A security administrator is configuring the GitHub connector for agentic code security in the Defender portal. They want the connector to identify security issues by scanning repositories but explicitly do not want Defender for DevOps to create issues, open pull requests, or modify Dependabot alerts. Which permission configuration meets these requirements?
Explanation
Read — Selected by default and can't be removed. Allows Defender for DevOps to scan your repositories and identify security issues without making any changes.
Read access is sufficient for security scanning and discovery scenarios.
A team wants to secure its software supply chain by automatically detecting known high-severity vulnerabilities in the open-source dependencies its projects consume. According to Microsoft's supply chain guidance, which capability should they enable?
Explanation
An internal feed that blocks malware, scans for viruses, detects typosquatting, and quarantines new package versions before allowing ingestion into production repositories.
Enable Software Composition Analysis (SCA) to track dependencies and automatically flag high-severity vulnerabilities.
Locked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to review