You store source code in Azure Repos but use a third-party CI tool to run builds. Which mechanism does Azure DevOps use to authenticate with the external tool?
Choose an answer
Tap an option to check your answer.
Correct answer: a personal access token (PAT).
Why this is the answer
A personal access token (PAT) is the correct mechanism for Azure DevOps to authenticate with a third-party CI tool when accessing Azure Repos. PATs provide a secure, fine-grained way to grant specific permissions to external services without exposing your full Azure DevOps credentials. You can scope a PAT to particular organizations, projects, and permissions (e.g., read-only access to code). Certificate authentication is typically used for machine-to-machine communication or client authentication, not for a third-party CI tool accessing Azure Repos. A Shared Access Signature (SAS) token is primarily used for granting limited access to Azure Storage resources, not Azure DevOps services. NTLM authentication is an older Windows authentication protocol and is not used for external service integration with Azure DevOps.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed