Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 291:

  You use release pipelines in Azure Pipelines to deploy an app. Secrets required be the pipeline are stored as pipeline variables. Logging of commands is enabled for the Azure Pipelines agent.

  You need to prevent the values of the secrets from being logged.

  What should you do?

  A. Store the secrets in the environment variables instead of the pipeline variables.

  B. Pass the secrets on the command line instead of in the pipeline variables.

  C. Apply a prefix of secret to the name of the variables.

  D. Echo the values of the secrets to the command line.

  Correct Answer: A

  Don't set secret variables in your YAML file. Operating systems often log commands for the processes that they run, and you wouldn't want the log to include a secret that you passed in as an input. Use the script's environment or map the variable within the variables block to pass secrets to your pipeline.

  Incorrect Answers:

  B: Never pass secrets on the command line.

  C: Adding a prefix does not make the variable a secret. The issecret property makes it secret but does not prevent logging of the secret.

  D: Never echo secrets as output.

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/process/variables?view=azure-devopsandtabs=yaml%2Cbatch https://docs.microsoft.com/en-us/azure/devops/pipelines/scripts/logging-commands?view=azure-devopsandtabs=bash

• Question 292:

  You have several Azure Active Directory (Azure AD) accounts.

  You need to ensure that users use multi-factor authentication (MFA) to access Azure apps from untrusted networks.

  What should you configure in Azure AD?

  A. access reviews

  B. managed identities

  C. entitlement management

  D. conditional access

  Correct Answer: D

  You can configure a Conditional Access policy that requires MFA for access from untrusted networks.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa

• Question 293:

  You have a project in Azure DevOps that has a release pipeline.

  You need to integrate work item tracking and an Agile project management system to meet the following requirements:

  1.

  Ensure that developers can track whether their commits are deployed to production.

  2.

  Report the deployment status.

  3.

  Minimize integration effort. Which system should you use?

  A. Asana

  B. Basecamp

  C. Trello

  D. Jira

  Correct Answer: D

  Jira Software is a development tool used by agile teams to plan, track, and manage software releases. Using Azure Pipelines, teams can configure CI/CD pipelines for applications of any language, deploying to any platform or any cloud.

  Note: Microsoft and Atlassian have partnered together to build an integration between Azure Pipelines and Jira Software.

  This integration connects the two products, providing full tracking of how and when the value envisioned with an issue is delivered to end users. This enables teams to setup a tight development cycle from issue creation through release. Key

  development milestones like builds and deployments associated to a Jira issue can then be tracked from within Jira Software.

  Incorrect Answers:

  C: Trello is a collaboration tool that organizes your projects into boards. In one glance, Trello tells you what's being worked on, who's working on what, and where something is in a process.

  Reference: https://devblogs.microsoft.com/devops/azure-pipelines-integration-with-jira-software/

• Question 294:

  You plan to onboard 10 new developers.

  You need to recommend a development environment that meets the following requirements:

  1.

  Integrates with GitHub

  2.

  Provides integrated debugging tools

  3.

  Supports remote workers and hot-desking environments

  4.

  Supports developers who use browsers, tablets, and Chromebooks What should you recommend?

  A. VS Code

  B. Xamarin Studio

  C. MonoDevelop

  D. Github Codespaces

  Correct Answer: D

  You can develop in your codespace directly in Visual Studio Code by connecting the GitHub Codespaces extension with your account on GitHub.

  Reference: https://docs.github.com/en/codespaces/developing-in-codespaces/using-codespaces-in-visual-studio-code

• Question 295:

  You have a project in Azure DevOps.

  You create the following YAML template named Template1.yml.

  steps:

  -

  script: npm install

  -

  script: yarn install

  -

  script: npm run compile

  You create the following pipeline named File1.yml.

  parameters:usersteps:

  -task: MyTask@1

  -script: echo Done

  You need to ensure that Template1.yaml runs before File1.yml.

  How should you update File1.yml?

  A. parameters: usersteps: extends: template: template1.yml

  -task: MyTask@1 - script: echo Done

  B. template: template1.yml parameters: usersteps:

  -task: MyTask@1 - script: echo Done

  C. extends: template: templatel.yml parameters: usersteps:

  -task: MyTask@1 - script: echo Done

  D. parameters: usersteps: - template: templatel.yml

  -task: MyTask@1 - script: echo Done

  Correct Answer: C

  Azure Pipelines offers two kinds of templates: includes and extends. Included templates behave like #include in C++: it's as if you paste the template's code right into the outer file, which references it. To continue the C++ metaphor, extends templates are more like inheritance: the template provides the outer structure of the pipeline and a set of places where the template consumer can make targeted alterations.

  Example:

  extends:

  template: template.yml@templates

  parameters:

  usersteps:

  -

  script: echo This is my first step

  -

  script: echo This is my second step

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/security/templates

• Question 296:

  You have an Azure DevOps organization that contains a project named Project1.

  You need to create a published wiki in Project1.

  What should you do first?

  A. Modify the Storage settings of Project1.

  B. In Project1, create an Azure DevOps pipeline.

  C. In Project1, create an Azure DevOps repository.

  D. Modify the Team configuration settings of Project1.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/devops/project/wiki/publish-repo-to-wiki?view=azure-devopsandtabs=browser

• Question 297:

  You have an Azure subscription that contains multiple Azure services.

  You need to send an SMS alert when scheduled maintenance is planned for the Azure services.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Enable Azure Security Center.

  B. Create and configure an Azure Monitor alert rule.

  C. Create an Azure Service Health alert.

  D. Create and configure an action group.

  Correct Answer: CD

  Creating planned maintenance alerts using Azure Service Health

  1.

  Login into the Azure portal and select Service Health.

  2.

  Select Health alerts followed by + Create service health alert from the top of the window on the right.

  3.

  In the Edit Alert blade, give the alert a Name, Description, check the subscription is correct and choose a resource group.

  4.

  The next step is to work through the Criteria section choosing which services, regions and types of event alerts should be monitored. For the purpose of this article all services and regions have been checked but only planned maintenance events.

  5.

  Select or create an Action group. (An Action group is a group of actions to be taken, should an event be logged.)

  6.

  Configure the actions to be taken. We are only configuring an email alert, so we first name the action, then chose Email/SMS/Push/Voice from the drop down list.

  Note: Azure Service Health can be used to view problems with Azure services that may impact any of your cloud services. Service Health monitors three types of health event:

  Service issues – Azure services that are currently experiencing problems Planned maintenance – Any known future maintenance that may affect the availability of your services Health advisories – Changes in services, for example, deprecated features or exceeded quota usage.

  Reference: https://www.techkb.onl/azure-using-service-health-to-alert-against-planned-maintenance/

• Question 298:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling.

  You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1.

  You need to ensure that an email alert is generated whenever VMSS1 scales in or out.

  Solution: From Azure Monitor, configure the autoscale settings.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead create an action group.

  Note: An action group is a collection of notification preferences defined by the owner of an Azure subscription. Azure Monitor, Service Health and Azure Advisor alerts use action groups to notify users that an alert has been triggered.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/action-groups

• Question 299:

  You configure Azure Application Insights and the shared service plan tier for a web app. You enable Smart Detection.

  You confirm that standard metrics are visible in the logs, but when you test a failure, you do not receive a Smart Detection notification. What prevents the Smart Detection notification from being sent?

  A. You must enable the Snapshot Debugger for the web app.

  B. Smart Detection uses the first 24 hours to establish the normal behavior of the web app.

  C. The web app is configured to use the shared service plan tier.

  D. You must restart the web app before Smart Detection is enabled.

  Correct Answer: B

  After setting up Application Insights for your project, and if your app generates a certain minimum amount of data, Smart Detection of failure anomalies takes 24 hours to learn the normal behavior of your app, before it is switched on and can send alerts.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/proactive-failure-diagnostics

• Question 300:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. The lead developer at your company reports that adding new application features takes longer

  than expected due to a large accumulated technical debt.

  You need to recommend changes to reduce the accumulated technical debt.

  Solution: You recommend reducing the code coupling and the dependency cycles?

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://dzone.com/articles/fight-through-the-pain-how-to-deal-with-technical https://www.devopsgroup.com/blog/five-ways-devops-helps-with-technical-debt/