Question 560
At fictional Orchard Agriculture, the Business Central development team is supporting farm supplier procurement and reviewing extension environment and deployment preparation during a production readiness review (MB820-2.1-029). The observed development issue is that a teammate checks secrets directly into app.json to authenticate a development workspace. Which AL development or design response most directly addresses this issue?
Explanation
Correct Answer
The most direct corrective response is to keep application metadata separate from secret-bearing connection profiles and use supported secure sign-in. This addresses the specific failure where a teammate checks secrets directly into app.json to authenticate a development workspace. Acceptance evidence is that the repository contains no credentials while the extension still builds and deploys.
Incorrect Answers
“Refresh downloaded symbols and resolve dependency versions against the new application target” concerns the alternative task “refresh downloaded symbols and resolve dependency versions against the new application target”, but the stated failure is that a teammate checks secrets directly into app.json to authenticate a development workspace. The required measure is to keep application metadata separate from secret-bearing connection profiles and use supported secure sign-in.
The proposed “Download current symbols and declare the required app dependency with compatible versions” tests a different control: download current symbols and declare the required app dependency with compatible versions. The reported condition is that a teammate checks secrets directly into app.json to authenticate a development workspace; the more direct action is to keep application metadata separate from secret-bearing connection profiles and use supported secure sign-in.
“Separate app package identity/version metadata in app.json from run and attach configuration in launch.json” concerns the separate step “separate app package identity/version metadata in app.json from run and attach configuration in launch.json”. The reported issue is that a teammate checks secrets directly into app.json to authenticate a development workspace, so the direct response is to keep application metadata separate from secret-bearing connection profiles and use supported secure sign-in.