Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 381:

  You have a project in Azure DevOps named Project1. Project1 contains a pipeline that builds a container image named Image1 and pushes Image1 to an Azure container registry named ACR1. Image1 uses a base image stored in Docker

  Hub.

  You need to ensure that Image1 is updated automatically whenever the base image is updated.

  What should you do?

  A. Enable the Azure Event Grid resource provider and subscribe to registry events.

  B. Add a Docker Hub service connection to Azure Pipelines.

  C. Create and run an Azure Container Registry task.

  D. Create a service hook in Project1.

  Correct Answer: C

  ACR Tasks supports automated container image builds when a container's base image is updated, such as when you patch the OS or application framework in one of your base images.

  Reference: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-base-image-update

• Question 382:

  You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.

  You need to ensure that all the open source libraries comply with your company's licensing standards.

  Which service should you use?

  A. Ansible

  B. Maven

  C. WhiteSource Bolt

  D. Helm

  Correct Answer: C

  WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server.

  Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development

  environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source

  repositories.

  Note: Blackduck would also be a good answer, but it is not an option here.

  Reference:

  https://www.azuredevopslabs.com/labs/vstsextend/whitesource/

• Question 383:

  Your company has an Azure DevOps project,

  The source code for the project is stored in an on-premises repository and uses on an on-premises build server.

  You plan to use Azure DevOps to control the build process on the build server by using a self-hosted agent.

  You need to implement the self-hosted agent.

  You download and install the agent on the build server.

  Which two actions should you perform next? Each correct answer presents part of the solution.

  A. From Azure, create a shared access signature (SAS).

  B. From the build server, create a certificate, and then upload the certificate to Azure Storage.

  C. From the build server, create a certificate, and then upload the certificate to Azure Key Vault.

  D. From DevOps, create a personal access token (PAT).

  E. From the build server, run config.cmd.

  Correct Answer: DE

  https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/v2-windows?view=azure-devops (Get PAT, run config)

• Question 384:

  You need to execute inline testing of an Azure DevOps pipeline that uses a Docker deployment model. The solution must prevent the results from being published to the pipeline. What should you use for the inline testing?

  A. a single stage Dockerfile

  B. an Azure Kubernetes Service (AKS) pod

  C. a multi-stage Dockerfile

  D. a Docker Compose file

  Correct Answer: C

  "Build and test with a multi-stage Dockerfile: build and tests execute inside the container using a multi-stage Docker file, as such test results are not published back to the pipeline." https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/test/publish-test-results?view=azure-devopsandtabs=trx%2Cyaml

• Question 385:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You plan to update the Azure DevOps strategy of your company.

  You need to identify the following issues as they occur during the company's development process:

  1.

  Licensing violations

  2.

  Prohibited libraries

  Solution: You implement continuous deployment.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead implement continuous integration.

  Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.

  Reference: https://azuredevopslabs.com/labs/vstsextend/whitesource/

• Question 386:

  Your company implements an Agile development methodology.

  You plan to implement retrospectives at the end of each sprint.

  Which three questions should you include? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Who performed well?

  B. Who should have performed better?

  C. What could have gone better?

  D. What went well?

  E. What should we try next?

  Correct Answer: CDE

  Reference: https://www.scrum.org/resources/what-is-a-sprint-retrospective

• Question 387:

  Your company uses Azure DevOps to manage the build and release processes for applications.

  You use a Git repository for applications source control.

  You plan to create a new branch from an existing pull request. Later, you plan to merge the new branch and the target branch of the pull request.

  You need to use a pull request action to create the new branch. The solution must ensure that the branch uses only a portion of the code in the pull request.

  Which pull request action should you use?

  A. Set as default branch

  B. Approve with suggestions

  C. Cherry-pick

  D. Reactivate

  E. Revert

  Correct Answer: C

  Cherry-pick a pull request To copy changes made in a pull request to another branch in your repo, follow these steps:

  1.

  In a completed pull request, select Cherry-pick, or for an active pull request, select Cherry-pick from the ... menu. Cherry-picking a pull request in this way creates a new branch with the copied changes. Merge into a target branch in a second pull request.

  2.

  In Target branch, enter the branch you want to merge the copied changes.

  3.

  In Topic branch name, enter a new branch to contain the copied changes, then select Cherry-pick.

  4.

  Select Create pull request to merge the topic branch into the target branch to complete the cherry-pick.

  Reference: https://docs.microsoft.com/en-us/azure/devops/repos/git/pull-requests

• Question 388:

  You have an Azure DevOps project that uses many package feeds.

  You need to simplify the project by using a single feed that stores packages produced by your company and packages consumed from remote feeds.

  The solution must support public feeds and authenticated feeds.

  What should you enable in DevOps?

  A. Universal Packages

  B. views in Azure Artifacts

  C. upstream sources

  D. a symbol server

  Correct Answer: C

• Question 389:

  During a code review, you discover quality issues in a Java application. You need to recommend a solution to detect quality issues including unused variables and empty catch blocks. What should you recommend?

  A. In an Xcode build task, select Use xcpretty from Advanced.

  B. In a Maven build task, select Run PHD.

  C. In a Grunt build task, select Enabled from Control Options.

  D. In a Gulp build task, specify a custom condition expression.

  Correct Answer: B

• Question 390:

  You have a project in Azure DevOps named Project1. Project1 contains a build pipeline named Pipe1 that builds an application named Appl.

  You have an agent pool named Pool1 that contains a Windows Server 2019-based self-hosted agent.

  Pipe1 uses Pool1.

  You plan to implement another project named Project2. Project2 will have a build pipeline named Pipe2 that builds an application named App2.

  App1 and App2 have conflicting dependencies.

  You need to minimize the possibility that the two build pipelines will conflict with each other. The solution must minimize infrastructure costs.

  What should you do?

  A. Create two container jobs.

  B. Change the self-hosted agent to use Red Hat Enterprise Linux (RHEL) 8.

  C. Add another self-hosted agent

  D. Add a Docker Compose task to the build pipelines.

  Correct Answer: A