Which APIs to Use for Content Management in CI/CD Pipelines | SC-200 Exam
Question
Which of the following APIs should be used to assist with managing content through a CI/CD pipeline?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: C.
/answer/imgsss4.png)
Reference:
Out of the given options, the API that should be used to assist with managing content through a CI/CD pipeline is the Azure Sentinel Management API (Option C).
CI/CD (Continuous Integration/Continuous Deployment) is a software development approach that involves continuously building, testing, and deploying code changes to production. This process can be automated through a pipeline, which helps ensure that code changes are tested and deployed quickly and reliably.
Azure Sentinel is a cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution from Microsoft. It provides intelligent security analytics and threat intelligence across the enterprise, providing a centralized view of an organization's security posture.
The Azure Sentinel Management API provides a set of REST APIs that can be used to automate the management of Azure Sentinel resources, including workspaces, data connectors, analytics rules, and incident management. These APIs can be used to integrate Azure Sentinel with other tools and systems, such as CI/CD pipelines.
By using the Azure Sentinel Management API, you can automate the deployment of new content to Azure Sentinel as part of your CI/CD pipeline. For example, you can use the API to create and configure new data connectors or analytics rules, or to update existing ones. This can help ensure that your security policies are up-to-date and that your security team has the information they need to respond to threats.
In contrast, the Security Graph API (Option A) is used to access security insights and alerts from Microsoft's intelligent security graph, while the Query API (Option B) is used to query and retrieve data from Azure Sentinel. The Threat intelligence API (Option D) is used to access threat intelligence information from various sources, but it is not directly related to managing content through a CI/CD pipeline.
