Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 341:

  You have the following Azure policy.

  

  You assign the policy to the Tenant root group. What is the effect of the policy?

  A. prevents all http traffic to existing Azure Storage accounts

  B. ensures that all traffic to new Azure Storage accounts is encrypted

  C. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet

  D. ensures that all data for new Azure Storage accounts is encrypted at rest

  Correct Answer: B

  Denies non HTTPS traffic.

• Question 342:

  You are creating a build pipeline in Azure Pipelines.

  You define several tests that might fail due to third-party applications.

  You need to ensure that the build pipeline completes successfully if the third-party applications are unavailable.

  What should you do?

  A. Configure the build pipeline to use parallel jobs

  B. Configure flaky tests

  C. Increase the test pass percentage

  D. Add the Requirements quality widget to your dashboard

  Correct Answer: B

  Requirements traceability is the ability to relate and document two or more phases of a development process, which can then be traced both forward or backward from its origin. Requirements traceability help teams to get insights into indicators such as quality of requirements or readiness to ship the requirement. A fundamental aspect of requirements traceability is association of the requirements to test cases, bugs and code changes.

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/test/requirements-traceability

• Question 343:

  You are designing a configuration management solution to support five apps hosted on Azure App Service.

  Each app is available in the following three environments: development, test, and production. You need to recommend a configuration management solution that meets the following requirements:

  1.

  Supports feature flags

  2.

  Tracks configuration changes from the past 30 days

  3.

  Stores hierarchically structured configuration values

  4.

  Controls access to the configurations by using role-based access control (RBAC) permission

  5.

  Stores shared values as key/value pairs that can be used by all the apps

  Which Azure service should you recommend as the configuration management solution?

  A. Azure Cosmos DB

  B. Azure App Service

  C. Azure App Configuration

  D. Azure Key Vault

  Correct Answer: C

  The Feature Manager in the Azure portal for App Configuration provides a UI for creating and managing the feature flags that you use in your applications. App Configuration offers the following benefits:

  1.

  A fully managed service that can be set up in minutes

  2.

  Flexible key representations and mappings

  3.

  Tagging with labels

  4.

  Point-in-time replay of settings

  5.

  Dedicated UI for feature flag management

  6.

  Comparison of two sets of configurations on custom-defined dimensions

  7.

  Enhanced security through Azure-managed identities

  8.

  Encryption of sensitive information at rest and in transit

  9.

  Native integration with popular frameworks

  App Configuration complements Azure Key Vault, which is used to store application secrets.

  Reference: https://docs.microsoft.com/en-us/azure/azure-app-configuration/overview

• Question 344:

  You have an Azure subscription. The subscription contains virtual machines that run either Windows Server or Linux. You plan to use Prometheus to monitor performance metrics.

  You need to integrate Prometheus and Azure Monitor.

  Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Install a Prometheus server on a Windows virtual machine in Azure.

  B. On each virtual machine, expose the metrics endpoint.

  C. On each virtual machine, enable the Azure Diagnostics extension.

  D. On each virtual machine, enable the containerized agent for Azure Monitor.

  E. Expose a virtual network service endpoint for Azure Storage.

  F. Install a Prometheus server on a Linux virtual machine in Azure.

  Correct Answer: AB

• Question 345:

  You have an Azure DevOps organization named Contoso. You need to recommend an authentication mechanism that meets the following requirements:

  1.

  Supports authentication from Git

  2.

  Minimizes the need to provide credentials during authentication What should you recommend?

  A. managed identities in Azure Active Directory (Azure AD)

  B. personal access tokens (PATs) in Azure DevOps

  C. user accounts in Azure Active Directory (Azure AD)

  D. Alternate credentials in Azure DevOps

  Correct Answer: B

  Personal access tokens (PATs) give you access to Azure DevOps and Team Foundation Server (TFS), without using your username and password directly. These tokens have an expiration date from when they're created. You can restrict the scope of the data they can access. Use PATs to authenticate if you don't already have SSH keys set up on your system or if you need to restrict the permissions that are granted by the credential.

  Reference: https://docs.microsoft.com/en-us/azure/devops/repos/git/auth-overview

• Question 346:

  You have an Azure DevOps project that contains a release pipeline and a Git repository.

  When a new code revision is committed to the repository, a build and release is triggered.

  You need to ensure that release information for the pipeline is added automatically to the work items associated to the Git commit.

  What should you do?

  A. Modify the Integrations options for the pipeline.

  B. Modify the post-deployment conditions for the last stage of the pipeline.

  C. Add an agentless job to the pipeline.

  D. Modify the service hooks for the project.

  Correct Answer: A

  Configure your release definition to post deployment information to Work items.

  1. Open Pipelines>Releases, choose to edit your release pipeline, then choose Options>Integrations.

  

  Reference: https://docs.microsoft.com/en-us/azure/devops/boards/work-items/work-item-deployments-control

• Question 347:

  You have the following Azure policy.

  

  You assign the policy to the Tenant root group. What is the effect of the policy?

  A. ensures that all data for new Azure Storage accounts is encrypted at rest

  B. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the internet

  C. prevents all HTTP traffic to wasting Azure Storage accounts

  D. ensures that all traffic to new Azure Storage accounts is encrypted

  Correct Answer: B

• Question 348:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You use Azure Pipelines to build and test a React js application.

  You have a pipeline that has a single job.

  You discover that installing JavaScript packages from npm takes approximately five minutes each time you run the pipeline.

  You need to recommend a solution to reduce the pipeline execution time.

  Solution: You recommend enabling parallel jobs for the pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead enable pipeline caching.

  Note:

  npm-cache is a command line utility that caches dependencies installed via npm, bower, jspm and composer.

  It is useful for build processes that run [npm|bower|composer|jspm] install every time as part of their build process. Since dependencies don't change often, this often means slower build times. npm-cache helps alleviate this problem by

  caching previously installed dependencies on the build machine.

  Reference:

  https://www.npmjs.com/package/npm-cache

• Question 349:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You use Azure Pipelines to build and test a React js application.

  You have a pipeline that has a single job.

  You discover thai installing JavaScript packages from npm takes approximately five minutes each time you run the pipeline.

  You need to recommend a solution to reduce the pipeline execution time.

  Solution: You recommend defining a container job that uses a custom container that has the JavaScript packages preinstalled.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead enable pipeline caching.

  Note:

  npm-cache is a command line utility that caches dependencies installed via npm, bower, jspm and composer.

  It is useful for build processes that run [npm|bower|composer|jspm] install every time as part of their build process. Since dependencies don't change often, this often means slower build times. npm-cache helps alleviate this problem by

  caching previously installed dependencies on the build machine.

  Reference:

  https://www.npmjs.com/package/npm-cache

• Question 350:

  After you answer a question in this section, you will NOT be able to return to it As a result, these questions will not appear in the review screen.

  You use Azure Pipelines to build and test a React js application You have a pipeline that has a single job.

  You discover that installing JavaScript packages from npm lakes approximately five minutes each time you run the pipeline.

  You need to recommend a solution to reduce the pipeline execution time.

  Solution: You recommend enabling pipeline caching.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  npm-cache is a command line utility that caches dependencies installed via npm, bower, jspm and composer.

  It is useful for build processes that run [npm|bower|composer|jspm] install every time as part of their build process. Since dependencies don't change often, this often means slower build times. npm-cache helps alleviate this problem by caching previously installed dependencies on the build machine.

  Reference: https://www.npmjs.com/package/npm-cache