Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 61:

  DRAG DROP

  You have several Azure virtual machines that run Windows Server 2019.

  You need to identify the distinct event IDs of each virtual machine as shown in the following table.

  

  How should you complete the Azure Monitor query? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to

  view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  You can use makelist to pivot data by the order of values in a particular column. For example, you may want to explore the most common order events take place on your machines. You can essentially pivot the data by the order of EventIDs on each machine.

  Example: Event | where TimeGenerated > ago(12h) | order by TimeGenerated desc | summarize makelist(EventID) by Computer

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/advanced-aggregations

• Question 62:

  DRAG DROP

  You are deploying a new application that uses Azure virtual machines.

  You plan to use the Desired State Configuration (DSC) extension on the virtual machines.

  You need to ensure that the virtual machines always have the same Windows feature installed.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Create a PowerShell configuration file

  You create a simple PowerShell DSC configuration file.

  Step 2: Load the file to Azure Blob storage

  Package and publish the module to a publically accessible blob container URL

  Step 3: Configure the Custom Script Extension on the virtual machines.

  The Custom Script Extension downloads and executes scripts on Azure virtual machines.

  Reference:

  https://docs.microsoft.com/en-us/azure/automation/automation-dsc-getting-started

  https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-windows

• Question 63:

  DRAG DROP

  You manage the Git repository for a large enterprise application.

  During the development of the application, you use a file named Config.json.

  You need to prevent Config.json from being committed to the source control whenever changes to the application are committed.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Delete and recreate the repository.

  Step 2: Add Config.json to the .gitignore file

  Each line in the .gitignore excludes a file or set of files that match a pattern.

  Example:

  # ignore a single file

  Config.json

  Step 3: Run the git add .gitignore command

  At the initial commit we want basically move from Untracked to Staged, for staging we have to indicate which file we want to move or specify a pattern, as example:

  Reference:

  http://hermit.no/how-to-find-the-best-gitignore-for-visual-studio-and-azure-devops/

  https://geohernandez.net/how-to-add-an-existing-repository-into-azure-devops-repo-with-git/

• Question 64:

  DRAG DROP

  You are building an application that has the following assets:

  1.

  Source code

  2.

  Logs from automated tests and builds

  3.

  Large and frequently updated binary assets

  4.

  A common library used by multiple applications

  Where should you store each asset? To answer, drag the appropriate Azure services to the correct assets. Each service may be used once. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Azure Repos

  Box 2: Azure Artifacts

  Use Azure Artifacts to create, host, and share packages with your team.

  Box 3: Azure Pipelines

  In the pipeline view you can see all the stages and associated tests. The view provides a summary of the test results

  Box 4: Azure Storage

  Reference:

  https://docs.microsoft.com/en-us/azure/devops/repos/get-started/what-is-repos

  https://azure.microsoft.com/en-us/services/devops/artifacts/

  https://docs.microsoft.com/en-us/azure/devops/pipelines/test/review-continuous-test-results-after-build

• Question 65:

  DRAG DROP

  You are creating a container for an ASP.NET Core app.

  You need to create a Dockerfile file to build the image. The solution must ensure that the size of the image is minimized.

  How should you configure the file? To answer, drag the appropriate values to the correct targets. Each value must be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: microsoft.com/dotnet/sdk:2.3

  The first group of lines declares from which base image we will use to build our container on top of. If the local system does not have this image already, then docker will automatically try and fetch it. The mcr.microsoft.com/dotnet/core/sdk:2.1

  comes packaged with the .NET core 2.1 SDK installed, so it's up to the task of building ASP .NET core projects targeting version 2.1

  Box 2: dotnet restore

  The next instruction changes the working directory in our container to be /app, so all commands following this one execute under this context.

  COPY *.csproj ./

  RUN dotnet restore

  Box 3: microsoft.com/dotnet/2.2-aspnetcore-runtime

  When building container images, it's good practice to include only the production payload and its dependencies in the container image. We don't want the .NET core SDK included in our final image because we only need the .NET core

  runtime, so the dockerfile is written to use a temporary container that is packaged with the SDK called build-env to build the app.

  Reference: https://docs.microsoft.com/de-DE/virtualization/windowscontainers/quick-start/building-sample-app

• Question 66:

  DRAG DROP

  You are configuring the settings of a new Git repository in Azure Repos.

  You need to ensure that pull requests in a branch meet the following criteria before they are merged:

  1.

  Committed code must compile successfully.

  2.

  Pull requests must have a Quality Gate status of Passed in SonarCloud.

  Which policy type should you configure for each requirement? To answer, drag the appropriate policy types to the correct requirements. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar

  between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box 1: A check-in policy

  Administrators of Team Foundation version control can add check-in policy requirements. These check-in policies require the user to take actions when they conduct a check-in to source control.

  By default, the following check-in policy types are available:

  1.

  Builds Requires that the last build was successful before a check-in.

  2.

  Code Analysis Requires that code analysis is run before check-in.

  3.

  Work Items Requires that one or more work items be associated with the check-in.

  Box 2: Build policy

  Reference: https://docs.microsoft.com/en-us/azure/devops/repos/tfvc/add-check-policies

  https://azuredevopslabs.com/labs/vstsextend/sonarcloud/

• Question 67:

  DRAG DROP

  Your company has an Azure subscription named Subscription1. Subscription1 is associated to an Azure Active Directory tenant named contoso.com.

  You need to provision an Azure Kubernetes Services (AKS) cluster in Subscription1 and set the permissions for the cluster by using RBAC roles that reference the identities in contoso.com.

  Which three objects should you create in sequence? To answer, move the appropriate objects from the list of objects to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Create an AKS cluster

  Step 2: a system-assigned managed identity

  To create an RBAC binding, you first need to get the Azure AD Object ID.

  1.

  Sign in to the Azure portal.

  2.

  In the search field at the top of the page, enter Azure Active Directory.

  3.

  Click Enter.

  4.

  In the Manage menu, select Users.

  5.

  In the name field, search for your account.

  6.

  In the Name column, select the link to your account.

  7.

  In the Identity section, copy the Object ID.

  

  Step 3: a RBAC binding

  Reference: https://docs.microsoft.com/en-us/azure/developer/ansible/aks-configure-rbac

• Question 68:

  DRAG DROP

  You plan to use Azure Kubernetes Service (AKS) to host containers deployed from images hosted in a Docker Trusted Registry.

  You need to recommend a solution for provisioning and connecting to AKS. The solution must ensure that AKS is RBAC-enaWed and uses a custom service principal.

  Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the coned order.

  Select and Place:

  

  Correct Answer:

  

• Question 69:

  DRAG DROP

  You are implementing an Azure DevOps strategy for mobile devices using App Center.

  You plan to use distribution groups to control access to releases.

  You need to create the distribution groups shown in the following table.

  

  Which type of distribution group should you use for each group? To answer, drag the appropriate group types to the correct locations. Each group type may be used once, more than once, or not at all. You may need to drag the split bar

  between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Box1: Private

  In App Center, distribution groups are private by default. Only testers invited via email can access the releases available to this group.

  Box 2: Public

  Distribution groups must be public to enable unauthenticated installs from public links.

  Box 3: Shared

  Shared distribution groups are private or public distribution groups that are shared across multiple apps in a single organization.

  Reference:

  https://docs.microsoft.com/en-us/appcenter/distribution/groups

• Question 70:

  DRAG DROP

  You have an Azure Kubernetes Service (AKS) cluster.

  You need to deploy an application to the cluster by using Azure DevOps.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  You can set up a CI/CD pipeline to deploy your apps on a Kubernetes cluster with Azure DevOps by leveraging a Linux agent, Docker, and Helm.

  Step 1: Create a service principle in Azure Active Directory (Azure AD)

  We need to assign 3 specific service principals with specific Azure Roles that need to interact with our ACR and our AKS.

  Create a specific Service Principal for our Azure DevOps pipelines to be able to push and pull images and charts of our ACR.

  Create a specific Service Principal for our Azure DevOps pipelines to be able to deploy our application in our AKS.

  Step 2: Add a Helm package and deploy a task to the deployment pipeline

  This is the DevOps workflow with containers:

  

  Step 3: Add a Docker Compose task to the deployment pipeline.

  Dockerfile file is a script leveraged by Docker, composed of various commands (instructions) and arguments listed successively to automatically perform actions on a base image in order to create a new Docker image by packaging the app.

  Reference:

  https://cloudblogs.microsoft.com/opensource/2018/11/27/tutorial-azure-devops-setup-cicd-pipeline-kubernetes-docker-helm/