Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 481:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a project in Azure DevOps for a new web application.

  You need to ensure that when code is checked in, a build runs automatically.

  Solution: From the Triggers tab of the build pipeline, you select Enable continuous integration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  In Visual Designer you enable continuous integration (CI) by:

  1.

  Select the Triggers tab.

  2.

  Enable Continuous integration.

  A continuous integration trigger on a build pipeline indicates that the system should automatically queue a new build whenever a code change is committed.

  References:

  https://docs.microsoft.com/en-us/azure/devops/pipelines/get-started-designer

• Question 482:

  You have a project in Azure DevOps. You have an Azure Resource Group deployment project in Microsoft Visual Studio that is checked in to the Azure DevOps project.

  You need to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The solution must minimize administrative effort.

  Which task type should you include in the solution?

  A. Azure Cloud Service Deployment

  B. Azure RM Web App Deployment

  C. Azure PowerShell

  D. Azure App Service Manage

  Correct Answer: C

  There are two different ways to deploy templates to Azure DevOps Services. Both methods provide the same results, so choose the one that best fits your workflow.

  1.

  Add a single step to your build pipeline that runs the PowerShell script that's included in the Azure Resource Group deployment project (Deploy-AzureResourceGroup.ps1). The script copies artifacts and then deploys the template.

  2.

  Add multiple Azure DevOps Services build steps, each one performing a stage task.

  The first option has the advantage of using the same script used by developers in Visual Studio and providing consistency throughout the lifecycle.

  References:

  https://docs.microsoft.com/en-us/azure/vs-azure-tools-resource-groups-ci-in-vsts

• Question 483:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a project in Azure DevOps for a new web application.

  You need to ensure that when code is checked in, a build runs automatically.

  Solution: From the Pre-deployment conditions settings of the release pipeline, you select After stage.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead, In Visual Designer you enable continuous integration (CI) by:

  1.

  Select the Triggers tab.

  2.

  Enable Continuous integration.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/get-started-designer

• Question 484:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a project in Azure DevOps for a new web application.

  You need to ensure that when code is checked in, a build runs automatically.

  Solution: From the Pre-deployment conditions settings of the release pipeline, you select Batch changes while a build is in progress.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead, In Visual Designer you enable continuous integration (CI) by:

  1.

  Select the Triggers tab.

  2.

  Enable Continuous integration.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/get-started-designer

• Question 485:

  You plan to create an image that will contain a .NET Core application.

  You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)

  

  You need to ensure that the image is as small as possible when the image is built. Which line should you modify in the file?

  A. 1

  B. 3

  C. 4

  D. 7

  Correct Answer: C

  https://github.com/dotnet/dotnet-docker/blob/master/samples/dotnetapp/README.md

• Question 486:

  You are developing an open source solution that uses a GitHub repository.

  You create a new public project in Azure DevOps.

  You plan to use Azure Pipelines for continuous build. The solution will use the GitHub Checks API.

  Which authentication type should you use?

  A. OAuth

  B. GitHub App

  C. a personal access token

  D. SAML

  Correct Answer: B

  You can authenticate as a GitHub App.

  References: https://developer.github.com/apps/building-github-apps/authenticating-with-github-apps/

• Question 487:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a project in Azure DevOps for a new web application.

  You need to ensure that when code is checked in, a build runs automatically.

  Solution: From the Continuous deployment trigger settings of the release pipeline, you enable the Pull request trigger setting.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  In Visual Designer you enable continuous integration (CI) by:

  1.

  Select the Triggers tab.

  2.

  Enable Continuous integration.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/get-started-designer

• Question 488:

  Your company deploys applications in Docker containers.

  You want to detect known exploits in the Docker images used to provision the Docker containers.

  You need to integrate image scanning into the application lifecycle. The solution must expose the exploits as early as possible during the application lifecycle.

  What should you configure?

  A. a task executed in the continuous integration pipeline and a scheduled task that analyzes the image registry

  B. manual tasks performed during the planning phase and the deployment phase

  C. a task executed in the continuous deployment pipeline and a scheduled task against a running production container

  D. a task executed in the continuous integration pipeline and a scheduled task that analyzes the production container

  Correct Answer: A

  You can use the Docker task to sign into ACR and then use a subsequent script to pull an image and scan the container image for vulnerabilities. Use the docker task in a build or release pipeline. This task can be used with Docker or Azure Container registry.

  Incorrect Answers:

  C: We should not wait until deployment. We want to detect the exploits as early as possible.

  D: We should wait until the image is in the product container. We want to detect the exploits as early as possible. References: https://docs.microsoft.com/en-us/azure/devops/articles/security-validation-cicd-pipeline?view=vsts

• Question 489:

  Your company uses Azure DevOps for the build pipelines and deployment pipelines of Java-based projects.

  You need to recommend a strategy for managing technical debt.

  Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Configure post-deployment approvals in the deployment pipeline.

  B. Configure pre-deployment approvals in the deployment pipeline.

  C. Integrate Azure DevOps and SonarQube.

  D. Integrate Azure DevOps and Azure DevTest Labs.

  Correct Answer: BC

  B: With SonarQube pre-approval, you can set quality gate.

  C: You can manage technical debt with SonarQube and Azure DevOps.

  Note: Technical debt is the set of problems in a development effort that make forward progress on customer value inefficient. Technical debt saps productivity by making code hard to understand, fragile, time-consuming to change, difficult to validate, and creates unplanned work that blocks progress. Unless they are managed, technical debt can accumulate and hurt the overall quality of the software and the productivity of the development team in the long term SonarQube an open source platform for continuous inspection of code quality to perform automatic reviews with static analysis of code to:

  1.

  Detect Bugs

  2.

  Code Smells

  3.

  Security Vulnerabilities

  4.

  Centralize Quality

  5.

  What's covered in this lab

  Reference: https://azuredevopslabs.com/labs/vstsextend/sonarqube/

• Question 490:

  Your company has a hybrid cloud between Azure and Azure Stack.

  The company uses Azure DevOps for its full CI/CD pipelines. Some applications are built by using Erlang and Hack.

  You need to ensure that Erlang and Hack are supported as part of the build strategy across the hybrid cloud. The solution must minimize management overhead.

  What should you use to execute the build pipeline?

  A. a Microsoft-hosted agent

  B. Azure DevOps self-hosted agents on Azure DevTest Labs virtual machines.

  C. Azure DevOps self-hosted agents on Hyper-V virtual machines

  D. Azure DevOps self-hosted agents on virtual machines that run on Azure Stack

  Correct Answer: D

  Azure Stack offers virtual machines (VMs) as one type of an on-demand, scalable computing resource. You can choose a VM when you need more control over the computing environment. References: https://docs.microsoft.com/en-us/azure/azure-stack/user/azure-stack-compute-overview