Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 451:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage a project in Azure DevOps.

  You need to prevent the configuration of the project from changing over time.

  Solution: Implement Continuous Assurance for the project.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  The basic idea behind Continuous Assurance (CA) is to setup the ability to check for "drift" from what is considered a secure snapshot of a system. Support for Continuous Assurance lets us treat security truly as a 'state' as opposed to a 'point in time' achievement. This is particularly important in today's context when 'continuous change' has become a norm.

  There can be two types of drift:

  1.

  Drift involving 'baseline' configuration: This involves settings that have a fixed number of possible states (often pre-defined/statically determined ones). For instance, a SQL DB can have TDE encryption turned ON or OFF...or a Storage Account may have auditing turned ON however the log retention period may be less than 365 days.

  2.

  Drift involving 'stateful' configuration: There are settings which cannot be constrained within a finite set of well-known states. For instance, the IP addresses configured to have access to a SQL DB can be any (arbitrary) set of IP addresses. In such scenarios, usually human judgment is initially required to determine whether a particular configuration should be considered 'secure' or not. However, once that is done, it is important to ensure that there is no "stateful drift" from the attested configuration. (E.g., if, in a troubleshooting session, someone adds the IP address of a developer machine to the list, the Continuous Assurance feature should be able to identify the drift and generate notifications/ alerts or even trigger 'auto-remediation' depending on the severity of the change).

  Reference: https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

• Question 452:

  You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure SQL database named DB1.

  You need to create a release pipeline that uses the Azure SQL Database Deployment task to update DB1.

  Which artifact should you deploy?

  A. a BACPAC

  B. a DACPAC

  C. an LDF file

  D. an MDF file

  Correct Answer: B

  Use Azure SQL Database Deployment task in a build or release pipeline to deploy to Azure SQL DB using a DACPAC or run scripts using SQLCMD.

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/deploy/sql-azure-dacpac-deployment

• Question 453:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage a project in Azure DevOps.

  You need to prevent the configuration of the project from changing over time.

  Solution: Add a code coverage step to the build pipelines.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead implement Continuous Assurance for the project.

  Reference: https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

• Question 454:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage a project in Azure DevOps.

  You need to prevent the configuration of the project from changing over time.

  Solution: Implement Continuous Integration for the project.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead implement Continuous Assurance for the project.

  Reference: https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

• Question 455:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:

  1.

  The builds must access an on-premises dependency management system.

  2.

  The build outputs must be stored as Server artifacts in Azure DevOps.

  3.

  The source code must be stored in a Git repository in Azure DevOps.

  Solution: Configure the build pipeline to use a Hosted Ubuntu agent pool. Include the Java Tool Installer task in the build pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead use Octopus Tentacle.

  Reference: https://explore.emtecinc.com/blog/octopus-for-automated-deployment-in-devops-models

• Question 456:

  Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.

  You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.

  What should you use?

  A. SourceGear Vault

  B. Jenkins

  C. Microsoft Visual SourceSafe

  D. WhiteSource Bolt

  Correct Answer: D

  WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server.

  Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.

  Reference: https://www.azuredevopslabs.com/labs/vstsextend/whitesource/

• Question 457:

  Note: This Question Is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to ft. As a result these questions will not appear in the review screen.

  You company has a prefect in Azure DevOps for a new web application.

  You need to ensure that when code is checked in, a build runs automatically.

  Solution: From the Triggers tab of the build pipeline, you selected Batch changes while a build is in progress

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 458:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:

  1.

  The builds must access an on-premises dependency management system.

  2.

  The build outputs must be stored as Server artifacts in Azure DevOps.

  3.

  The source code must be stored in a Git repository in Azure DevOps.

  Solution: Configure the build pipeline to use a Hosted VS 2017 agent pool. Include the Java Tool Installer task in the build pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead use Octopus Tentacle.

  References: https://explore.emtecinc.com/blog/octopus-for-automated-deployment-in-devops-models

• Question 459:

  You are designing the development process for your company.

  You need to recommend a solution for continuous inspection of the company's code base to locate common code patterns that are known to be problematic.

  What should you include in the recommendation?

  A. Microsoft Visual Studio test plans

  B. Gradle wrapper scripts

  C. SonarCloud analysis

  D. the JavaScript task runner

  Correct Answer: C

  SonarCloud is a cloud service offered by SonarSource and based on SonarQube. SonarQube is a widely adopted open source platform to inspect continuously the quality of source code and detect bugs, vulnerabilities and code smells in

  more than 20 different languages.

  Note: The SonarCloud Azure DevOps extension brings everything you need to have your projects analyzed on SonarCloud very quickly.

  Incorrect Answers:

  A: Test plans are used to group together test suites and individual test cases. This includes static test suites, requirement-based suites, and query-based suites.

  References: https://docs.travis-ci.com/user/sonarcloud/ https://sonarcloud.io/documentation/integrations/vsts/

• Question 460:

  Your team uses an agile development approach.

  You need to recommend a branching strategy for the team's Git repository. The strategy must meet the following requirements.

  1.

  Provide the ability to work on multiple independent tasks in parallel.

  2.

  Ensure that checked-in code remains in a releasable state always.

  3.

  Ensure that new features can be abandoned at any time.

  4.

  Encourage experimentation. What should you recommend?

  A. a single long-running branch

  B. multiple long-running branches

  C. a single fork per team member

  D. a single-running branch with multiple short-lived topic branches

  Correct Answer: D

  Topic branches, however, are useful in projects of any size. A topic branch is a short-lived branch that you create and use for a single particular feature or related work. This is something you've likely never done with a VCS before because it's generally too expensive to create and merge branches. But in Git it's common to create, work on, merge, and delete branches several times a day.

  Reference: https://git-scm.com/book/en/v2/Git-Branching-Branching-Workflows