Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 471:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment.

  You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos.

  Solution: You create an email subscription to an Azure DevOps notification.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You can create a service hook for Azure DevOps Services and TFS with Jenkins.

  References: https://docs.microsoft.com/en-us/azure/devops/service-hooks/services/jenkins

• Question 472:

  Your company uses cloud-hosted Jenkins for builds.

  You need to ensure that Jenkins can retrieve source code from Azure Repos.

  Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Create a webhook in Jenkins.

  B. Add the Team Foundation Server (TFS) plug-in to Jenkins.

  C. Add a personal access token to your Jenkins account.

  D. Create a personal access token (PAT) in your Azure DevOps account.

  E. Create a service hook in Azure DevOps.

  Correct Answer: CDE

  https://learn.microsoft.com/en-us/azure/devops/service-hooks/services/jenkins?view=azure-devops

• Question 473:

  Your company uses a Git repository in Azure Repos to manage the source code of a web application. The master branch is protected from direct updates. Developers work on new features in the topic branches.

  Because of the high volume of requested features, it is difficult to follow the history of the changes to the master branch.

  You need to enforce a pull request merge strategy. The strategy must meet the following requirements:

  1.

  Consolidate commit histories.

  2.

  Merge the changes into a single commit.

  Which merge strategy should you use in the branch policy?

  A. squash merge

  B. fast-forward merge

  C. Git fetch

  D. no-fast-forward merge

  Correct Answer: A

  Squash merging is a merge option that allows you to condense the Git history of topic branches when you complete a pull request. Instead of each commit on the topic branch being added to the history of the default branch, a squash merge takes all the file changes and adds them to a single new commit on the default branch.

  A simple way to think about this is that squash merge gives you just the file changes, and a regular merge gives you the file changes and the commit history.

  Note: Squash merging keeps your default branch histories clean and easy to follow without demanding any workflow changes on your team. Contributors to the topic branch work how they want in the topic branch, and the default branches keep a linear history through the use of squash merges. The commit history of a master branch updated with squash merges will have one commit for each merged branch. You can step through this history commit by commit to find out exactly when work was done.

  References: https://docs.microsoft.com/en-us/azure/devops/repos/git/merging-with-squash

• Question 474:

  You have a branch policy in a project in Azure DevOps. The policy requires that code always builds successfully.

  You need to ensure that a specific user can always merge changes to the master branch, even if the code fails to compile. The solution must use the principle of least privilege.

  What should you do?

  A. Add the user to the Build Administrators group.

  B. Add the user to the Project Administrators group.

  C. From the Security settings of the repository, modify the access control for the user.

  D. From the Security settings of the branch, modify the access control for the user.

  Correct Answer: D

  In some cases, you need to bypass policy requirements so you can push changes to the branch directly or complete a pull request even if branch policies are not satisfied. For these situations, grant the desired permission from the previous list to a user or group. You can scope this permission to an entire project, a repo, or a single branch. Manage this permission along the with other Git permissions.

  References: https://docs.microsoft.com/en-us/azure/devops/repos/git/branch-policies

• Question 475:

  Your company is building a new solution in Java.

  The company currently uses a SonarQube server to analyze the code of .NET solutions.

  You need to analyze and monitor the code quality of the Java solution.

  Which task types should you add to the build pipeline?

  A. Grunt

  B. Chef

  C. Maven

  D. Gulp

  Correct Answer: C

  SonarQube is a set of static analyzers that can be used to identify areas of improvement in your code. It allows you to analyze the technical debt in your project and keep track of it in the future. With Maven and Gradle build tasks, you can run SonarQube analysis with minimal setup in a new or existing Azure DevOps Services build task.

  References: https://docs.microsoft.com/en-us/azure/devops/java/sonarqube?view=azure-devops

• Question 476:

  Your company builds a multi-tier web application.

  You use Azure DevOps and host the production application on Azure virtual machines.

  Your team prepares an Azure Resource Manager template of the virtual machine that you will use to test new features.

  You need to create a staging environment in Azure that meets the following requirements:

  1.

  Minimizes the cost of Azure hosting

  2.

  Provisions the virtual machines automatically

  3.

  Uses the custom Azure Resource Manager template to provision the virtual machines What should you do?

  A. In Azure Cloud Shell, run Azure CLI commands to create and delete the new virtual machines in a staging resource group.

  B. In Azure DevOps, configure new tasks in the release pipeline to deploy to Azure Cloud Services.

  C. From Azure Cloud Shell, run Azure PowerShell commands to create and delete the new virtual machines in a staging resource group.

  D. In Azure DevOps, configure new tasks in the release pipeline to create and delete the virtual machines in Azure DevTest Labs.

  Correct Answer: D

  You can use the Azure DevTest Labs Tasks extension that's installed in Azure DevOps to easily integrate your CI/CD build-and-release pipeline with Azure DevTest Labs. The extension installs three tasks:

  1.

  Create a VM

  2.

  Create a custom image from a VM

  3.

  Delete a VM The process makes it easy to, for example, quickly deploy a "golden image" for a specific test task and then delete it when the test is finished. References: https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-integrate-ci-cd-vsts

• Question 477:

  Your company develops a client banking application that processes a large volume of data.

  Code quality is an ongoing issue for the company. Recently, the code quality has deteriorated because of an increase in time pressure on the development team.

  You need to implement static code analysis.

  During which phase should you use static code analysis?

  A. integration testing

  B. staging

  C. production release

  D. build

  Correct Answer: D

  The Secure Development Lifecycle (SDL) Guidelines recommend that teams perform static analysis during the implementation phase of their development cycle.

  Note: The company should focus in particular on the implementation of DevOps tests to assess the quality of the software from the planning stage to the implementation phase of the project.

  References:

  https://secdevtools.azurewebsites.net/

• Question 478:

  Your company is building a new solution in Java.

  The company currently uses a SonarQube server to analyze the code of .NET solutions.

  You need to analyze and monitor the code quality of the Java solution.

  Which task types should you add to the build pipeline?

  A. Chef

  B. Gradle

  C. Octopus

  D. Gulp

  Correct Answer: C

  SonarQube is a set of static analyzers that can be used to identify areas of improvement in your code. It allows you to analyze the technical debt in your project and keep track of it in the future. With Maven and Gradle build tasks, you can run SonarQube analysis with minimal setup in a new or existing Azure DevOps Services build task.

  References: https://docs.microsoft.com/en-us/azure/devops/java/sonarqube?view=azure-devops

• Question 479:

  You have an Azure DevOps organization named Contoso and an Azure DevOps project named Project1.

  You plan to use Microsoft-hosted agents to build container images that will host full Microsoft .NET Framework apps in a YAML pipeline in Project1.

  What are two possible virtual machine images that you can use for the Microsoft-hosted agent pool? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. vs2017-win2016

  B. ubuntu-16.04

  C. win1803

  D. macOS-10.13

  E. vs.2015-win2012r2

  Correct Answer: AB

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops

• Question 480:

  Your company has a project in Azure DevOps.

  You need to ensure that when there are multiple builds pending deployment, only the most recent build is deployed.

  What should you use?

  A. deployment conditions

  B. deployment queue settings

  C. release gates

  D. pull request triggers

  Correct Answer: B

  The options you can choose for a queuing policy are:

  1.

  Number of parallel deployments

  2.

  If you specify a maximum number of deployments, two more options appear:

  -Deploy all in sequence

  - Deploy latest and cancel the others: Use this option if you are producing releases faster than builds, and you only want to deploy the latest build. Incorrect Answers:

  C: Release gates allow automatic collection of health signals from external services, and then promote the release when all the signals are successful at the same time or stop the deployment on timeout. Typically, gates are used in connection with incident management, problem management, change management, monitoring, and external approval systems.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/process/stages?tabs=classicandview=azure-devops#queuing-policies