Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 311:

  You use Azure SQL Database Intelligent Insights and Azure Application Insights for monitoring. You need to write ad-hoc queries against the monitoring data.

  Which query language should you use?

  A. Kusto Query Language (KQL)

  B. PL/pgSQL

  C. PL/SQL

  D. Transact-SQL

  Correct Answer: A

  Azure Monitor Logs is based on Azure Data Explorer, and log queries are written using the same Kusto query language (KQL). This is a rich language designed to be easy to read and author, and you should be able to start using it with minimal guidance.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/log-query-overview

• Question 312:

  You plan to onboard 10 new developers.

  You need to recommend a development environment that meets the following requirements:

  1.

  Integrates with GitHub

  2.

  Provides integrated debugging tools

  3.

  Supports remote workers and hot-desking environments

  4.

  Supports developers who use browsers, tablets, and Chromebooks What should you recommend?

  A. VS Code

  B. Xamarin Studio

  C. MonoDevelop

  D. Visual Studio Codespaces

  Correct Answer: D

  Visual Studio Codespaces is built to accommodate the widest variety of projects or tasks, including GitHub and integrating debugging.

  Visual Studio Codespaces conceptually and technically extends the Visual Studio Code Remote Development extensions.

  In addition to "backend" environments, Visual Studio Codespaces supports these "frontend" editors: Visual Studio Code Visual Studio Code-based editor in the browser

  Reference: https://docs.microsoft.com/sv-se/visualstudio/codespaces/overview/what-is-vsonline

• Question 313:

  Your company has an application that contains a number of Azure App Service web apps and Azure functions.

  You would like to view recommendations with regards to the security of the web apps and functions. You plan to navigate to Compute and Apps to achieve your goal.

  Which of the following should you access to make use of Compute and Apps?

  A. Azure Log Analytics

  B. Azure Event Hubs

  C. Azure Advisor

  D. Azure Security Center

  Correct Answer: D

  Monitor compute and app services: Compute and apps include the App Services tab, which App services: list of your App service environments and current security state of each.

  Recommendations This section has a set of recommendations for each VM and computer, web and worker roles, Azure App Service Web Apps, and Azure App Service Environment that Security Center monitors. The first column lists the recommendation. The second column shows the total number of resources that are affected by that recommendation. The third column shows the severity of the issue.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/proactive-diagnostics

• Question 314:

  You need to consider the underlined segment to establish whether it is accurate.

  Your company has a multi-tier application that has its front end hosted in Azure App Service.

  To pinpoint the average load times of the application pages, you should make use of Azure Event Hubs.

  Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

  A. No adjustment required.

  B. Azure Application Insights

  C. Azure Log Analytics

  D. Azure Advisor

  Correct Answer: B

  Application Insights will tell you about any performance issues and exceptions, and help you find and diagnose the root causes.

  Application Insights can monitor both Java and ASP.NET web applications and services, WCF services. They can be hosted on-premises, on virtual machines, or as Microsoft Azure websites.

  On the client side, Application Insights can take telemetry from web pages and a wide variety of devices including iOS, Android, and Windows Store apps.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/web-monitor-performance

• Question 315:

  Your company plans to use an agile approach to software development

  You need to recommend an application to provide communication between members of the development team who work in locations around the world. The application must meet the following requirements:

  1.

  Provide the ability to isolate the members of efferent project teams into separate communication channels and to keep a history of the chats within those channels.

  2.

  Be available on Windows 10, Mac OS, iOS, and Android operating systems.

  3.

  Provide the ability to add external contractors and suppliers to projects.

  4.

  Integrate directly with Azure DevOps. What should you recommend?

  A. Octopus

  B. Bamboo

  C. Microsoft Project

  D. Slack

  Correct Answer: D

  Slack is a popular team collaboration service that helps teams be more productive by keeping all communications in one place and easily searchable from virtually anywhere. All your messages, your files, and everything from Twitter,

  Dropbox, Google Docs, Azure DevOps, and more all together. Slack also has fully native apps for iOS and Android to give you the full functionality of Slack wherever you go.

  Integrated with Azure DevOps

  This integration keeps your team informed of activity happening in its Azure DevOps projects. With this integration, code check-ins, pull requests, work item updates, and build events show up directly in your team's Slack channel.

  Note: Microsoft Teams would also be a correct answer, but it is not an option here.

  References:

  https://marketplace.visualstudio.com/items?itemName=ms-vsts.vss-services-slack

• Question 316:

  Your company makes use of Azure SQL Database Intelligent Insights and Azure Application Insights for monitoring purposes.

  You have been tasked with analyzing the monitoring using ad-hoc queries. You need to utilize the correct query language.

  Solution: You use the Contextual Query Language (CQL).

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/insights/azure-sql

• Question 317:

  Your company has an Azure DevOps project, which includes a build pipeline that makes use of roughly fifty open source libraries.

  You have been tasked with making sure that you are able to scan project for common security weaknesses in the open source libraries.

  Which of the following actions should you take?

  A. You should create a build task and use the WhiteSource Bolt service.

  B. You should create a deployment task and use the WhiteSource Bolt service.

  C. You should create a build task and use the Chef service.

  D. You should create a deployment task and use the Chef service.

  Correct Answer: A

  Reference: https://www.azuredevopslabs.com/labs/vstsextend/whitesource/

• Question 318:

  You need to consider the underlined segment to establish whether it is accurate.

  Black Duck can be used to make sure that all the open source libraries conform to your company's licensing criteria.

  Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

  A. No adjustment required.

  B. Maven

  C. Bamboo

  D. CMAKE

  Correct Answer: A

  Secure and Manage Open Source Software

  Black Duck helps organizations identify and mitigate open source security, license compliance and code-quality risks across application and container portfolios.

  Black Duck Hub and its plugin for Team Foundation Server (TFS) allows you to automatically find and fix open source security vulnerabilities during the build process, so you can proactively manage risk. The integration allows you to receive

  alerts and fail builds when any Black Duck Hub policy violations are met.

  Reference:

  https://marketplace.visualstudio.com/items?itemName=black-duck-software.hub-tfs

• Question 319:

  You have created an Azure DevOps project for a new application that will be deployed to a number of Windows Server 2016 Azure virtual machines.

  You are preparing a deployment solution that allows for the virtual machines to maintain a uniform configuration, and also keep administrative effort with regards to configuring the virtual machines to a minimum.

  Which of the following should be part of your solution? (Choose two.)

  A. Azure Resource Manager templates

  B. The PowerShell Desired State Configuration (DSC) extension for Windows

  C. Azure pipeline deployment groups

  D. The Custom Script Extension for Windows

  E. Azure pipeline stage templates

  Correct Answer: AB

  The Custom Script Extension downloads and executes scripts on Azure virtual machines. This extension is useful for post deployment configuration, software installation, or any other configuration or management tasks. Scripts can be downloaded from Azure storage or GitHub, or provided to the Azure portal at extension run time. The Custom Script Extension integrates with Azure Resource Manager templates, and can be run using the Azure CLI, PowerShell, Azure portal, or the Azure Virtual Machine REST API.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-windows

• Question 320:

  You need to consider the underlined segment to establish whether it is accurate.

  To find when common open source libraries are added to the code base, you should add Jenkins to the build pipeline.

  Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

  A. No adjustment required.

  B. SourceGear Vault

  C. WhiteSource

  D. OWASP ZAP

  Correct Answer: C

  WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.

  Azure DevOps integration with WhiteSource Bolt will enable you to:

  1.

  Detect and remedy vulnerable open source components.

  2.

  Generate comprehensive open source inventory reports per project or build.

  3.

  Enforce open source license compliance, including dependencies’ licenses.

  4.

  Identify outdated open source libraries with recommendations to update. Note: Black duck would also be a good answer, but it is not an option here. Reference:

  https://www.azuredevopslabs.com/labs/vstsextend/WhiteSource/