AZ400-Q: handle a vulnerable dependency
A dependency alert identifies a reachable critical vulnerability. Which response has the best control path?
- A) Silence all dependency alerts.
- B) Wait for the next annual upgrade.
- C) Update the lock file without testing.
- D) Triage impact, update or mitigate through a reviewed change, validate it, and document any temporary exception. ✓ Answer: D. Dependency response needs both risk assessment and a tested, traceable remediation. Why not the others: Ignoring, delaying, or untested changes are unsafe.