reviewed under a release credential. Which unsupported assumption should the engineer challenge FIRST?
Explanation
Correct Answer
A popular action's mutable tag is not proof the code executed today matches the code approved earlier. This is the relevant unsupported assumption because external pipeline components are supply-chain dependencies and need immutable identity and least privilege.
Incorrect Answers
This caution is valid in maintain pipelines, but it is not the failure assumption illustrated by this scenario. The directly relevant risk is: A popular action's mutable tag is not proof the code executed today matches the code approved earlier.
This caution is valid in design and implement a package management strategy, but it is not the failure assumption illustrated by this scenario. The directly relevant risk is: A popular action's mutable tag is not proof the code executed today matches the code approved earlier.
This caution is valid in design and implement deployments, but it is not the failure assumption illustrated by this scenario. The directly relevant risk is: A popular action's mutable tag is not proof the code executed today matches the code approved earlier.






Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Tests