Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 411:

  Your company develops an application named App1 that is deployed in production.

  As part of an application update, a new service is being added to App1. The new service requires access to an application named App2 that is currently in development.

  You need to ensure that you can deploy the update to App1 before App2 becomes available. You must be able to enable the service in App1 once App2 is deployed.

  What should you do?

  A. Create a branch in the build.

  B. Implement a branch policy.

  C. Create a fork in the build.

  D. Implement a feature flag.

  Correct Answer: D

  Feature flags support a customer-first DevOps mindset, to enable (expose) and disable (hide) features in a solution, even before they are complete and ready for release. Incorrect Answers:

  C: Branch policies are an important part of the Git workflow and enable you to: Isolate work in progress from the completed work in your master branch Guarantee changes build before they get to master

  Reference: https://docs.microsoft.com/en-us/azure/devops/migrate/phase-features-with-feature-flags

• Question 412:

  You have a private project in Azure DevOps.

  You need to ensure that a project manager can create custom work item queries to report on the project's progress.

  The solution must use the principle of least privilege. To which security group should you add the project manager?

  A. Project Collection Administrators

  B. Reader

  C. Project Administrators

  D. Contributor

  Correct Answer: D

  Contributors have permissions to contribute fully to the project code base and work item tracking. The main permissions they don't have or those that manage or administer resources.

  Reference: https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions-access-work-tracking?view=azure-devops#queries-and-semantic-search

• Question 413:

  You have a free tier of an Azure DevOps organization named Contoso. Contoso contains 10 private projects. Each project has multiple jobs with no dependencies. The build process requires access to resource files located in an on-premises

  file system.

  You frequently run the jobs on five self-hosted agents but experience long build times and frequently queued builds.

  You need to minimize the number of queued builds and the time it takes to run the builds.

  What should you do?

  A. Configure the pipelines to use the Microsoft-hosted agents.

  B. Register additional self-hosted agents.

  C. Purchase self-hosted parallel jobs.

  D. Purchase Microsoft-hosted parallel jobs.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/licensing/concurrent-jobs

• Question 414:

  You are designing a build pipeline in Azure Pipelines.

  The pipeline requires a self-hosted agent. The build pipeline will run once daily and will take 30 minutes to complete.

  You need to recommend a compute type for the agent. The solution must minimize costs.

  What should you recommend?

  A. Azure virtual machines

  B. an Azure virtual machine scale set

  C. an Azure Kubernetes Service (AKS) cluster

  D. Azure Container Instances

  Correct Answer: D

  If your pipelines are in Azure Pipelines, then you've got a convenient option to run your jobs using a Microsoft-hosted agent. With Microsoft-hosted agents, maintenance and upgrades are taken care of for you. Each time you run a pipeline, you get a fresh virtual machine. The virtual machine is discarded after one use. Microsoft-hosted agents can run jobs directly on the VM or in a container.

  Note: You can try a Microsoft-hosted agent for no charge.

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted

• Question 415:

  You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication. What should you do first?

  A. Create a conditional access policy in Azure AD.

  B. Modify the Security settings of the GitHub organization.

  C. Create an Azure Active Directory B2C (Azure AD B2C) tenant.

  D. Register GitHub in Azure AD.

  Correct Answer: D

  When you connect to a Git repository from your Git client for the first time, the credential manager prompts for credentials. Provide your Microsoft account or Azure AD credentials.

  Note: Git Credential Managers simplify authentication with your Azure Repos Git repositories. Credential managers let you use the same credentials that you use for the Azure DevOps Services web portal. Credential managers support multi-factor authentication through Microsoft account or Azure Active Directory (Azure AD). Besides supporting multi-factor authentication with Azure Repos, credential managers also support two-factor authentication with GitHub repositories.

  Reference: https://docs.microsoft.com/en-us/azure/devops/repos/git/set-up-credential-managers

• Question 416:

  You are integrating Azure Pipelines and Microsoft Teams.

  You install the Azure Pipelines app in Microsoft Teams.

  You have an Azure DevOps organization named Contoso that contains a project name Project1.

  You subscribe to Project1 in Microsoft Teams.

  You need to ensure that you only receive events about failed builds in Microsoft Teams.

  What should you do first?

  A. From Microsoft Teams, tun @azure pipelines subscribe https://dev.azure.com/Contoso/Project1.

  B. From Microsoft Teams, run @azure pipelines subscriptions.

  C. From Azure Pipelines, enable continuous integration for Project1.

  D. From Azure Pipelines, add a Publish Build Artifacts task to Project1.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/integrations/microsoft-teams

• Question 417:

  You administer an Azure DevOps project that includes package feeds.

  You need to ensure that developers can unlist and deprecate packages. The solution must use the principle of least privilege.

  Which access level should you grant to the developers?

  A. Collaborator

  B. Contributor

  C. Owner

  Correct Answer: B

  Feeds have four levels of access: Owners, Contributors, Collaborators, and Readers. Owners can add any type of identity-individuals, teams, and groups-to any access level.

  

  Reference: https://docs.microsoft.com/en-us/azure/devops/artifacts/feeds/feed-permissions

• Question 418:

  You have a multi-tier application. The front end of the application is hosted in Azure App Service.

  You need to identify the average load times of the application pages.

  What should you use?

  A. Azure Application Insights

  B. the activity log of the App Service

  C. the diagnostics logs of the App Service

  D. Azure Advisor

  Correct Answer: A

  Application Insights will tell you about any performance issues and exceptions, and help you find and diagnose the root causes.

  Application Insights can monitor both Java and ASP.NET web applications and services, WCF services. They can be hosted on-premises, on virtual machines, or as Microsoft Azure websites.

  On the client side, Application Insights can take telemetry from web pages and a wide variety of devices including iOS, Android, and Windows Store apps.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/app/web-monitor-performance

• Question 419:

  You have an Azure DevOps organization named Contoso and an Azure subscription.

  You use Azure DevOps to build and deploy a web app named App1. Azure Monitor is configured to generate an email notification in response to alerts generated whenever App1 generates a server-side error.

  You need to receive notifications in Microsoft Teams whenever an Azure Monitor alert is generated.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create an Azure Monitor workbook.

  B. Create an Azure logic app that has an HTTP request trigger.

  C. Create an Azure logic app that has an Azure DevOps trigger.

  D. Modify an action group in Azure Monitor.

  E. Modify the Diagnostics settings in Azure Monitor.

  Correct Answer: BD

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups-logic-app

• Question 420:

  You plan to use Terraform to deploy an Azure resource group from a Windows system.

  You need to install the required frameworks to support the planned deployment.

  Which two frameworks should you install? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Vault

  B. Terratest

  C. Node.js

  D. Yeoman

  E. Tiller

  Correct Answer: BD

  You can use the combination of Terraform and Yeoman. Terraform is a tool for creating infrastructure on Azure. Yeoman makes it easy to create Terraform modules.

  Terratest provides a collection of helper functions and patterns for common infrastructure testing tasks, like making HTTP requests and using SSH to access a specific virtual machine. The following list describes some of the major advantages of using Terratest:

  1.

  Convenient helpers to check infrastructure - This feature is useful when you want to verify your real infrastructure in the real environment.

  2.

  Organized folder structure - Your test cases are organized clearly and follow the standard Terraform module folder structure.

  3.

  Test cases are written in Go - Many developers who use Terraform are Go developers. If you're a Go developer, you don't have to learn another programming language to use Terratest.

  4.

  Extensible infrastructure - You can extend additional functions on top of Terratest, including Azure-specific features.

  Reference: https://docs.microsoft.com/en-us/azure/developer/terraform/create-base-template-using-yeoman https://docs.microsoft.com/en-us/azure/developer/terraform/test-modules-using-terratest