A security engineer is implementing secure AI development practices using Azure DevOps. The organization requires that AI model training code must be scanned for hardcoded credentials and sensitive data before merging to the main branch. Which Azure DevOps feature provides this capability natively?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because Microsoft Security DevOps (MSDO) is an Azure DevOps extension that integrates multiple security scanning tools into CI/CD pipelines, including CredScan (Credential Scanner) which detects hardcoded credentials, keys, and sensitive data in source code as part of pull request validation. It can be configured as a required pipeline gate before merging to main.
Full explanation below image
Full Explanation
B is correct because Microsoft Security DevOps (MSDO) is an Azure DevOps extension that integrates multiple security scanning tools into CI/CD pipelines, including CredScan (Credential Scanner) which detects hardcoded credentials, keys, and sensitive data in source code as part of pull request validation. It can be configured as a required pipeline gate before merging to main. A is incorrect because required reviewers add human review gates but do not perform automated credential scanning; human reviewers may miss credentials in large codebases. C is incorrect because Azure DevOps work items are project management tools and do not perform code scanning. D is incorrect because Azure Container Registry vulnerability scanning checks container images for OS and package vulnerabilities, not hardcoded credentials in source code.