C is correct answer.

WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.

Azure DevOps integration with WhiteSource Bolt will enable you to:

1. Detect and remedy vulnerable open source components.

2. Generate comprehensive open source inventory reports per project or build.

3. Enforce open source license compliance, including dependencies' licenses.

4. Identify outdated open source libraries with recommendations to update.

Note: Black duck would also be a good answer, but it is not an option here.

Reference:

https://www.azuredevopslabs.com/labs/vstsextend/WhiteSource/

A is correct answer.

Whitesource is the tool and it should be used on CI phase.

https://www.azuredevopslabs.com/labs/vstsextend/whitesource/

A is correct answer.

Secure and Manage Open Source Software

Black Duck helps organizations identify and mitigate open source security, license compliance and code-quality risks across application and container portfolios.

Black Duck Hub and its plugin for Team Foundation Server (TFS) allows you to automatically find and fix open source security vulnerabilities during the build process, so you can proactively manage risk. The integration allows you to receive alerts and fail builds when any Black Duck Hub policy violations are met.

Reference:

https://marketplace.visualstudio.com/items?itemName=black-duck-software.hub-tfs

Considering the requirements

- maintain a uniform configuration for virtual machines

- minimize administrative effort

Correct answer is A & B.

To mantain the configuration status of a VM you must use DSC.

To minimize the effort of creating the VM you can use an ARM template so that you can reuse it for each VM. Deployment groups requires more effort.

https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-template

https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups/?view=azure-devops

D is correct answer.

Azure Security Center and Azure Defender are now called Microsoft Defender for Cloud.

Monitor compute and app services: Compute & apps include the App Services tab, which App services: list of your App service environments and current security state of each.

Recommendations -

This section has a set of recommendations for each VM and computer, web and worker roles, Azure App Service Web Apps, and Azure App Service Environment that Security Center monitors. The first column lists the recommendation. The second column shows the total number of resources that are affected by that recommendation. The third column shows the severity of the issue.

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/app/proactive-diagnostics

B is correct answer.

Application Insights will tell you about any performance issues and exceptions, and help you find and diagnose the root causes.

Application Insights can monitor both Java and ASP.NET web applications and services, WCF services. They can be hosted on-premises, on virtual machines, or as Microsoft Azure websites.

On the client side, Application Insights can take telemetry from web pages and a wide variety of devices including iOS, Android, and Windows Store apps.

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/app/web-monitor-performance

B is correct answer.

Presumably "Kusto Query Language (KQL)" would be the right answer.

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/azure-sql

B is correct answer.

To work with Log Analytics data, you need to use the Kusto Query Language (KQL).

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/azure-sql

A is correct answer.

Data analysis in Azure SQL Analytics is based on the Log Analytics language for custom querying and reporting. Automated alerting in Azure SQL Analytics is based on writing a Log Analytics query that triggers an alert upon a condition met.

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/azure-sql

Exceptions in your live web app are reported by Application Insights.

Note: Periodical reports help keep a team informed on how their business critical services are doing. Developers, DevOps/SRE teams, and their managers can be productive with automated reports reliably delivering insights without requiring everyone to sign in the portal. Such reports can also help identify gradual increases in latencies, load or failure rates that may not trigger any alert rules.

You can programmatically query Application Insights data to generate custom reports on a schedule. The following options can help you get started quickly:

Automate reports with Microsoft Flow

✑ Automate reports with Logic Apps

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/app/asp-net-exceptions https://docs.microsoft.com/en-us/azure/azure-monitor/app/automate-custom-reports