Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 531:

  You need to meet the technical requirements for controlling access to Azure DevOps. What should you use?

  A. Azure Multi-Factor Authentication (MFA)

  B. on-premises firewall rules

  C. conditional access policies in Azure AD

  D. Azure role-based access control (Azure RBAC)

  Correct Answer: C

  Scenario: Access to Azure DevOps must be restricted to specific IP addresses.

  Azure DevOps is authenticated through Azure Active Directory. You can use Azure AD's conditional access to prevent logins from certain geographies and address ranges.

  Reference:

  https://www.rebeladmin.com/2018/08/step-step-guide-configure-location-based-conditionalaccess-policies/

• Question 532:

  In Azure DevOps, you create Project3.

  You need to meet the requirements of the project.

  What should you do first?

  A. From Azure DevOps, modify the build definition.

  B. From SonarQube, obtain an authentication token.

  C. From Azure DevOps, create a service endpoint.

  D. From SonarQube, create a project.

  Correct Answer: C

  The first thing to do is to declare your SonarQube server as a service endpoint in your VSTS/DevOps project settings. References: https://docs.sonarqube.org/display/SCAN/Analyzing+with+SonarQube+Extension+for+vsts-TFS

• Question 533:

  You need to implement Project4. What should you do first?

  A. Add the FROM instruction in the Dockerfile file.

  B. Add a Copy and Publish Build Artifacts task to the build pipeline.

  C. Add a Docker task to the build pipeline.

  D. Add the MAINTAINER instruction in the Dockerfile file.

  Correct Answer: C

  Scenario: Implement Project4 and configure the project to push Docker images to Azure Container Registry.

  

  You use Azure Container Registry Tasks commands to quickly build, push, and run a Docker container image natively within Azure, showing how to offload your "inner-loop" development cycle to the cloud. ACR Tasks is a suite of features within Azure Container Registry to help you manage and modify container images across the container lifecycle.

  References: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-quickstart-task-cli

• Question 534:

  You need to configure Azure Pipelines to control App2 builds. Which authentication method should you use?

  A. Windows NTLM

  B. certificate

  C. SAML

  D. personal access token (PAT)

  Correct Answer: D

  Scenario: Deploy App2 to an Azure virtual machine named VM1.

  A personal access token (PAT) is used as an alternate password to authenticate into Azure DevOps.

  Reference:

  https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/use-personalaccess-tokens-to-authenticate

• Question 535:

  You have Azure Pipelines and GitHub integrated as a source code repository. The build pipeline has continuous integration enabled.

  You plan to trigger an automated build whenever code changes are committed to the repository. You need to ensure that the system will wait until a build completes before queuing another build. What should you implement?

  A. path filters

  B. batch changes

  C. scheduled builds

  D. branch filters

  Correct Answer: B

  Batching CI runs

  If you have many team members uploading changes often, you may want to reduce the number of runs you start. If you set batch to true, when a pipeline is running, the system waits until the run is completed, then starts another run with all

  changes that have not yet been built.

  Example:

  # specific branch build with batching

  trigger:

  batch: true

  branches:

  include:

  -master

  To clarify this example, let us say that a push A to master caused the above pipeline to run. While that pipeline is running, additional pushes B and C occur into the repository. These updates do not start new independent runs immediately. But after the first run is completed, all pushes until that point of time are batched together and a new run is started.

  Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/repos/github

• Question 536:

  To resolve the current technical issue, what should you do to the Register-AzureRmAutomationDscNode command?

  A. Change the value of the ConfigurationMode parameter.

  B. Replace the Register-AzureRmAutomationDscNode cmdlet with Register-AzureRmAutomationScheduledRunbook

  C. Add the AllowModuleOverwrite parameter.

  D. Add the DefaultProfile parameter.

  Correct Answer: A

  Change the ConfigurationMode parameter from ApplyOnly to ApplyAndAutocorrect.

  The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State Configuration (DSC) node in an Azure Automation account.

  Scenario: Current Technical Issue

  The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration fails to correct the configurations.

  Azure Automation State Configuration nodes are registered by using the following command.

  

  References: https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/register-azurermautomationdscnode?view=azurermps-6.13.0

• Question 537:

  You add the virtual machines as managed nodes in Azure Automation State Configuration.

  You need to configure the computers in Pool7.

  What should you do?

  A. Modify the RefreshMode property of the Local Configuration Manager (LCM).

  B. Run the Register-AzureRmAutomationDscNode Azure Powershell cmdlet.

  C. Modify the ConfigurationMode property of the Local Configuration Manager (LCM)

  D. Install PowerShell Core.

  Correct Answer: C

• Question 538:

  You are using GitHub as a source code repository.

  You create a client-side Git hook on the commit-msg event. The hook requires that each commit message contain a custom work item tag.

  You need to make a commit that does not have a work item tag.

  Which git commit parameter should you use?

  A. --squash

  B. --no-verify

  C. --message ''

  D. --no-post-rewrite

  Correct Answer: B

  The commit-msg hook is invoked by git-commit and git-merge, and can be bypassed with the --no-verify option.

  Reference: https://git-scm.com/docs/githooks

• Question 539:

  What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite?

  A. a trigger

  B. a pre-deployment approval

  C. a post-deployment approval

  D. a deployment gate

  Correct Answer: D

• Question 540:

  You have a project in Azure DevOps.

  You plan to deploy a self-hosted agent by using an unattended configuration script.

  Which two values should you define in the configuration script? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. authorization credentials

  B. the project name

  C. the deployment group name

  D. the organization URL

  E. the agent pool name

  Correct Answer: AD

  Unattended config:

  The agent can be set up from a script with no human intervention. You must pass --unattended and the answers to all questions.

  To configure an agent, it must know the URL to your organization or collection and credentials of someone authorized to set up agents. All other responses are optional.

  Reference:

  https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/v2-windows