Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 461:

  Your company has a project in Azure DevOps for a new web application.

  The company identifies security as one of the highest priorities.

  You need to recommend a solution to minimize the likelihood that infrastructure credentials will be leaked.

  What should you recommend?

  A. Add a Run Inline Azure PowerShell task to the pipeline.

  B. Add a PowerShell task to the pipeline and run Set-AzureKeyVaultSecret.

  C. Add a Azurre Key Vault task to the pipeline.

  D. Add Azure Key Vault references to Azure Resource Manger templates.

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/powershell/module/azurerm.keyvault/set-azurekeyvaultsecret

• Question 462:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:

  1.

  The builds must access an on-premises dependency management system.

  2.

  The build outputs must be stored as Server artifacts in Azure DevOps.

  3.

  The source code must be stored in a Git repository in Azure DevOps.

  Solution: Configure an Octopus Tentacle on an on-premises machine. Use the Package Application task in the build pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  References: https://octopus.com/docs/deployment-examples/package-deployments https://explore.emtecinc.com/blog/octopus-for-automated-deployment-in-devops-models

• Question 463:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:

  1.

  The builds must access an on-premises dependency management system.

  2.

  The build outputs must be stored as Server artifacts in Azure DevOps.

  3.

  The source code must be stored in a Git repository in Azure DevOps.

  Solution: Install and configure a self-hosted build agent on an on-premises machine. Configure the build pipeline to use the Default agent pool. Include the Java Tool Installer task in the build pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  References: https://explore.emtecinc.com/blog/octopus-for-automated-deployment-in-devops-models

• Question 464:

  You are automating the testing process for your company. You need to automate UI testing of a web application. Which framework should you use?

  A. JaCoco

  B. Selenium

  C. Xamarin.UITest

  D. Microsoft.CodeAnalysis

  Correct Answer: B

  Performing user interface (UI) testing as part of the release pipeline is a great way of detecting unexpected changes, and need not be difficult. Selenium can be used to test your website during a continuous deployment release and test automation.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/test/continuous-test-selenium?view=azure-devops

• Question 465:

  You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1.

  You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines.

  What should you do?

  A. Create a variable group in Project1.

  B. Add a secure file to Project1.

  C. Modify the security settings of the pipelines.

  D. Configure the security policy of Contoso.

  Correct Answer: A

  Use a variable group to store values that you want to control and make available across multiple pipelines.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups

• Question 466:

  You are automating the build process for a Java-based application by using Azure DevOps.

  You need to add code coverage testing and publish the outcomes to the pipeline.

  What should you use?

  A. Cobertura

  B. Bullseye Coverage

  C. MSTest

  D. Coverlet

  E. NUnit

  F. Coverage.py

  Correct Answer: A

  Use Publish Code Coverage Results task in a build pipeline to publish code coverage results to Azure Pipelines or TFS, which were produced by a build in Cobertura or JaCoCo format.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/test/publish-code-coverage-results

• Question 467:

  Your company uses Azure DevOps.

  Only users who have accounts in Azure Active Directory can access the Azure DevOps environment.

  You need to ensure that only devices that are connected to the on-premises network can access the Azure DevOps environment.

  What should you do?

  A. Assign the Stakeholder access level all users.

  B. In Azure Active Directory, configure risky sign-ins.

  C. In Azure DevOps, configure Security in Project Settings.

  D. In Azure Active Directory, configure conditional access.

  Correct Answer: D

  Conditional Access is a capability of Azure Active Directory. With Conditional Access, you can implement automated access control decisions for accessing your cloud apps that are based on conditions.

  Conditional Access policies are enforced after the first-factor authentication has been completed.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

• Question 468:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment.

  You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos.

  Solution: You create a service hook subscription that uses the code pushed event.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  You can create a service hook for Azure DevOps Services and TFS with Jenkins.

  References: https://docs.microsoft.com/en-us/azure/devops/service-hooks/services/jenkins

• Question 469:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment.

  You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos.

  Solution: You add a trigger to the build pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You can create a service hook for Azure DevOps Services and TFS with Jenkins.

  References: https://docs.microsoft.com/en-us/azure/devops/service-hooks/services/jenkins

• Question 470:

  You have an Azure Resource Manager template that deploys a multi-tier application.

  You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application.

  What should you use?

  A. Azure Key Vault

  B. a Web.config file

  C. an Appsettings.json file

  D. an Azure Storage table

  E. an Azure Resource Manager parameter file

  Correct Answer: A

  When you need to pass a secure value (like a password) as a parameter during deployment, you can retrieve the value from an Azure Key Vault. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID. The key vault can exist in a different subscription than the resource group you are deploying to.

  References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault-parameter