Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 571:

  SIMULATION

  You need to configure an Azure web app named az400-9940427-main to contain an environmental variable named “MAX_ITEMS”. The environmental variable must have a value of 50.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

  1.

  In the Azure portal, navigate to the az400-9940427-main app's management page. In the app's left menu, click Configuration > Application settings.

  2.

  Click New Application settings

  3.

  Enter the following: Name: MAX_ITEMS Value: 50

  

  References: https://docs.microsoft.com/en-us/azure/app-service/configure-common

• Question 572:

  SIMULATION

  You plane to store signed images in an Azure Container Registry instance named az4009940427acr1.

  You need to modify the SKU for az4009940427acr1 to support the planned images. The solution must minimize costs.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

  1.

  Open Microsoft Azure Portal, and select the Azure Container Registry instance named az4009940427acr1.

  2.

  Under Policies, select Content Trust > Enabled > Save.

  

  References: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-content-trust

• Question 573:

  SIMULATION

  You need to ensure that an Azure web app named az400-9940427-main supports rolling upgrades. The solution must ensure that only 10 percent of users who connect to az400-9940427-main use update versions of the app.

  The solution must minimize administrative effort.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

  Set up staging environments in Azure App Service

  1.

  Open Microsoft Azure Portal

  2.

  Log into your Azure account, select your app's resource page, in the left pane, select Deployment slots > Add Slot.

  3.

  In the Add a slot dialog box, give the slot a name, and select whether to clone an app configuration from another deployment slot. Select Add to continue.

  4.

  After the slot is added, select Close to close the dialog box. The new slot is now shown on the Deployment slots page. By default, Traffic % is set to 0 for the new slot, with all customer traffic routed to the production slot.

  5.

  Select the new deployment slot to open that slot's resource page.

  6.

  Change TRAFFIC % to 10

  

  

  

  References: https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots

• Question 574:

  SIMULATION

  You have an Azure function hosted in an App Service plan named az400-9940427-func1.

  You need to configure az400-9940427-func1 to upgrade the functions automatically whenever new code is committed to the master branch of https://github.com/Azure-Samples/functions-quickstart.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

  1.

  Open Microsoft Azure Portal

  2.

  Log into your Azure account, select App Services in the Azure portal left navigation, and then select configure az400-9940427-func1.

  3.

  On the app page, select Deployment Center in the left menu.

  4.

  On the Build provider page, select Azure Pipelines (Preview), and then select Continue.

  5.

  On the Configure page, in the Code section:

  For GitHub, drop down and select the Organization, Repository, and Branch you want to deploy continuously.

  6.

  Select Continue.

  7.

  On the Test page, choose whether to enable load tests, and then select Continue.

  8.

  Depending on your App Service plan pricing tier, you may see a Deploy to staging page. Choose whether to enable deployment slots, and then select Continue.

  9.

  After you configure the build provider, review the settings on the Summary page, and then select Finish.

  References:

  https://docs.microsoft.com/en-us/azure/app-service/deploy-continuous-deployment

• Question 575:

  SIMULATION

  You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity.

  The solution must use the principle of least privilege.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

  1.

  In Azure portal navigate to the az400-9940427-main app.

  2.

  Scroll down to the Settings group in the left navigation.

  3.

  Select Managed identity.

  4.

  Within the System assigned tab, switch Status to On. Click Save.

  

  References: https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity

• Question 576:

  SIMULATION

  You need to ensure that the https://contoso.com/statushook webhook is called every time a repository named az40010480345acr1 receives a new version of an image named dotnetapp.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

  1.

  Sign in to the Azure portal.

  2.

  Navigate to the container registry az40010480345acr1.

  3.

  Under Services, select Webhooks.

  4.

  Select the existing webhook https://contoso.com/statushook, and double-click on it to get its properties.

  5.

  For Trigger actions select image push

  Example web hook:

  

  Reference: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-webhook

• Question 577:

  SIMULATION

  Your company plans to implement a new compliance strategy that will require all Azure web apps to be backed up every five hours.

  You need to back up an Azure web app named az400-11566895-main every five hours to an Azure Storage account in your resource group.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

• Question 578:

  SIMULATION

  You need to configure a virtual machine named VM1 to securely access stored secrets in an Azure Key Vault named az400-11566895-kv.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

• Question 579:

  SIMULATION

  You need to ensure that Microsoft Visual Studio 2017 can remotely attach to an Azure Function named fa-11566895.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.

• Question 580:

  SIMULATION

  You plan to deploy a runbook that will create Azure AD user accounts.

  You need to ensure that runbooks can run the Azure PowerShell cmdlets for Azure Active Directory.

  To complete this task, sign in to the Microsoft Azure portal.

  Correct Answer: See solution below.