AZ-400 Develop a security and compliance plan Practice Question
Your team is using GitHub Enterprise and wants to ensure that every pull request includes a link to a work item in Azure Boards. Which GitHub Apps or Azure DevOps Services integration should you configure?
⚠ Common exam trap
The trap here is that candidates might confuse the GitHub-Azure Boards integration with Azure Repos branch policies, assuming any branch policy can enforce work item linking, but branch policies only apply within Azure Repos, not GitHub Enterprise.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
GitHub-Azure Boards integration
The GitHub-Azure Boards integration is the correct choice because it connects GitHub repositories to Azure Boards, automatically linking commits and pull requests to work items when they mention an Azure Boards ID (e.g., 'AB#1234'). However, it does not enforce that every PR must include such a link. To enforce this, you would need an additional validation tool or branch protection rule, but among the given options, this is the only integration that provides the linking capability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
GitHub-Azure Boards integration
Why this is correct
The GitHub-Azure Boards integration creates a bi-directional link between GitHub commits, pull requests, and issues and Azure Boards work items, and it allows you to enforce work item linking in GitHub PRs by adding a required check or branch protection rule that verifies every PR references a work item.
- ✗
Azure Repos branch policy
Why it's wrong here
Azure Repos branch policies are enforced only in repositories hosted in Azure Repos; they have no effect on GitHub Enterprise repositories, so they cannot require work item linking in GitHub pull requests.
- ✗
Azure DevOps OAuth app
Why it's wrong here
An Azure DevOps OAuth app is used for authenticating users and authorizing API access to Azure DevOps resources; it does not provide any mechanism to enforce policy, such as requiring work item links in GitHub PRs.
- ✗
Azure Pipelines GitHub App
Why it's wrong here
The Azure Pipelines GitHub App is designed to connect GitHub repositories to Azure Pipelines for continuous integration and delivery, but it does not validate or enforce work item linking in pull requests; that capability is provided by the Azure Boards integration.
Go deeper
Related to this question
Learn chapter
Introduction to DevOps and Azure DevOps
Key term
Pull request
A pull request is a way for a developer to propose changes to a codebase and ask other team members to review and merge them into the main project.
Key term
DevOps
DevOps is a set of practices that combines software development (Dev) and IT operations (Ops) to shorten the development lifecycle and deliver high-quality software continuously.
About these practice questions
This AZ-400 question is part of Courseiva's 823-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-400 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-400 exam.