Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 491:

  You need to recommend a Docker container build strategy that meets the following requirements:

  1.

  Minimizes image sizes

  2.

  Minimizes the security surface area of the final image What should you include in the recommendation?

  A. multi-stage builds

  B. PowerShell Desired State Configuration (DSC)

  C. Docker Swarm

  D. single-stage builds

  Correct Answer: A

  Multi-stage builds are a new feature requiring Docker 17.05 or higher on the daemon and client. Multistage builds are useful to anyone who has struggled to optimize Dockerfiles while keeping them easy to read and maintain. Incorrect Answers:

  C: A swarm consists of multiple Docker hosts which run in swarm mode and act as managers (to manage membership and delegation) and workers (which run swarm services). References: https://docs.docker.com/develop/develop-images/multistage-build/

• Question 492:

  You have 50 Node.js-based projects that you scan by using WhiteSource. Each project includes Package.json, Package-lock.json, and Npm-shrinkwrap.json files.

  You need to minimize the number of libraries reports by WhiteSource to only the libraries that you explicitly reference. What should you do?

  A. Configure the File System Agent plug-in.

  B. Add a devDependencies section to Package-lock.json.

  C. Configure the Artifactory plug-in.

  D. Delete Package-lock.json.

  Correct Answer: B

  Separate Your Dependencies

  Within your package.json file be sure you split out your npm dependencies between devDependencies and (production) dependencies. The key part is that you must then make use of the --production flag when installing the npm packages.

  The --production flag will exclude all packages defined in the devDependencies section.

  References: https://blogs.msdn.microsoft.com/visualstudioalmrangers/2017/06/08/manage-your-open-source-usage-and-security-as-reported-by-your-cicd-pipeline/

• Question 493:

  Your company hosts a web application in Azure. The company uses Azure Pipelines for the build and release management of the application.

  Stakeholders report that the past few releases have negatively affected system performance.

  You configure alerts in Azure Monitor.

  You need to ensure that new releases are only deployed to production if the releases meet defined performance baseline criteria in the staging environment first.

  What should you use to prevent the deployment of releases that fall to meet the performance baseline?

  A. an Azure Scheduler job

  B. a trigger

  C. a gate

  D. an Azure function

  Correct Answer: C

  Scenarios and use cases for gates include:

  1. Quality validation. Query metrics from tests on the build artifacts such as pass rate or code coverage and deploy only if they are within required thresholds.

  Use Quality Gates to integrate monitoring into your pre-deployment or post-deployment. This ensures that you are meeting the key health/performance metrics (KPIs) as your applications move from dev to production and any differences in the infrastructure environment or scale is not negatively impacting your KPIs.

  Note: Gates allow automatic collection of health signals from external services, and then promote the release when all the signals are successful at the same time or stop the deployment on timeout. Typically, gates are used in connection with incident management, problem management, change management, monitoring, and external approval systems.

  References: https://docs.microsoft.com/en-us/azure/azure-monitor/continuous-monitoring https://docs.microsoft.com/en-us/azure/devops/pipelines/release/approvals/gates?view=azure-devops

• Question 494:

  This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others

  might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure DevOps project.

  Your build process creates several artifacts.

  You need to deploy the artifacts to on-premises servers.

  Solution: You deploy an Azure self-hosted agent to an on-premises server. You add a Copy and Publish Build Artifacts task to the deployment pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  To build your code or deploy your software using Azure Pipelines, you need at least one agent.

  If your on-premises environments do not have connectivity to a Microsoft-hosted agent pool (which is typically the case due to intermediate firewalls), you'll need to manually configure a self-hosted agent on on-premises computer(s). The agents must have connectivity to the target on-premises environments, and access to the Internet to connect to Azure Pipelines or Team Foundation Server.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops

• Question 495:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure DevOps project.

  Your build process creates several artifacts.

  You need to deploy the artifacts to on-premises servers.

  Solution: You deploy a Docker build to an on-premises server. You add a Download Build Artifacts task to the deployment pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead you should deploy an Azure self-hosted agent to an on-premises server.

  Note: To build your code or deploy your software using Azure Pipelines, you need at least one agent.

  If your on-premises environments do not have connectivity to a Microsoft-hosted agent pool (which is typically the case due to intermediate firewalls), you'll need to manually configure a self-hosted agent on on-premises computer(s).

  References:

  https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops

• Question 496:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure DevOps project.

  Your build process creates several artifacts.

  You need to deploy the artifacts to on-premises servers.

  Solution: You deploy a Kubernetes cluster on-premises. You deploy a Helm agent to the cluster. You add a Download Build Artifacts task to the deployment pipeline.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead you should deploy an Azure self-hosted agent to an on-premises server.

  Note: To build your code or deploy your software using Azure Pipelines, you need at least one agent.

  If your on-premises environments do not have connectivity to a Microsoft-hosted agent pool (which is typically the case due to intermediate firewalls), you'll need to manually configure a self-hosted agent on on-premises computer(s).

  Note 2: As we [Microsoft] are launching this new experience in preview, we are currently optimizing it for Azure Kubernetes Service (AKS) and Azure Container Registry (ACR). Other Kubernetes clusters, for example running on-premises or

  in other clouds, as well as other container registries, can be used, but require setting up a Service Account and connection manually.

  References:

  https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops

• Question 497:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources:

  1.

  Two resource groups

  2.

  Four Azure virtual machines in one resource group

  3.

  Two Azure SQL databases in other resource group

  You need to recommend a solution to deploy the resources.

  Solution: Create two standalone templates, each of which will deploy the resources in its respective group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Use a main template and two linked templates.

  References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-linked-templates

• Question 498:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources:

  1.

  Two resource groups

  2.

  Four Azure virtual machines in one resource group

  3.

  Two Azure SQL databases in other resource group

  You need to recommend a solution to deploy the resources.

  Solution: Create a single standalone template that will deploy all the resources.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Use two templates, one for each resource group, and link the templates.

  References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-linked-templates

• Question 499:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed.

  You have a policy stating that approvals must occur within eight hours.

  You discover that deployment fail if the approvals take longer than two hours.

  You need to ensure that the deployments only fail if the approvals take longer than eight hours.

  Solution: From Post-deployment conditions, you modify the Timeout setting for post-deployment approvals.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Use Pre-deployments conditions instead. Use a gate instead of an approval instead.

  References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/approvals/gates

• Question 500:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed.

  You have a policy stating that approvals must occur within eight hours.

  You discover that deployment fail if the approvals take longer than two hours.

  You need to ensure that the deployments only fail if the approvals take longer than eight hours.

  Solution: From Pre-deployment conditions, you modify the Timeout setting for pre-deployment approvals.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A