Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 231:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to use an Azure Pipelines pipeline to test an app. The solution meet the following requirements:

  1.

  The pipeline must fail if any tests fail.

  2.

  The test results must be published to the pipeline.

  3.

  The test for every pipeline run must be triggered unless the pipeline is cancelled. Solution: You include the following elements in the YAML definition of the pipeline.

  

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 232:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to use an Azure Pipelines pipeline to test an app. The solution meet the following requirements:

  1.

  The pipeline must fail if any tests fail.

  2.

  The test results must be published to the pipeline.

  3.

  The test for every pipeline run must be triggered unless the pipeline is cancelled. Solution: You include the following elements in the YAML definition of the pipeline.

  

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 233:

  You use Azure Pipelines to build and deploy an app named App1.

  You plan to monitor App1 by using Application Insights.

  You create an Application Insights instance named AI1.

  You need to configure App1 to use AI1.

  Which file should you modify?

  A. appsettings.json

  B. launchSettings.json

  C. startup.cs

  D. project.json

  Correct Answer: C

  Reference: https://learn.microsoft.com/en-us/azure/azure-monitor/app/asp-net-core

• Question 234:

  You have an Azure subscription that contains a Log Analytics workspace named WS1 and a virtual machine named VM1.

  You need to install the Microsoft Enterprise Cloud Monitoring extension on VM1.

  Which two values are required to configure the extension? Each correct answer presents part of the solution.

  NOTE: Each correct answer is worth one point.

  A. the secret key of WS1

  B. the ID of the subscription

  C. the system-assigned managed identity of VM1

  D. the ID of WS1

  E. the resource ID of VM1

  Correct Answer: AD

  Reference: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-windows-client

• Question 235:

  You have an app named App1 that uses Application Insights to monitor application performance.

  You need to analyze how often a page in App1 is accessed.

  Which pane in Application Insights should you use?

  A. Events

  B. Sessions

  C. Impact

  D. Users

  Correct Answer: A

  Reference: https://learn.microsoft.com/en-us/azure/azure-monitor/app/usage-overview

• Question 236:

  Your company uses Azure DevOps and has a Microsoft Entra tenant.

  Only users who have accounts in Azure AD can access the Azure DevOps environment.

  You need to ensure that only devices that are connected to the on-premises network can access the Azure DevOps environment.

  What should you do?

  A. Assign the Stakeholder access level to all users.

  B. In Azure DevOps, configure Security in Project Settings.

  C. In Microsoft Entra ID, configure conditional access.

  D. In Microsoft Entra ID, configure risky sign-ins.

  Correct Answer: C

  You can configure On-Premises Conditional Access using registered devices.

  Reference: https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-device-based-conditional-access-on-premises

• Question 237:

  You have an Azure subscription that contains four Azure virtual machines.

  You need to configure the virtual machines to use a single identity. The solution must meet the following requirements:

  1.

  Ensure that the credentials for the identity are managed automatically.

  2.

  Support granting privileges to the identity. Which type of identity should you use?

  A. a system-assigned managed identity

  B. a user-assigned managed identity

  C. a service principal

  D. a user account

  Correct Answer: B

  Managed Identity is suitable for scenarios where a single resource needs to access another Azure resource, while Service Principal is suitable for more complex scenarios where multiple resources need to access multiple Azure resources.

  Reference: https://www.c-sharpcorner.com/blogs/azure-managed-identity-vs-azure-service-principal

• Question 238:

  You have a GitHub repository that contains multiple workflows and a secret stored at the environment level.

  You need to ensure that the secret can be used by all the workflows.

  What should you do first?

  A. Recreate the secret at the organization level.

  B. Recreate the secret at the repository level.

  C. Enable required reviewers.

  Correct Answer: B

  Encrypted secrets allow you to store sensitive information in your organization, repository, or repository environments.

  Secrets are encrypted variables that you create in an organization, repository, or repository environment. The secrets that you create are available to use in GitHub Actions workflows. GitHub uses a libsodium sealed box to help ensure that

  secrets are encrypted before they reach GitHub and remain encrypted until you use them in a workflow.

  Incorrect:

  Not A:

  For secrets stored at the organization-level, you can use access policies to control which repositories can use organization secrets. Organization-level secrets let you share secrets between multiple repositories, which reduces the need for

  creating duplicate secrets. Updating an organization secret in one location also ensures that the change takes effect in all repository workflows that use that secret.

  Reference:

  https://docs.github.com/en/actions/security-guides/encrypted-secrets

• Question 239:

  You have an app named App1 that you release by using Azure Pipelines. App1 has the versions shown in the following table.

  

  You complete a code change to fix a bug that was introduced in version 3.4.3. Which version number should you assign to the release?

  A. 3.4.4

  B. 3.4.8

  C. 3.5.0

  D. 4.0.1

  Correct Answer: D

• Question 240:

  You use Azure Repos to manage source code and Azure Pipelines to implement continuous integration and continuous deployment (CI/CD).

  You need to ensure that all comments on pull requests are resolved before the pull requests are included in a build. The solution must minimize administrative effort.

  What should you include in the solution?

  A. a custom action

  B. a post-deployment gate

  C. a branch policy

  D. a pre-deployment gate

  Correct Answer: C