Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 91:

  DRAG DROP

  You need to increase the security of your team's development process.

  Which type of security tool should you recommend for each stage of the development process? To answer, drag the appropriate security tools to the correct targets. Each security tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/azure/devops/articles/security-validation-cicd-pipeline?view=vsts

• Question 92:

  HOTSPOT

  How should you configure the filters for the Project5 trigger? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Scenario:

  

  Continuous integration (CI) triggers cause a build to run whenever a push is made to the specified branches or a specified tag is pushed.

  Box 2: branch filter to include

  You can specify branches to include and exclude. For example:

  # specific branch build

  trigger:

  branches:

  include:

  -master

  -releases/*

  exclude:

  -releases/old*

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/build/triggers

• Question 93:

  HOTSPOT

  You need to configure the alert for VM1. The solution must meet the technical requirements.

  Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Setting 1: Threshold value

  Set to 80 %

  Scenario: An Azure Monitor alert for VM1 must be configured to meet the following requirements:

  1.

  Be triggered when average CPU usage exceeds 80 percent for 15 minutes.

  2.

  Calculate CPU usage averages once every minute.

  Setting 2: Aggregation granularity Set to 15 minutes.

• Question 94:

  HOTSPOT

  You are using PowerShell to administer Azure Log Analytics workspaces.

  You need to list the available workspaces and their properties.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Get-AzResource Use the following command to examine the access control mode for all workspaces in the subscription: PowerShell Get-AzResource -ResourceType Microsoft.OperationalInsights/workspaces -ExpandProperties | foreach {$_.Name + ": " + $_.Properties.features.enableLogAccessUsingOnlyResourcePermissions

  Box 2: -ResourceType Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-access

• Question 95:

  HOTSPOT

  You have an Azure virtual machine named VM1 that runs Linux.

  You plan to deploy the Desired State Configuration (DSC) extension to VM1.

  You need to grant the Log Analytics agent the appropriate directory permissions.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: rwx

  The Log Analytics agent for Linux runs as the omsagent user. To grant >write permission to the omsagent user, run the command setfacl -m u:omsagent:rwx /tmp.

  Box 2: /tmp

  Deploying DSC to a Linux node uses the /tmp folder.

  Reference:

  https://docs.microsoft.com/en-us/azure/automation/automation-dsc-onboarding

• Question 96:

  HOTSPOT

  How should you confrere the release retention policy for the investment planning depletions suite? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Every request made against a storage service must be authorized, unless the request is for a blob or container resource that has been made available for public or signed access. One option for authorizing a request is by using Shared Key.

  Scenario: The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.

  The investment planning applications suite will include one multi-tier web application and two iOS mobile application. One mobile application will be used by employees; the other will be used by customers.

  References: https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-withshared-key

• Question 97:

  HOTSPOT

  Where should the build and release agents for the investment planning application suite run? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: A source control system

  A source control system, also called a version control system, allows developers to collaborate on code and track changes. Source control is an essential tool for multi-developer projects.

  Box 2: A hosted service

  To build and deploy Xcode apps or Xamarin.iOS projects, you'll need at least one macOS agent. If your pipelines are in Azure Pipelines and a Microsoft-hosted agent meets your needs, you can skip setting up a self-hosted macOS agent.

  Scenario: The investment planning applications suite will include one multi-tier web application and two iOS mobile applications. One mobile application will be used by employees; the other will be used by customers.

  References:

  https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/v2-osx?view=azure-devops

• Question 98:

  HOTSPOT

  How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Scenario: Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.

  In order to use App Center, you need to opt in to the service(s) that you want to use, meaning by default no services are started and you will have to explicitly call each of them when starting the SDK.

  Insert the following line to start the SDK in your app's AppDelegate class in the didFinishLaunchingWithOptions method.

  MSAppCenter.start("{Your App Secret}", withServices: [MSAnalytics.self, MSCrashes.self])

  References:

  https://docs.microsoft.com/en-us/appcenter/sdk/getting-started/ios

• Question 99:

  HOTSPOT

  How should you configure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Scenario: By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days.

  Box 1: Set the default retention policy to 30 days The Global default retention policy sets the default retention values for all the build pipelines. Authors of build pipelines can override these values. Box 2: Set the stage retention policy to 60 days

  You may want to retain more releases that have been deployed to specific stages. References: https://docs.microsoft.com/en-us/azure/devops/pipelines/policies/retention

• Question 100:

  HOTSPOT

  You need to configure a cloud service to store the secrets required by the mobile applications to call the share pricing service.

  What should you include in the solution? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Shared Access Authorization token

  Every request made against a storage service must be authorized, unless the request is for a blob or container resource that has been made available for public or signed access. One option for authorizing a request is by using Shared Key.

  Box 2: Azure Storage with HTTPS access

  Scenario: The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.

  The investment planning application suite will include one multi-tier web application and two iOS mobile application. One mobile application will be used by employees; the other will be used by customers.

  Reference:

  https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key