Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 441:

  You are developing an iOS application by using Azure DevOps.

  You need to test the application manually on 10 devices without releasing the application to the public.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create a Microsoft Intune device compliance policy.

  B. Deploy a certificate from an internal certification authority (CA) to each device.

  C. Register the application in the iTunes store.

  D. Onboard the devices into Microsoft Intune.

  E. Distribute a new release of the application.

  F. Register the IDs of the devices in the Apple Developer portal.

  Correct Answer: EF

• Question 442:

  You have a private distribution group that contains provisioned and unprovisioned devices.

  You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.

  What should you do?

  A. Select Register devices and sign my app.

  B. Generate a new .p12 file for each device.

  C. Create an active subscription in App Center Test.

  D. Add the device owner to the collaborators group.

  Correct Answer: A

  The following diagram displays the entire app re-signing flow in App Center.

  

  Incorrect Answers:

  B: Only one .p12 file for the app, not one for each device.

  Reference: https://docs.microsoft.com/hu-hu/appcenter/distribution/auto-provisioning

• Question 443:

  You are designing an Azure DevOps strategy for your company's development team. You suspect that the team's productivity is low due to accumulate technical debt. You need to recommend a metric to assess the amount of the team's technical debt. What should you recommend?

  A. the number of code modules in an application

  B. the number of unit test failures

  C. the percentage of unit test failures

  D. the percentage of overall time spent on rework

  Correct Answer: D

  Technical Debt is the estimated cost to fix code elements issues.

  Technical Debt Ratio: Ratio between the cost to develop the software and the cost to fix it. The Technical Debt Ratio formula is:

  Remediation cost / Development cost

  Which can be restated as:

  Remediation cost / (Cost to develop 1 line of code * Number of lines of code)

  References:

  http://www.azure365.co.in/devops/3PDevOps-4

• Question 444:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment.

  You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos.

  Solution: You create a service hook subscription that uses the build completed event. Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You can create a service hook for Azure DevOps Services and TFS with Jenkins.

  However, the service subscription event should use the code pushed event, is triggered when the code is pushed to a Git repository.

• Question 445:

  You create a Microsoft ASP.NET Core application.

  You plan to use Azure Key Vault to provide secrets to the application as configuration data.

  You need to create a Key Vault access policy to assign secret permissions to the application. The solution must use the principle of least privilege.

  Which secret permissions should you use?

  A. List only

  B. Get only

  C. Get and List

  Correct Answer: B

  Application data plane permissions:

  1.

  Keys: sign

  2.

  Secrets: get

  Reference: https://docs.microsoft.com/en-us/azure/key-vault/key-vault-secure-your-key-vault

• Question 446:

  You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.

  You need to ensure that all the open source libraries comply with your company's licensing standards.

  Which service should you use?

  A. NuGet

  B. Maven

  C. Black Duck

  D. Helm

  Correct Answer: C

  Secure and Manage Open Source Software Black Duck helps organizations identify and mitigate open source security, license compliance and code-quality risks across application and container portfolios. Black Duck Hub and its plugin for Team Foundation Server (TFS) allows you to automatically find and fix open source security vulnerabilities during the build process, so you can proactively manage risk. The integration allows you to receive alerts and fail builds when any Black Duck Hub policy violations are met.

  Note: WhiteSource would also be a good answer, but it is not an option here.

  Reference: https://marketplace.visualstudio.com/items?itemName=black-duck-software.hub-tfs

• Question 447:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage a project in Azure DevOps.

  You need to prevent the configuration of the project from changing over time.

  Solution: Perform a Subscription Health scan when packages are created.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead implement Continuous Assurance for the project.

  Note: The Subscription Security health check features in AzSK contains a set of scripts that examines a subscription and flags off security issues, misconfigurations or obsolete artifacts/settings which can put your subscription at higher risk.

  Reference:

  https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

• Question 448:

  You plan to use a NuGet package in a project in Azure DevOps. The NuGet package is in a feed that requires authentication.

  You need to ensure that the project can restore the NuGet package automatically.

  What should the project use to automate the authentication?

  A. an Azure Automation account

  B. an Azure Artifacts Credential Provider

  C. an Azure Active Directory (Azure AD) account that has multi-factor authentication (MFA) enabled

  D. an Azure Active Directory (Azure AD) service principal

  Correct Answer: B

  The Azure Artifacts Credential Provider automates the acquisition of credentials needed to restore NuGet packages as part of your .NET development workflow. It integrates with MSBuild, dotnet, and NuGet(.exe) and works on Windows, Mac, and Linux. Any time you want to use packages from an Azure Artifacts feed, the Credential Provider will automatically acquire and securely store a token on behalf of the NuGet client you're using.

  Reference: https://github.com/Microsoft/artifacts-credprovider

• Question 449:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a project in Azure DevOps for a new web application.

  You need to ensure that when code is checked in, a build runs automatically.

  Solution: From the Triggers tab of the build pipeline, you select Batch changes while a build is in progress.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead, In Visual Designer you enable continuous integration (CI) by:

  1.

  Select the Triggers tab.

  2.

  Enable Continuous integration.

  Note: Batch changes Select this check box if you have many team members uploading changes often and you want to reduce the number of builds you are running. If you select this option, when a build is running, the system waits until the build is completed and then queues another build of all changes that have not yet been built.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/get-started-designer

• Question 450:

  Your company has a release pipeline in an Azure DevOps project.

  You plan to deploy to an Azure Kubernetes Services (AKS) cluster by using the Helm package and deploy task.

  You need to install a service in the AKS namespace for the planned deployment.

  Which service should you install?

  A. Azure Container Registry

  B. Chart

  C. Kubectl

  D. Tiller

  Correct Answer: D

  Before you can deploy Helm in an RBAC-enabled AKS cluster, you need a service account and role binding for the Tiller service. Incorrect Answers:

  C: Kubectl is a command line interface for running commands against Kubernetes clusters.

  Reference: https://docs.microsoft.com/en-us/azure/aks/kubernetes-helm