Exam Questions Az-400: Microsoft Azure Devops Solutions (Beta)
Exam Questions Az-400: Microsoft Azure Devops Solutions (Beta)
[Link]
NEW QUESTION 1
- (Exam Topic 1)
How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection a worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Scenario: Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.
In order to use App Center, you need to opt in to the service(s) that you want to use, meaning by default no services are started and you will have to explicitly call
each of them when starting the SDK.
Insert the following line to start the SDK in your app's AppDelegate class in the didFinishLaunchingWithOptions method.
[Link]("{Your App Secret}", withServices: [[Link], [Link]]) References: [Link]
started/ios
NEW QUESTION 2
- (Exam Topic 1)
Which branching strategy should you recommend for the investment planning applications suite?
A. release isolation
B. main only
C. development isolation
D. feature isolation
Answer: C
Explanation:
Scenario: A branching strategy that supports developing new functionality in isolation must be used. Feature isolation is a special derivation of the development
isolation, allowing you to branch one or more feature branches from main, as shown, or from your dev branches.
When you need to work on a particular feature, it might be a good idea to create a feature branch.
NEW QUESTION 3
- (Exam Topic 1)
To resolve the current technical issue, what should you do to the Register-AzureRmAutomationDscNode command?
Answer: A
Explanation:
Change the ConfigurationMode parameter from ApplyOnly to ApplyAndAutocorrect.
The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State Configuration (DSC) node in an Azure Automation
account.
Scenario: Current Technical Issue
The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration fails to
correct the configurations.
Azure Automation State Configuration nodes are registered by using the following command.
References:
[Link]
NEW QUESTION 4
- (Exam Topic 2)
Your company creates a new Azure DevOps team. D18912E1457D5D1DDCBD40AB3BF70D5D
You plan to use Azure DevOps for sprint planning.
You need to visualize the flow of your work by using an agile methodology. Which Azure DevOps component should you use?
A. Kanban boards
B. sprint planning
C. delivery plans
D. portfolio backlogs
Answer: A
Explanation:
Customizing Kanban boards
To maximize a team’s ability to consistently deliver high quality software, Kanban emphasize two main practices. The first, visualize the flow of work, requires you
to map your team’s workflow stages and configure your Kanban board to match. Your Kanban board turns your backlog into an interactive signboard, providing a
visual flow of work.
Reference: [Link]
NEW QUESTION 5
- (Exam Topic 2)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the
stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen
Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically.
Solution: From the Continuous deployment trigger settings of the release pipeline, you enable the Pull request trigger setting.
Does the meet the goal?
A. Yes
B. No
Answer: B
Explanation:
In Visual Designer you enable continuous integration (CI) by:
NEW QUESTION 6
- (Exam Topic 2)
You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a
system managed identity.
The solution must use the principle of least privilege.
To complete this task, sign in to the Microsoft Azure portal.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
* 1. In Azure portal navigate to the az400-9940427-main app.
* 2. Scroll down to the Settings group in the left navigation.
* 3. Select Managed identity.
* 4. Within the System assigned tab, switch Status to On. Click Save.
References:
[Link]
NEW QUESTION 7
- (Exam Topic 2)
You are planning projects for three customers. Each customer’s preferred process for work items is shown in the following table.
The customers all plan to use Azure DevOps for work item management.
Which work item process should you use for each customer? To answer, drag the appropriate work item process to the correct customers. Each work item process
may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is
worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Scrum
Choose Scrum when your team practices Scrum. This process works great if you want to track product backlog items (PBIs) and bugs on the Kanban board, or
break PBIs and bugs down into tasks on the taskboard.
Box 2: Agile
Choose Agile when your team uses Agile planning methods, including Scrum, and tracks development and test activities separately. This process works great if
you want to track user stories and (optionally) bugs on the Kanban board, or track bugs and tasks on the taskboard.
Box 3: CMMI
Choose CMMI when your team follows more formal project methods that require a framework for process improvement and an auditable record of decisions. With
this process, you can track requirements, change requests, risks, and reviews.
NEW QUESTION 8
- (Exam Topic 2)
You plan to onboard 10 new developers.
You need to recommend a development environment that meets the following requirements:
A. VS Code
B. Xamarin Studio
C. MonoDevelop
D. Visual Studio Codespaces
Answer: D
Explanation:
Visual Studio Codespaces is built to accommodate the widest variety of projects or tasks, including GitHub and integrating debugging.
Visual Studio Codespaces conceptually and technically extends the Visual Studio Code Remote Development extensions.
In addition to "backend" environments, Visual Studio Codespaces supports these "frontend" editors:
Visual Studio Code
Visual Studio Code-based editor in the browser Reference:
[Link]
NEW QUESTION 9
- (Exam Topic 2)
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1
that is configured for autoscaling.
You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1.
You need to ensure that an email alert is generated whenever VMSS1 scales in or out. Solution: From Azure Monitor, create an action group.
Does this meet the goal?
A. Yes
B. No
Answer: B
NEW QUESTION 10
- (Exam Topic 2)
You are configuring an Azure DevOps deployment pipeline. The deployed application will authenticate to a web service by using a secret stored in an Azure key
vault.
You need to use the secret in the deployment pipeline.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Creating a service principal
Creating a key vault
Check the Azure Pipeline
NEW QUESTION 10
- (Exam Topic 2)
You are developing an iOS application by using Azure DevOps.
You need to test the application manually on 10 devices without releasing the application to the public. Which two actions should you perform? Each correct
answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer: BF
Explanation:
References:
[Link]
NEW QUESTION 14
- (Exam Topic 2)
You have the following Azure policy.
You assign the policy to the Tenant root group. What is the effect of the policy?
C. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet
D. ensures that all data for new Azure Storage accounts is encrypted at rest
Answer: B
Explanation:
Denies non HTTPS traffic.
NEW QUESTION 16
- (Exam Topic 2)
You plan to provision a self-hosted Linux agent
Which authentication mechanism should you use to register the self-hosted agent?
A. SSH key
B. personal access token (PAT)
C. Alternate credentials
D. certificate
Answer: B
Explanation:
Note: PAT Supported only on Azure Pipelines and TFS 2017 and newer. After you choose PAT, paste the PAT token you created into the command prompt
window. Use a personal access token (PAT) if your Azure DevOps Server or TFS instance and the agent machine are not in a trusted domain. PAT authentication
is handled by your Azure DevOps Server or TFS instance instead of the domain controller.
Reference:
[Link] [Link]
devops
NEW QUESTION 19
- (Exam Topic 2)
Your company is building a mobile app that targets Android devices and OS devices. Your team uses Azure DevOps to manage all work items and release cycles.
You need to recommend a solution to perform the following tasks:
• Collect crash reports for issue analysis
• Distribute beta releases to your testers.
• Get user feedback on the functionality of new apps. What should you include in the recommendation?
A. Jenkins integration
B. Azure Application Insights widgets
C. the Microsoft Test & Feedback extension
D. Microsoft Visual Studio App Center integration
Answer: C
Explanation:
The "Exploratory Testing" extension is now "Test & Feedback" and is now Generally Available.
Anyone can now test web apps and give feedback, all directly from the browser on any platform: Windows, Mac, or Linux. Available for Google Chrome and
Mozilla Firefox (required version 50.0 or above) currently. Support for Microsoft Edge is in the pipeline and will be enabled once Edge moves to a Chromium-
compatible web platform.
References:
[Link]
NEW QUESTION 24
- (Exam Topic 2)
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You use Azure Pipelines to build and test a React js application. You have a pipeline that has a single job.
You discover thai installing JavaScript packages from npm takes approximately five minutes each time you run the pipeline.
You need to recommend a solution to reduce the pipeline execution time.
Solution: You recommend defining a container job that uses a custom container that has the JavaScript packages preinstalled.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Instead enable pipeline caching. Note:
npm-cache is a command line utility that caches dependencies installed via npm, bower, jspm and composer.
It is useful for build processes that run [npm|bower|composer|jspm] install every time as part of their build process. Since dependencies don't change often, this
often means slower build times. npm-cache helps alleviate this problem by caching previously installed dependencies on the build machine.
Reference: [Link]
NEW QUESTION 26
- (Exam Topic 2)
You store source code in a Git repository in Azure repos. You use a third-party continuous integration (CI) tool to control builds.
What will Azure DevOps use to authenticate with the tool?
A. certificate authentication
B. a personal access token (PAT)
Answer: B
Explanation:
Personal access tokens (PATs) give you access to Azure DevOps and Team Foundation Server (TFS), without using your username and password directly.
Reference:
[Link]
NEW QUESTION 31
- (Exam Topic 2)
You need to ensure that Microsoft Visual Studio 2017 can remotely attach to an Azure Function named fa-11566895.
To complete this task, sign in to the Microsoft Azure portal.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Enable Remote Debugging
Before we start a debugging session to our Azure Function app we need to enable the functionality.
NEW QUESTION 32
- (Exam Topic 2)
You have a containerized solution that runs in Azure Container Instances. The solution contains a frontend container named App1 and a backend container named
DB1. DB1 loads a large amount of data during startup.
You need to verify that DB1 can handle incoming requests before users can submit requests to Appl. What should you configure?
A. a Iiveness probe
B. an Azure Load Balancer health probe
C. a readiness probe
D. a performance log
Answer: C
Explanation:
For containerized applications that serve traffic, you might want to verify that your container is ready to handle incoming requests. Azure Container Instances
supports readiness probes to include configurations so that your container can't be accessed under certain conditions.
Reference:
[Link]
NEW QUESTION 35
- (Exam Topic 2)
You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.
You need to ensure that all the open source libraries comply with your company’s licensing standards. Which service should you use?
A. Ansible
B. Maven
C. WhiteSource Bolt
D. Helm
Answer: C
Explanation:
WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps
and Azure DevOps Server.
Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process,
irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background,
checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source
repositories.
Note: Blackduck would also be a good answer, but it is not an option here. Reference: [Link]
NEW QUESTION 38
- (Exam Topic 2)
You have a GitHub repository.
You create a new repository in Azure DevOps.
You need to recommend a procedure to clone the repository from GitHub to Azure DevOps. What should you recommend?
A. Create a webhook.
B. Create a service connection for GitHub.
C. From Import a Git repository, click Import
D. Create a pull request.
E. Create a personal access token in Azure DevOps.
Answer: C
NEW QUESTION 42
- (Exam Topic 2)
You have an Azure DevOps project that uses many package feeds.
You need to simplify the project by using a single feed that stores packages produced by your company and packages consumed from remote feeds. The solution
must support public feeds and authenticated feeds.
What should you enable in DevOps?
A. Universal Packages
B. views in Azure Artifacts
C. upstream sources
D. a symbol server
Answer: B
NEW QUESTION 45
- (Exam Topic 2)
You create a Microsoft [Link] Core application.
You plan to use Azure Key Vault to provide secrets to the application as configuration data.
You need to create a Key Vault access policy to assign secret permissions to the application. The solution must use the principle of least privilege.
Which secret permissions should you use?
A. List only
B. Get only
C. Get and List
Answer: B
Explanation:
Application data plane permissions:
Keys: sign
Secrets: get
Reference:
[Link]
NEW QUESTION 50
- (Exam Topic 2)
You manage the Git repository for a large enterprise application. You need to minimize the data size of the repository.
How should you complete the commands? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: --aggressive
Cleanup unnecessary files and optimize the local repository: git gc --aggressive
Box 2: prune
Prune all unreachable objects from the object database: git prune
Reference: [Link]
NEW QUESTION 55
- (Exam Topic 2)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the
stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to update the Azure DevOps strategy of your company.
You need to identify the following issues as they occur during the company’s development process:
Licensing violations
Prohibited libraries
Solution: You implement automated security testing. Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Instead use implement continuous integration.
Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process,
irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background,
checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source
repositories.
Reference: [Link]
NEW QUESTION 56
- (Exam Topic 2)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the
stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically.
Solution: From the Pre-deployment conditions settings of the release pipeline, you select Batch changes while a build is in progress.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Use a Pull request trigger. Note: Batch changes
Select this check box if you have a lot of team members uploading changes often and you want to reduce the number of builds you are running. If you select this
option, when a build is running, the system waits until the build is completed and then queues another build of all changes that have not yet been built.
References: [Link]
NEW QUESTION 58
- (Exam Topic 2)
Your company is building a new web application.
You plan to collect feedback from pilot users on the features being delivered.
All the pilot users have a corporate computer that has Google Chrome and the Microsoft Test & Feedback extension installed. The pilot users will test the
application by using Chrome.
You need to identify which access levels are required to ensure that developers can request and gather feedback from the pilot users. The solution must use the
principle of least privilege.
Which access levels m Azure DevOps should you identify? To answer, select the appropriate options in the answer area
NOTE: Each correct selection is worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: Basic
Assign Basic to users with a TFS CAL, with a Visual Studio Professional subscription, and to users for whom you are paying for Azure Boards & Repos in an
organization.
Box 2: Stakeholder
Assign Stakeholders to users with no license or subscriptions who need access to a limited set of features. Note:
You assign users or groups of users to one of the following access levels: Basic: provides access to most features
VS Enterprise: provides access to premium features
Stakeholders: provides partial access, can be assigned to unlimited users for free
References: [Link]
NEW QUESTION 60
- (Exam Topic 2)
You have an Azure DevOps release pipeline as shown in the following exhibit.
You need to complete the pipeline to configure OWASP ZAP for security testing.
Which five Azure CLI tasks should you add in sequence? To answer, move the tasks from the list of tasks to the answer area and arrange them in the correct
order.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Defining the Release Pipeline
Once the application portion of the Release pipeline has been configured, the security scan portion can be
defined. In our example, this consists of 8 tasks, primarily using the Azure CLI task to create and use the ACI instance (and supporting structures).
Otherwise specified, all the Azure CLI tasks are Inline tasks, using the default configuration options.
Reference:
[Link]
NEW QUESTION 64
- (Exam Topic 2)
You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure SQL database named DB1.
You need to create a release pipeline that uses the Azure SQL Database Deployment task to update DB1. Which artifact should you deploy?
A. a BACPAC
B. a DACPAC
C. an LDF file
D. an MDF file
Answer: B
Explanation:
Use Azure SQL Database Deployment task in a build or release pipeline to deploy to Azure SQL DB using a DACPAC or run scripts using SQLCMD.
Reference:
[Link]
NEW QUESTION 69
- (Exam Topic 2)
You manage a website that uses an Azure SQL Database named db1 in a resource group named RG1lod11566895.
You need to modify the SQL database to protect against SQL injection. To complete this task, sign in to the Microsoft Azure portal.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Set up Advanced Threat Protection in the Azure portal
* 1. Sign into the Azure portal.
* 2. Navigate to the configuration page of the server you want to protect. In the security settings, select Advanced Data Security.
* 3. On the Advanced Data Security configuration page:
NEW QUESTION 73
- (Exam Topic 2)
Your company uses Azure DevOps to manage the build and release processes for applications. You use a Git repository for applications source control.
You plan to create a new branch from an existing pull request. Later, you plan to merge the new branch and
the target branch of the pull request.
You need to use a pull request action to create the new branch. The solution must ensure that the branch uses only a portion of the code in the pull request.
Which pull request action should you use?
Answer: C
Explanation:
Cherry-pick a pull request
To copy changes made in a pull request to another branch in your repo, follow these steps:
In a completed pull request, select Cherry-pick, or for an active pull request, select Cherry-pick from the ... menu. Cherry-picking a pull request in this way creates
a new branch with the copied changes. Merge into a target branch in a second pull request.
In Target branch, enter the branch you want to merge the copied changes.
In Topic branch name, enter a new branch to contain the copied changes, then select Cherry-pick.
Select Create pull request to merge the topic branch into the target branch to complete the cherry-pick. Reference:
[Link]
NEW QUESTION 74
- (Exam Topic 2)
You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication. What should you do first?
Answer: D
Explanation:
When you connect to a Git repository from your Git client for the first time, the credential manager prompts for credentials. Provide your Microsoft account or Azure
AD credentials.
Note: Git Credential Managers simplify authentication with your Azure Repos Git repositories. Credential managers let you use the same credentials that you use
for the Azure DevOps Services web portal. Credential managers support multi-factor authentication through Microsoft account or Azure Active Directory (Azure
AD). Besides supporting multi-factor authentication with Azure Repos, credential managers also support two-factor authentication with GitHub repositories.
Reference:
[Link]
NEW QUESTION 78
- (Exam Topic 2)
Your company plans to deploy an application to the following endpoints:
• Ten virtual machines hosted in Azure.
• Ten virtual machines hosted in an on-premises data center environment All the virtual machines have the- Azure Pipelines agent.
You need to implement a release strategy for deploying the application to the endpoints.
What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate components to the correct endpoint.
Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or soon to view content
NOTE: Each correct selection n worth one point.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: A deployment group
When authoring an Azure Pipelines or TFS Release pipeline, you can specify the deployment targets for a job using a deployment group.
If the target machines are Azure VMs, you can quickly and easily prepare them by installing the Azure Pipelines Agent Azure VM extension on each of the VMs, or
by using the Azure Resource Group Deployment task in your release pipeline to create a deployment group dynamically.
Box 2: A deployment group
References: [Link]
NEW QUESTION 81
- (Exam Topic 2)
Your company uses a Git repository in Azure Repos lo manage the source code of a web application. The master branch is protected from direct updates.
Developers work on new features in the topic branches.
Because of the high volume of requested features, it is difficult to follow the history of the changes to the master branch.
You need to enforce a pull request merge strategy. The strategy must meet the following requirements:
• Consolidate commit histories
• Merge tie changes into a tingle commit
Which merge strategy should you use in the branch policy?
A. Git fetch
B. no-fast-forward merge
C. squash merge
D. fast-forward merge
Answer: C
Explanation:
Squash merging is a merge option that allows you to condense the Git history of topic branches when you complete a pull request. Instead of each commit on the
topic branch being added to the history of the default branch, a squash merge takes all the file changes and adds them to a single new commit on the default
branch.
A simple way to think about this is that squash merge gives you just the file changes, and a regular merge gives you the file changes and the commit history.
Note: Squash merging keeps your default branch histories clean and easy to follow without demanding any workflow changes on your team. Contributors to the
topic branch work how they want in the topic branch, and the default branches keep a linear history through the use of squash merges. The commit history of a
master branch updated with squash merges will have one commit for each merged branch. You can step through this history commit by commit to find out exactly
when work was done.
References: [Link]
NEW QUESTION 82
- (Exam Topic 2)
Your company has four projects. The version control requirements for each project are shown in the following table.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
* 1 -> TFVS Refer :
[Link]
* 2 -> TFVS Refer :
[Link]
* 3 -> Git Refer :
[Link]
* 4 -> TFVS Refer
:[Link]
NEW QUESTION 86
- (Exam Topic 2)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the
stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt.
You need to recommend changes to reduce the accumulated technical debt. Solution: You recommend reducing the code coupling and the dependency cycles?
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Instead reduce the code complexity.
Note: Technical debt is the accumulation of sub-optimal technical decisions made over the lifetime of an application. Eventually, it gets harder and harder to
change things: it’s the ‘sand in the gears’ that sees IT initiatives grind to a halt.
Reference:
[Link] [Link]
NEW QUESTION 90
- (Exam Topic 2)
You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:
• The builds must access an on-premises dependency management system.
• The build outputs must be stored as Server artifacts in Azure DevOps.
• The source code must be stored in a Git repository in Azure DevOps.
Solution: Configure the build pipeline to use a Microsoft-hosted agent pool running a Linux image. Include the Java Tool Installer task in the build pipeline.
Does this meet the goal?
A. Yes
B. No
Answer: B
NEW QUESTION 95
- (Exam Topic 2)
You have an Azure DevOps project named Project1 and an Azure subscription named Sub1.
You need to prevent releases from being deployed unless the releases comply with the Azure Policy rules assigned to Sub1.
What should you do in the release pipeline of Project1?
Answer: B
Explanation:
You can check policy compliance with gates.
You can extend the approval process for the release by adding a gate. Gates allow you to configure automated calls to external services, where the results are
used to approve or reject a deployment.
You can use gates to ensure that the release meets a wide range or criteria, without requiring user intervention. Reference:
[Link]
NEW QUESTION 96
- (Exam Topic 2)
Your company has an Azure DevOps project,
The source code for the project is stored in an on-premises repository and uses on an on-premises build server.
You plan to use Azure DevOps to control the build process on the build server by using a self-hosted agent. You need to implement the self-hosted agent.
You download and install the agent on the build server.
Which two actions should you perform next? Each correct answer presents part of the solution.
Answer: DE
Explanation:
[Link] (Get PAT, run config)
NEW QUESTION 97
- (Exam Topic 2)
You need to configure a virtual machine named VM1 to securely access stored secrets in an Azure Key Vault named az400-11566895-kv.
To complete this task, sign in to the Microsoft Azure portal.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
You can use a system-assigned managed identity for a Windows virtual machine (VM) to access Azure Key Vault.
Note: Enabling a system-assigned managed identity is a one-click experience. You can either enable it during the creation of a VM or in the properties of an
existing VM.
Reference:
[Link]
NEW QUESTION 98
- (Exam Topic 2)
Your company hosts a web application in Azure. The company uses Azure Pipelines for the build and release management of the application.
Stakeholders report that the past few releases have negatively affected system performance. You configure alerts in Azure Monitor.
You need to ensure that new releases are only deployed to production if the releases meet defined performance baseline criteria in the staging environment first.
What should you use to prevent the deployment of releases that fall to meet the performance baseline?
Answer: C
Explanation:
Scenarios and use cases for gates include:
Quality validation. Query metrics from tests on the build artifacts such as pass rate or code coverage and deploy only if they are within required thresholds.
Use Quality Gates to integrate monitoring into your pre-deployment or post-deployment. This ensures that you are meeting the key health/performance metrics
(KPIs) as your applications move from dev to production and any differences in the infrastructure environment or scale is not negatively impacting your KPIs.
Note: Gates allow automatic collection of health signals from external services, and then promote the release when all the signals are successful at the same time
or stop the deployment on timeout. Typically, gates are used in connection with incident management, problem management, change management, monitoring,
and external approval systems.
References:
[Link] [Link]
us/azure/devops/pipelines/release/approvals/gates?view=azure-devops
You plan to implement another project named Project2. Project2 will have a build pipeline named Pipe2 that builds an application named App2.
App1 and App2 have conflicting dependencies.
You need to minimize the possibility that the two build pipelines will conflict with each other. The solution must minimize infrastructure costs.
What should you do?
Answer: A
A. SourceGear Vault
B. Jenkins
C. Microsoft Visual SourceSafe
D. WhiteSource Bolt
Answer: D
Explanation:
WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps
and Azure DevOps Server.
Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process,
irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background,
checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source
repositories.
Reference: [Link]
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Box 1: 5 minutes
The alert must calculate the average once every minute.
Note: We [Microsoft] recommend choosing an Aggregation granularity (Period) that is larger than the Frequency of evaluation, to reduce the likelihood of missing
the first evaluation of added time series
Box 2: Static
Box 3: Greater than
Example, say you have an App Service plan for your website. You want to monitor CPU usage on multiple instances running your web site/app. You can do that
using a metric alert rule as follows:
Target resource: myAppServicePlan
Metric: Percentage CPU
Condition Type: Static
Dimensions
Instance = InstanceName1, InstanceName2
Time Aggregation: Average
Period: Over the last 5 mins
Frequency: 1 min
Operator: GreaterThan
Threshold: 70
Like before, this rule monitors if the average CPU usage for the last 5 minutes exceeds 70%.
Aggregation granularity
Reference:
[Link]
You need to minimize the number of queued builds and the time it takes to run the builds. What should you do?
Answer: A
Explanation:
[Link]
A. Code Style
B. Microsoft Visual SourceSafe
C. Black Duck
D. Jenkins
Answer: C
Explanation:
Secure and Manage Open Source Software
Black Duck helps organizations identify and mitigate open source security, license compliance and code-quality risks across application and container portfolios.
Black Duck Hub and its plugin for Team Foundation Server (TFS) allows you to automatically find and fix open source security vulnerabilities during the build
process, so you can proactively manage risk. The integration allows you to receive alerts and fail builds when any Black Duck Hub policy violations are met.
Note: WhiteSource would also be a good answer, but it is not an option here. References:
[Link]
Answer: B
Explanation:
Azure Stack offers virtual machines (VMs) as one type of an on-demand, scalable computing resource. You can choose a VM when you need more control over
the computing environment.
References: [Link]
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: Kubectl create
You can add a service account to Tiller using the --service-account <NAME> flag while you’re configuring Helm (step 2 below). As a prerequisite, you’ll have to
create a role binding which specifies a role and a service account name that have been set up in advance.
Example: Service account with cluster-admin role
$ kubectl create -f [Link] serviceaccount "tiller" created clusterrolebinding "tiller" created
$ helm init --service-account tiller Step 2: helm init
To deploy a basic Tiller into an AKS cluster, use the helm init command. Step 3: helm install
To install charts with Helm, use the helm install command and specify the name of the chart to install. References:
[Link] [Link]
A. Yes
B. NO
Answer: B
Answer: D
A. the object ID
B. the tenant ID
C. the app ID
D. the client secret
E. the subscription ID
Answer: BCD
Explanation:
Reference:
[Link]
Answer: B
Explanation:
Create a service hook for Azure DevOps with Slack to post messages to Slack in response to events in your Azure DevOps organization, such as completed
builds, code changes, pull requests, releases, work items changes, and more.
Note:
* 1. Go to your project Service Hooks page: [Link] Create Subscription.
* 3. Choose the types of events you want to appear in your Slack channel.
* 4. Paste the Web Hook URL from the Slack integration that you created and select Finish.
* 5. Now, when the event you configured occurs in your project, a notification appears in your team's Slack channel.
Reference:
[Link]
A. Yes
B. No
Answer: A
Explanation:
Octopus Deploy is an automated deployment server that makes it easy to automate deployment of [Link] web applications, Java applications, NodeJS
application and custom scripts to multiple environments.
Octopus can be installed on various platforms including Windows, Mac and Linux. It can also be integrated with most version control tools including VSTS and GIT.
When you deploy software to Windows servers, you need to install Tentacle, a lightweight agent service, on your Windows servers so they can communicate with
the Octopus server.
When defining your deployment process, the most common step type will be a package step. This step deploys your packaged application onto one or more
deployment targets.
When deploying a package you will need to select the machine role that the package will be deployed to. References:
[Link] [Link]
Answer: B
Explanation:
Azure Key Vault provides a way to securely store credentials and other keys and secrets.
The Set-AzureKeyVaultSecret cmdlet creates or updates a secret in a key vault in Azure Key Vault. References:
[Link]
- (Exam Topic 2)
You have an application that consists of several Azure App Service web apps and Azure functions. You need to access the security of the web apps and the
functions.
Which Azure features can you use to provide a recommendation for the security of the application?
Answer: D
Explanation:
Monitor compute and app services: Compute & apps include the App Services tab, which App services: list of your App service environments and current security
state of each.
Recommendations
This section has a set of recommendations for each VM and computer, web and worker roles, Azure App Service Web Apps, and Azure App Service Environment
that Security Center monitors. The first column lists the recommendation. The second column shows the total number of resources that are affected by that
recommendation. The third column shows the severity of the issue.
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: Create an agent pool
Azure Pipelines provides a pre-defined agent pool named Azure Pipelines with Microsoft-hosted agents. Step 2: Create a deployment group
Deployment groups make it easy to define logical groups of target machines for deployment, and install the required agent on each machine.
Step 3: Execute the Azure Pipelines Agent extension to the virtual machines Install the Azure Pipelines Agent Azure VM extension
Step 4: Add and configure a deployment group job for the pipeline
Tasks that you define in a deployment group job run on some or all of the target servers, depending on the arguments you specify for the tasks and the job itself.
Reference:
[Link]
A. Yes
B. No
Answer: B
Explanation:
Instead you should deploy an Azure self-hosted agent to an on-premises server.
Note: To build your code or deploy your software using Azure Pipelines, you need at least one agent.
If your on-premises environments do not have connectivity to a Microsoft-hosted agent pool (which is typically the case due to intermediate firewalls), you'll need to
manually configure a self-hosted agent on on-premises computer(s).
Note 2: As we [Microsoft] are launching this new experience in preview, we are currently optimizing it for Azure Kubernetes Service (AKS) and Azure Container
Registry (ACR). Other Kubernetes clusters, for example running on-premises or in other clouds, as well as other container registries, can be used, but require
Answer: D
Explanation:
Conditional Access is a capability of Azure Active Directory. With Conditional Access, you can implement automated access control decisions for accessing your
cloud apps that are based on conditions.
Conditional Access policies are enforced after the first-factor authentication has been completed. References:
[Link]
Answer: D
Explanation:
You can import an existing Git repo from GitHub, Bitbucket, GitLab, or other location into a new or empty existing repo in your project in Azure DevOps.
Import into a new repo
Select Repos, Files.
From the repo drop-down, select Import repository.
If the source repo is publicly available, just enter the clone URL of the source repository and a name for your new Git repository.
References:
[Link]
Answer: AC
Answer: B
Explanation:
The Azure Artifacts Credential Provider automates the acquisition of credentials needed to restore NuGet packages as part of your .NET development workflow. It
integrates with MSBuild, dotnet, and NuGet(.exe)
and works on Windows, Mac, and Linux. Any time you want to use packages from an Azure Artifacts feed, the Credential Provider will automatically acquire and
securely store a token on behalf of the NuGet client you're using.
Reference:
[Link]
Answer: BC
A. Mastered
B. Not Mastered
Answer: A
Explanation:
* 1. Go to the Azure portal, navigate to Traffic Manager profiles and click on the Add button to create a routing profile.
* 2. In the Create Traffic Manager profile, enter, or select these settings:Name: az40011566895n1-tmRouting method: GeographicResource group:
RG1lod11566895
Note: Traffic Manager profiles can be configured to use the Geographic routing method so that users are directed to specific endpoints (Azure, External or Nested)
based on which geographic location their DNS query originates from. This empowers Traffic Manager customers to enable scenarios where knowing a user’s
geographic region and routing them based on that is important.
Reference:
[Link]
Answer: A
Explanation:
[Link]
Answer: A
Explanation:
The first thing to do is to declare your SonarQube server as a service endpoint in your VSTS/DevOps project settings.
References: [Link]
A. Mastered
B. Not Mastered
Answer: A
Explanation:
Step 1: Create a repository
A Git repository, or repo, is a folder that you've told Git to help you track file changes in. You can have any number of repos on your computer, each stored in their
own folder.
Step 2: Create a branch
Branch policies help teams protect their important branches of development. Policies enforce your team's code quality and change management standards.
Step 3: Add a build validation policy
When a build validation policy is enabled, a new build is queued when a new pull request is created or when changes are pushed to an existing pull request
targeting this branch. The build policy then evaluates the results of the build to determine whether the pull request can be completed.
Scenario:
Implement a code flow strategy for Project2 that will: Enable Team2 to submit pull requests for Project2.
Enable Team2 to work independently on changes to a copy of Project2.
Ensure that any intermediary changes performed by Team2 on a copy of Project2 will be subject to the same restrictions as the ones defined in the build policy of
Project2.
References: [Link]
Visit Our Site to Purchase the Full Set of Actual AZ-400 Exam Questions With Answers.
We Also Provide Practice Exam Software That Simulates Real Exam Environment And Has Many Self-Assessment Features. Order the
AZ-400 Product From:
[Link]
* AZ-400 Most Realistic Questions that Guarantee you a Pass on Your FirstTry
* AZ-400 Practice Test Questions in Multiple Choice Formats and Updatesfor 1 Year