Microsoft DevOps Engineer Expert AZ-400 Practice Question
Your Azure DevOps organization installed the GitHub Advanced Security for Azure DevOps extension and enabled the feature at the organization level. A new project contains a single repository that uses the built-in CodeQL pipeline template. The first pipeline run fails with the message, "The pipeline does not have permission to use GitHub Advanced Security." You must resolve the error without granting broader privileges than necessary. Which action should you take?
Insert an additional CODEQL_ACTION_INIT step in the pipeline YAML and set setup: advanced-security to true.
Assign the Security Manager role to the repository administrators group.
Grant the project's build-service account the "GitHub Advanced Security" permission for the repository.
Enable the Allow scripts to access OAuth token option on the pipeline that runs CodeQL.
When a repository is protected by GitHub Advanced Security for Azure DevOps, the identity that runs the pipeline (by default Project Collection Build Service () or [Project] Build Service) must be explicitly allowed to use Advanced Security features. Granting the repository-scoped permission "GitHub Advanced Security" to that build service account gives the pipeline access to CodeQL, secret scanning, and dependency scanning for the repository. Changing YAML, elevating repository administrators, or exposing the OAuth token does not satisfy the permission check that blocks the pipeline.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is GitHub Advanced Security for Azure DevOps?
Open an interactive chat with Bash
What is the role of the build service account in Azure DevOps?
Open an interactive chat with Bash
How does CodeQL enhance application security?
Open an interactive chat with Bash
What is GitHub Advanced Security for Azure DevOps?
Open an interactive chat with Bash
What is the 'Project Collection Build Service' account in Azure DevOps?
Open an interactive chat with Bash
How does the GitHub Advanced Security permission affect pipelines?
Open an interactive chat with Bash
Microsoft DevOps Engineer Expert AZ-400
Develop a security and compliance plan
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .