Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 431:

  You use WhiteSource Bolt to scan a Node.js application.

  The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment.

  You need to ensure that WhiteSource Bolt only scans production dependencies.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Run npm install and specify the --production flag.

  B. Modify the WhiteSource Bolt policy and set the action for the licenses used by the development tools to Reassign.

  C. Modify the devDependencies section of the project's Package.json file.

  D. Configure WhiteSource Bolt to scan the node_modules directory only.

  Correct Answer: AD

  Reference: https://whitesource.atlassian.net/wiki/spaces/WD/pages/34209870/NPM+Plugin

  https://nodejs.org/en/knowledge/getting-started/npm/what-is-the-file-package-json

• Question 432:

  You are automating the build process for a Java-based application by using Azure DevOps.

  You need to add code coverage testing and publish the outcomes to the pipeline.

  What should you use?

  A. Bullseye Coverage

  B. JUnit

  C. JaCoCo

  D. NUnit

  Correct Answer: C

  Use Publish Code Coverage Results task in a build pipeline to publish code coverage results to Azure Pipelines or TFS, which were produced by a build in Cobertura or JaCoCo format. Incorrect Answers:

  A: Bullseye Coverage is used for C++ code, and not for Java.

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/test/publish-code-coverage-results

• Question 433:

  You are deploying a server application that will run on a Server Core installation of Windows Server 2019.

  You create an Azure key vault and a secret.

  You need to use the key vault to secure API secrets for third-party integrations.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Configure RBAC for the key vault.

  B. Modify the application to access the key vault.

  C. Configure a Key Vault access policy.

  D. Deploy an Azure Desired State Configuration (DSC) extension.

  E. Deploy a virtual machine that uses a system-assigned managed identity.

  Correct Answer: ABE

  References: https://docs.microsoft.com/en-us/aspnet/core/security/key-vault-configuration

• Question 434:

  Your company creates a new Azure DevOps team.

  You plan to use Azure DevOps for sprint planning.

  You need to visualize the flow of your work by using an agile methodology.

  Which Azure DevOps component should you use?

  A. Kanban boards

  B. sprint planning

  C. delivery plans

  D. portfolio backlogs

  Correct Answer: A

  Customizing Kanban boards To maximize a team's ability to consistently deliver high quality software, Kanban emphasize two main practices. The first, visualize the flow of work, requires you to map your team's workflow stages and configure your Kanban board to match. Your Kanban board turns your backlog into an interactive signboard, providing a visual flow of work.

  Reference: https://azuredevopslabs.com/labs/azuredevops/agile/

• Question 435:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt.

  You need to recommend changes to reduce the accumulated technical debt.

  Solution: You recommend reducing the code complexity. Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://dzone.com/articles/fight-through-the-pain-how-to-deal-with-technical

• Question 436:

  Your company has 60 developers who are assigned to four teams. Each team has 15 members.

  The company uses an agile development methodology.

  You need to structure the work of the development teams so that each team owns their respective work while working together to reach a common goal.

  Which parts of the taxonomy should you enable the team to perform autonomously?

  A. Features and Tasks

  B. Initiatives and Epics

  C. Epics and Features

  D. Stories and Tasks

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/azure/devops/boards/backlogs/define-features-epics

  https://docs.microsoft.com/en-us/azure/devops/boards/work-items/about-work-items

• Question 437:

  You store source code in a Git repository in Azure repos. You use a third-party continuous integration (CI) tool to control builds. What will Azure DevOps use to authenticate with the tool?

  A. certificate authentication

  B. a personal access token (PAT)

  C. a Shared Access Signature (SAS) token

  D. NTLM authentication

  Correct Answer: B

  Personal access tokens (PATs) give you access to Azure DevOps and Team Foundation Server (TFS), without using your username and password directly.

  Reference: https://docs.microsoft.com/en-us/azure/devops/repos/git/auth-overview

• Question 438:

  During a code review, you discover quality issues in a Java application.

  You need to recommend a solution to detect quality issues including unused variables and empty catch blocks.

  What should you recommend?

  A. In a Maven build task, select Run PMD.

  B. In an Xcode build task, select Use xcpretty from Advanced.

  C. In a Gulp build task, specify a custom condition expression.

  D. In a Grunt build task, select Enabled from Control Options.

  Correct Answer: A

  PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth.

  There is an Apache Maven PMD Plugin which allows you to automatically run the PMD code analysis tool on your project's source code and generate a site report with its results.

  Incorrect Answers:

  B: xcpretty is a fast and flexible formatter for xcodebuild.

  Reference: https://pmd.github.io/

• Question 439:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt.

  You need to recommend changes to reduce the accumulated technical debt.

  Solution: You recommend increasing the code duplication.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead reduce the code complexity.

  Reference: https://dzone.com/articles/fight-through-the-pain-how-to-deal-with-technical

• Question 440:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt.

  You need to recommend changes to reduce the accumulated technical debt.

  Solution: You recommend increasing the test coverage.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead reduce the code complexity.

  Reference: https://dzone.com/articles/fight-through-the-pain-how-to-deal-with-technical