Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 361:

  You have an Azure DevOps organization named Contoso.

  You need to receive Microsoft Teams notifications when work items are updated.

  What should you do?

  A. From Azure DevOps. configure a service hook subscription.

  B. From Microsoft Teams, configure a connector.

  C. From Microsoft Teams, add a channel.

  D. From Azure DevOps. install an extension.

  E. From the Microsoft Teams admin center configure external access.

  Correct Answer: B

  Service hooks let you run tasks on other services when events happen in your Azure DevOps projects. For example, create a card in Trello when a work item is created or send a push notification to your team's mobile devices when a build fails. You can also use service hooks in custom apps and services as a more efficient way to drive activities when events happen in your projects. Note: Service hook publishers define a set of events. Subscriptions listen for the events and define actions to take based on the event. Subscriptions also target consumers, which are external services that can run their own actions, when an event occurs.

  Reference: https://docs.microsoft.com/en-us/azure/devops/service-hooks/overview

• Question 362:

  You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:

  1.

  The builds must access an on-premises dependency management system.

  2.

  The build outputs must be stored as Server artifacts in Azure DevOps.

  3.

  The source code must be stored in a Git repository in Azure DevOps.

  Solution: Configure the build pipeline to use a Microsoft-hosted agent pool running a Linux image. Include the Java Tool Installer task in the build pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 363:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling.

  You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1.

  You need to ensure that an email alert is generated whenever VMSS1 scales in or out.

  Solution: From Azure DevOps, configure the Notifications settings for Project1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Notifications help you and your team stay informed about activity that occurs within your projects in Azure DevOps. You can get notified when changes occur to the following items: work items code reviews pull requests source control files builds Reference: https://docs.microsoft.com/en-us/azure/devops/notifications/about-notifications?view=azure-devops

• Question 364:

  You need to execute inline testing of an Azure DevOps pipeline that uses a Docker deployment model. The solution must prevent the results from being published to the pipeline. What should you use for the inline testing?

  A. a single stage Dockerfile

  B. an Azure Kubernetes Service (AKS) pod

  C. a multi-stage Dockerfile

  D. a Docker Compose file

  Correct Answer: B

  Use Docker when running integration tests with Azure Pipelines.

  Reference: https://crossprogramming.com/2019/12/27/use-docker-when-running-integration-tests-with-azure-pipelines.html

• Question 365:

  You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.

  You need to ensure that all the open source libraries comply with your company's licensing standards.

  Which service should you use?

  A. Ansible

  B. Maven

  C. WhiteSource Bolt

  D. Helm

  Correct Answer: C

  WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server. Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.

  Note: Blackduck would also be a good answer, but it is not an option here.

  Reference: https://www.azuredevopslabs.com/labs/vstsextend/whitesource/

• Question 366:

  You are designing the security validation strategy for a project in Azure DevOps. You need to identify package dependencies that have known security issues and can be resolved by an update. What should you use?

  A. Octopus Deploy

  B. Jenkins

  C. Gradle

  D. SonarQube

  Correct Answer: A

  Reference: https://octopus.com/docs/packaging-applications

• Question 367:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling. You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1.

  You need to ensure that an email alert is generated whenever VMSS1 scales in or out.

  Solution: From Azure Monitor, create an action group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  An action group is a collection of notification preferences defined by the owner of an Azure subscription. Azure Monitor, Service Health and Azure Advisor alerts use action groups to notify users that an alert has been triggered.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/action-groups

• Question 368:

  Your company has an Azure DevOps project,

  The source code for the project is stored in an on-premises repository and uses on an on-premises build server.

  You plan to use Azure DevOps to control the build process on the build server by using a self-hosted agent.

  You need to implement the self-hosted agent.

  You download and install the agent on the build server.

  Which two actions should you perform next? Each correct answer presents part of the solution.

  A. From Azure, create a shared access signature (SAS).

  B. From the build server, create a certificate, and then upload the certificate to Azure Storage.

  C. From the build server, create a certificate, and then upload the certificate to Azure Key Vault.

  D. From DevOps, create a personal access token (PAT).

  E. From the build server, run config.cmd.

  Correct Answer: BE

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/certificate

• Question 369:

  Your company uses Azure DevOps to manage the build and release processes for applications. You use a Git repository for applications source control. You plan to create a new branch from an existing pull request. Later, you plan to merge

  the new branch and the target branch of the pull request.

  You need to use a pull request action to create the new branch. The solution must ensure that the branch uses only a portion of the code in the pull request.

  Which pull request action should you use?

  A. Set as default branch

  B. Approve with suggestions

  C. Cherry-pick

  D. Reactivate

  E. Revert

  Correct Answer: C

  Cherry-pick a pull request

  To copy changes made in a pull request to another branch in your repo, follow these steps:

  In a completed pull request, select Cherry-pick, or for an active pull request, select Cherry-pick from the ... menu. Cherry-picking a pull request in this way creates a new branch with the copied changes. Merge into a target branch in a second

  pull request. In Target branch, enter the branch you want to merge the copied changes. In Case Study: branch name, enter a new branch to contain the copied changes, then select Cherry-pick.

  Select Create pull request to merge the topic branch into the target branch to complete the cherry-pick.

  Reference:

  https://docs.microsoft.com/en-us/azure/devops/repos/git/pull-requests

• Question 370:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company's development process:

  1.

  Licensing violations

  2.

  Prohibited libraries

  Solution: You implement continuous deployment.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead implement continuous integration.

  Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development

  environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source

  repositories.

  Reference: https://azuredevopslabs.com/labs/vstsextend/whitesource/