You have an Azure DevOps release pipeline as shown in the following exhibit.

You need to complete the pipeline to configure OWASP ZAP for security testing.
Which five Azure CLI tasks should you add in sequence? To answer, move the tasks from the list of tasks to the answer area and arrange them in the correct order.

Correct Answer:

1 - Call the Baseline Scan
2 - Downlaod the file
3 - Convert Report Format
4 - Publish Test Results
5 - Destory OWASP Container
Reference:
https://devblogs.microsoft.com/premier-developer/azure-devops-pipelines-leveraging-owasp-zap-in-the-release-pipeline/

Comment: *

Name: *

Email: *

Verification: *

You have a project in Azure DevOps.
You need to configure a dashboard. The solution must include the following metrics:
* Bottlenecks in the software development process
* A burndown chart for the work in a single iteration
* How long it takes to close a work item after the item was started
Which type of widget should you use for each metric? To answer, drag the appropriate widget types to the correct metrics. Each widget type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

You plan to create a GitHub workflow that will use GitHub Actions. The actions will require a 256-KB secret.
You need to recommend a solution to store and encrypt the secret. The secret value must be accessible only to the workflow. The solution must minimize administrative effort What should you recommend?

• A.Store the secret in the organization-level GitHub secrets.
• B.Store the secret in the repository-level GitHub secrets.
• C.Encrypt the secret value and store the value in the repository. Store the decryption key in the repository-level GitHub secrets.
• D.Encrypt the secret value and store the value in the repository. Store the decryption key in the organization-level GitHub secrets.

Comment: *

Name: *

Email: *

Verification: *

Your company is building a new web application.
You plan to collect feedback from pilot users on the features being delivered.
All the pilot users have a corporate computer that has Google Chrome and the Microsoft Test & Feedback extension installed. The pilot users will test the application by using Chrome.
You need to identify which access levels are required to ensure that developers can request and gather feedback from the pilot users. The solution must use the principle of least privilege.
Which access levels in Azure DevOps should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/devops/organizations/security/access-levels?view=vsts

Comment: *

Name: *

Email: *

Verification: *

Your company uses Team Foundation Server 2013 (TFS 2013).
You plan to migrate to Azure DevOps.
You need to recommend a migration strategy that meets the following requirements:
Preserves the dates of Team Foundation Version Control changesets
Preserves the changes dates of work items revisions
Minimizes migration effort
Migrates all TFS artifacts
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *