Real Microsoft AZ-400 Exam Questions and Practice Exam

test2021-10-14T09:36:52+00:00

By test AZ-400, AZ-400 exam questions, AZ-400 free dumps, AZ-400 free questions, AZ-400 practice test, AZ-400 study guide, Azure DevOps 0 Comments

Passing AZ-400 exam validates the skills and knowledge to combine people, process, and technologies to continuously deliver valuable products and services that meet end user needs and business objectives. Candidates who already possess either the Microsoft Certified: Azure Administrator Associate certification or the Microsoft Certified: Azure Developer Associate certification will earn the Microsoft Certified: Azure DevOps Engineer Expert certification by passing the AZ-400 exam.

Before preparing for the AZ-400 exam, it is essential to understand the practical significance of the AZ-400 exam. We free share Microsoft AZ-400 questions and answers for you to practice, it can help you pass your AZ-400 Designing and Implementing Microsoft DevOps exam successfully in the first try.

Test Microsoft AZ-400 Exam Questions Online

Page 1 of 9

1. Your company uses Azure DevOps for the build pipelines and deployment pipelines of Java-based projects.

You need to recommend a strategy for managing technical debt.

Which action should you include in the recommendation?

Configure post-deployment approvals in the deployment pipeline.

Integrate Azure DevOps and SonarQube.

Integrate Azure DevOps and Azure DevTest Labs.

2. You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure virtual machine scale set named VMSS1. VMSS1 hosts a web application named WebApp1.

WebApp1 uses stateful sessions.

The WebApp1 installation is managed by using the Custom Script extension. The script resides in an Azure Storage account named sa1.

You plan to make a minor change to a UI element of WebApp1 and to gather user feedback about the change.

You need to implement limited user testing for the new version of WebApp1 on VMSS1.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Modify the load balancer settings of VMSS1.

Redeploy VMSS1.

Upload a custom script file to sa1.

Modify the Custom Script extension settings of VMSS1.

Update the configuration of a virtual machine in VMSS1.

3. You have a project in Azure DevOps named Project1. Project1 contains a build pipeline named Pipe1 that builds an application named Appl.

You have an agent pool named Pool1 that contains a Windows Server 2019-based self-hosted agent. Pipe1 uses Pool1.

You plan to implement another project named Project2. Project2 will have a build pipeline

named Pipe2 that builds an application named App2.

App1 and App2 have conflicting dependencies.

You need to minimize the possibility that the two build pipelines will conflict with each other.

The solution must minimize infrastructure costs.

What should you do?

Create two container jobs.

Change the self-hosted agent to use Red Hat Enterprise Linux (RHEL) 8.

Add another self-hosted agent

Add a Docker Compose task to the build pipelines.

4. HOTSPOT

Your company uses Git as a source code control system for a complex app named App1.

You plan to add a new functionality to App1.

You need to design a branching model for the new functionality.

Which branch lifetime and branch time should you use in the branching model? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

5. You have an existing project in Azure DevOps.

You plan to integrate GitHub as the repository for the project

You need to ensure that Azure Pipelines runs under the Azure Pipelines identity

Which authentication mechanism should you use?

GitHubApp

OAuth

personal access token (PAT)

Azure Active Directory (Azure AD)

6. HOTSPOT

You currently use JIRA, Jenkins, and Octopus as part of your DevOps processes.

You plan to use Azure DevOps to replace these tools.

Which Azure DevOps service should you use to replace each tool? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

7. HOTSPOT

Your company is building a new web application.

You plan to collect feedback from pilot users on the features being delivered.

All the pilot users have a corporate computer that has Google Chrome and the Microsoft Test & Feedback extension installed. The pilot users will test the application by using Chrome.

You need to identify which access levels are required to ensure that developers can request and gather feedback from the pilot users. The solution must use the principle of least privilege.

Which access levels in Azure DevOps should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

8. HOTSPOT

How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area. NOTE: Each correct selection a worth one point.

9. You need to meet the technical requirements for controlling access to Azure DevOps.

What should you use?

Azure Multi-Factor Authentication (MFA)

on-premises firewall rules

conditional access policies in Azure AD

Azure role-based access control (Azure RBAC)

10. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to recommend an integration strategy for the build process of a Java application.

The solution must meet the following requirements:

✑ The builds must access an on-premises dependency management system.

✑ The build outputs must be stored as Server artifacts in Azure DevOps.

✑ The source code must be stored in a Git repository in Azure DevOps.

Solution: Install and configure a self-hosted build agent on an on-premises machine. Configure the build pipeline to use the Default agent pool. Include the Java Tool Installer task in the build pipeline.

Does this meet the goal?

Yes

Page 2 of 9

11. DRAG DROP

You have a project in Azure DevOps named Project1 that contains two Azure DevOps pipelines named Pipeline1 and Pipeline2.

You need to ensure that Pipeline1 can deploy code successfully to an Azure web app named webapp1. The solution must ensure that Pipeline2 does not have permission to webapp1.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

12. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company uses Azure DevOps to manage the build and release processes for applications.

You use a Git repository for applications source control.

You need to implement a pull request strategy that reduces the history volume in the master branch.

Solution: You implement a pull request strategy that uses fast-forward merges.

Does this meet the goal?

Yes

13. Note: This question n part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed.

You have a policy stating that approvals must occur within eight hours.

You discover that deployments fail if the approvals lake longer than two hours.

You need to ensure that the deployments only fail if the approvals take longer than eight hours.

Solution: From Pre-deployment conditions, you modify the Timeout setting for pre-deployment approvals.

Does this meet the goal?

Yes

14. CORRECT TEXT

You plan to deploy a template named D:Deploy.json to a resource group named Deploy-lod9940427.

You need to modify the template to meet the following requirements, and then to deploy the template:

✑ The address space must be reduced to support only 256 total IP addresses.

✑ The subnet address space must be reduced to support only 64 total IP addresses.

To complete this task, sign in to the Microsoft Azure portal.

15. You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1.

You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines.

What should you do?

Create a variable group in Project1.

Add a secure file to Project1.

Modify the security settings of the pipelines.

Configure the security policy of Contoso.

16. You are automating the testing process for your company.

You need to automate UI testing of a web application.

Which framework should you use?

JaCoco

Selenium

Xamarin.UITest

Microsoft.CodeAnalysis

17. You have an Azure DevOps project named Project1 and an Azure subscription named Sub1.

You need to prevent releases from being deployed unless the releases comply with the Azure Policy rules assigned to Sub1.

What should you do in the release pipeline of Project1?

Create a pipeline variable.

Add a deployment gate.

Configure a deployment trigger.

Modify the Deployment queue settings.

18. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed.

You haw a pokey stating that approvals must occur within eight hours.

You discover that deployments only if the approvals take longer than two hours.

You need to ensure that the deployments only fail if the approvals take longer than hours.

Solution From Post -deployment conditions, you modify the Timeout setting for post-deployment approvals.

Does this meet the goal?

Yes

19. You have a GitHub repository.

You create a new repository in Azure DevOps.

You need to recommend a procedure to clone the repository from GitHub to Azure DevOps.

What should you recommend?

Create a webhook.

Create a service connection for GitHub.

From Import a Git repository, click Import

Create a pull request.

Create a personal access token in Azure DevOps.

20. Your company plans to use an agile approach to software development

You need to recommend an application to provide communication between members of the development team who work in locations around the world.

The application must meet the following requirements:

• Provide the ability to isolate the members of efferent project teams into separate communication channels and to keep a history of the chats within those channels.

• Be available on Windows 10, Mac OS, iOS, and Android operating systems.

• Provide the ability to add external contractors and suppliers to projects.

• Integrate directly with Azure DevOps.

What should you recommend?

Octopus

Bamboo

Microsoft Project

Slack

Page 3 of 9

21. Your company uses cloud-hosted Jenkins for builds.

You need to ensure that Jenkins can retrieve source code from Azure Repos.

Which three actions should you perform? Each correct answer presents part of the solution . NOTE: Each correct answer selection is worth one point

Add the Team Foundation Server (TFS) plug-in to Jenkins.

Create a personal access token m your Azure DevOps account.

Create a webhook in Jenkins.

Add a domain to your Jenkins account.

Create a service hook m Azure DevOps.

22. DRAG DROP

Your company plans to deploy an application to the following endpoints:

✑ Ten virtual machines hosted in Azure

✑ Ten virtual machines hosted in an on-premises data center environment

All the virtual machines have the Azure Pipelines agent.

You need to implement a release strategy for deploying the application to the endpoints.

What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate components to the correct endpoints. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

23. You use Azure SQL Database Intelligent Insights and Azure Application Insights foe monitoring.

You need to write ad-hoc Queries against the monitoring data.

Which Query language should you use?

PL/pgSQL

Transact-SQL

Azure Log Analytics

PL/SQL

24. DRAG DROP

You are creating a NuGet package.

You plan to distribute the package to your development team privately.

You need to share the package and test that the package can be consumed.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

25. You have a web app hosted on Azure App Service. The web app stores data in an Azure SQL database.

You need to generate an alert when there are 10,000 simultaneous connections to the database. The solution must minimize development effort.

Which option should you select in the Diagnostics settings of the database?

Send to Log Analytics

Stream to an event hub

Archive to a storage account

26. You are monitoring the health and performance of an Azure web app by using Azure Application Insights.

You need to ensure that an alert is sent when the web app has a sudden rise in performance issues and failures.

What should you use?

custom events

Application Insights Profiler

usage analysis

Smart Detection

Continuous export

27. CORRECT TEXT

You have several apps that use an Azure SQL Database named db1.

You need to ensure that queries to db1 are tuned by Azure over time. The solution must only apply to db1.

To complete this task, sign in to the Microsoft Azure portal.

28. DRAG DROP

Your company wants to use Azure Application Insights to understand how user behaviors affect an application.

Which Application Insights tool should you use to analyze each behavior? To answer, drag the appropriate tools to the correct behaviors. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

29. You are integrating Azure Pipelines and Microsoft Teams.

You install the Azure Pipelines app in Microsoft Teams.

You have an Azure DevOps organization named Contoso that contains a project name Project1.

You subscribe to Project1 in Microsoft Teams.

You need to ensure that you only receive events about failed builds in Microsoft Teams.

What should you do first?

From Microsoft Teams, tun @azure pipelines subscribe https://dev.azure.com/Contoso/Project1.

From Microsoft Teams, run @azure pipelines subscriptions.

From Azure Pipelines, enable continuous integration for Project1.

From Azure Pipelines, add a Publish Build Artifacts task to Project1.

30. DRAG DROP

You have an Azure DevOps organization named Contoso.

You have 10 Azure virtual machines that run Windows Server 2019. The virtual machines host an application that you build and deploy by using Azure Pipelines. Each virtual machine has the Web Server (IIS) role installed and configured.

You need to ensure that the web server configurations pin the virtual machines is maintained automatically. The solution must provide centralized management of the configuration settings and minimize management overhead.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Page 4 of 9

31. Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.

You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.

What should you use?

Microsoft Visual SourceSafe

PDM

WhiteSource

OWASP ZAP

32. HOTSPOT

You manage build and release pipelines by using Azure DevOps. Your entire managed environment resides in Azure.

You need to configure a service endpoint for accessing Azure Key Vault secrets.

The solution must meet the following requirements:

✑ Ensure that the secrets are retrieved by Azure DevOps.

✑ Avoid persisting credentials and tokens in Azure DevOps.

How should you configure the service endpoint? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

33. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a prefect in Azure DevOps for a new web application.

You need to ensure that when code is checked in, a build runs automatically.

Solution: from the Triggers tab of the build pipeline, you select Enable continuous integration

Does the meet the goal?

Yes

34. DRAG DROP

You are configuring the Azure DevOps dashboard. The solution must meet the technical requirements.

Which widget should you use for each metric? To answer, drag the appropriate widgets to the correct metrics. Each widget may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

35. Note: This question is part of * series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sett might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an approval process that contains a condition. The condition requires that

releases be approved by a team leader before they are deployed.

You have a poky stating that approvals must occur within eight hour.

You discover that deployments fail if the approvals take longer than two hours.

You need to ensure that the deployments only fail if the approvals take longer than eight hours.

Solution: From Post-deployment conditions, you modify the Time between re-evaluation of gates option.

Does this meet the goal?

Yes

36. You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 and an Azure Standard Load Balancer named LB1. LB1 distributes incoming requests across VMSS1 instances.

You use Azure DevOps to build a web app named Appl and deploy App1 to VMSS1. App1 is accessible via HTTPS only and configured to require mutual authentication by using a client certificate.

You need to recommend a solution for implementing a health check of App1. The solution must meet the following requirements:

• Identify whether individual instances of VMSSl are eligible for an upgrade operation.

• Minimize administrative effort.

What should you include in the recommendation?

the Custom Script Extension

the Application Health extension

Azure Monitor autoscale

an Azure Load Balancer health probe

37. Your company creates a web application.

You need to recommend a solution that automatically sends to Microsoft Teams a daily summary of the exceptions that occur in the application.

Which two Azure services should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Azure Logic Apps

Azure Pipelines

Microsoft Visual Studio App Center

Azure DevOps Project

Azure Application Insights

38. Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.

You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.

What should you use?

SourceGear Vault

Jenkins

Microsoft Visual SourceSafe

WhiteSource Bolt

39. You have a free tier of an Azure DevOps organization named Contoso. Contoso contains 10 private projects. Each project has multiple jobs with no dependencies.

You frequently run the jobs on five self-hosted agents but experience long build times and frequently queued builds.

You need to minimize the number of queued builds and the time it takes to run the builds.

What should you do?

Purchase self-hosted parallel jobs.

Purchase Microsoft-hosted parallel jobs.

Configure the pipelines to use the Microsoft-hosted agents.

40. You have an Azure DevOps organization named Contoso.

You need to receive Microsoft Teams notifications when work items are updated.

What should you do?

From Azure DevOps, configure a service hook subscription

From Microsoft Teams, configure a connector

From the Microsoft Teams admin center, configure external access

From Microsoft Teams, add a channel

From Azure DevOps, install an extension

Page 5 of 9

41. CORRECT TEXT

You plan to implement a CI/CD strategy for an Azure Web App named az400-11566895-main.

You need to configure a staging environment for az400-11566895-main.

To complete this task, sign in to the Microsoft Azure portal.

42. DRAG DROP

You have a private project in Azure DevOps and two users named User1 and User2.

You need to add User1 and User2 to groups to meet the following requirements:

✑ User1 must be able to create a code wiki.

✑ User2 must be able to edit wiki pages.

✑ The solution must use the principle of least privilege.

To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

43. DRAG DROP

You need to implement the code flow strategy for Project2 in Azure DevOps.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

44. Your company « concerned that when developers introduce open source Libraries, it creates licensing compliance issues.

You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.

What should you use?

Code Style

Microsoft Visual SourceSafe

Black Duck

Jenkins

45. You are deploying a server application that will run on a Server Core installation of Windows Server 2019.

You create an Azure key vault and a secret.

You need to use the key vault to secure API secrets for third-party integrations.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

D18912E1457D5D1DDCBD40AB3BF70D5D

Configure RBAC for the key vault.

Modify the application to access the key vault.

Configure a Key Vault access policy.

Deploy an Azure Desired State Configuration (DSC) extension.

Deploy a virtual machine that uses a system-assigned managed identity.

46. HOTSPOT

You have an Azure virtual machine named VM1 that runs Linux.

You plan to deploy the Desired State Configuration (DSC) extension to VM1.

You need to grant the Log Analytics agent the appropriate directory permissions.

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

47. CORRECT TEXT

You need to create and configure an Azure Storage account named az400lod11566895stor in a resource group named RG1lod11566895 to store the boot diagnostics for a virtual machine named VM1.

To complete this task, sign in to the Microsoft Azure portal.

48. DRAG DROP

You have an Azure subscription that contains a resources group named RG1.

RG1 contains the following resources:

• Four Azure virtual machines that run Windows Server and have Internet Information Services (IIS) installed

• SQL Server on an Azure virtual machine

• An Azure Load Balancer

You need to deploy an application to the virtual machines in RG1 by using Azure Pipelines.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the List of actions to the answer area and arrange them in the correct order.

49. Your team uses an agile development approach.

You need to recommend a branching strategy for the team’s Git repository. The strategy must meet the

following requirements.

Provide the ability to work on multiple independent tasks in parallel.

Ensure that checked-in code remains in a releasable state always.

Ensure that new features can be abandoned at any time.

Encourage experimentation.

What should you recommend?

a single long-running branch

multiple long-running branches

a single fork per team member

a single-running branch with multiple short-lived topic branches

50. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling.

You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1.

You need to ensure that an email alert is generated whenever VMSS1 scales in or out.

Solution: From Azure DevOps, configure the Notifications settings for Project1.

Does this meet the goal?

Yes

Page 6 of 9

51. You have a build pipeline in Azure Pipelines that uses different jobs to compile an application for 10 different architectures.

The build pipeline takes approximately one day to complete. You need to reduce the time it takes to execute the build pipeline

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

Move to a blue/green deployment pattern.

Create an agent pool.

Create a deployment group.

Reduce the size of the repository.

Increase the number of parallel jobs.

52. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a project in Azure DevOps for a new web application.

You need to ensure that when code is checked in, a build runs automatically.

Solution: From the Pre-deployment conditions settings of the release pipeline, you select After stage.

Does this meet the goal?

Yes

53. You have a private distribution group that contains provisioned and unprovisioned devices.

You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.

What should you do?

Request the Apple ID associated with the user of each device.

Create an active subscription in App Center Test.

Add the device owner to the organization in App Center.

54. DRAG DROP

You manage the Git repository for a large enterprise application.

During the development of the application, you use a file named Config.json.

You need to prevent Config.json from being committed to the source control whenever changes to the application are committed.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

55. You manage an Azure web app that supports an e-commerce website.

You need to increase the logging level when the web app exceeds normal usage patterns.

The solution must minimize administrative overhead.

Which two resources should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

an Azure Automation runbook

an Azure Monitor alert that has a dynamic threshold

an Azure Monitor alert that has a static threshold

the Azure Monitor autoscale settings

an Azure Monitor alert that uses an action group that has an email action

56. DRAG DROP

You need to replace the existing DevOps tools to support the planned changes.

What should you use? To answer, drag the appropriate tools to the correct targets. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

57. You have an Azure DevOps organization named Contoso.

You need to recommend an authentication mechanism that meets the following requirements:

• Supports authentication from Git

• Minimizes the need to provide credentials during authentication

What should you recommend?

managed identities in Azure Active Directory (Azure AD)

personal access tokens (PATs) in Azure DevOps

user accounts in Azure Active Directory (Azure AD)

Alternate credentials in Azure DevOps

58. Your company uses the following resources:

✑ Windows Server 2019 container images hosted in an Azure Container Registry

✑ Azure virtual machines that run the latest version of Ubuntu An Azure

✑ Log Analytics workspace Azure Active Directory (Azure AD)

✑ An Azure key vault

For which two resources can you receive vulnerability assessments in Azure Security Center? Each correct answer presents part of the solution.

the Azure Log Analytics workspace

the Azure key vault

the Azure virtual machines that run the latest version of Ubuntu

Azure Active Directory (Azure AD)

the Windows Server 2019 container images hosted in the Azure Container Registry

59. DRAG DROP

You provision an Azure Kubernetes Service (AKS) cluster that has RBAC enabled. You have a Helm chart for a client application.

You need to configure Helm and Tiller on the cluster and install the chart.

Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

60. You have an Azure DevOps organization named Contoso and an Azure subscription.

You use Azure DevOps to build and deploy a web app named App1. Azure Monitor is configured to generate an email notification in response to alerts generated whenever App1 generates a server-side error.

You need to receive notifications in Microsoft Teams whenever an Azure Monitor alert is generated.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Create an Azure logic app that has an HTTP request trigger.

Modify the Diagnostics settings in Azure Monitor.

Modify an action group in Azure Monitor.

Create an Azure Monitor workbook.

Create an Azure logic app that has an Azure DevOps trigger.

Page 7 of 9

61. You have an application that consists of several Azure App Service web apps and Azure m functions.

You need to access the security of the web apps and the functions.

Which Azure features can you use to provide a recommendation for the security of the application?

Security & Compliance in Azure Log Analytics

Resource health in Azure Service Health

Smart Detection in Azure Application Insights

Compute & apps in Azure Security Center

62. You are designing the development process for your company.

You need to recommend a solution for continuous inspection of the company’s code base to locate common code patterns that are known to be problematic.

What should you include in the recommendation?

Microsoft Visual Studio test plans

Gradle wrapper scripts

SonarCloud analysis

the JavaScript task runner

63. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to update the Azure DevOps strategy of your company.

You need to identify the following issues as they occur during the company’s development process:

✑ Licensing violations

✑ Prohibited libraries

Solution: You implement pre-deployment gates.

Does this meet the goal?

Yes

64. You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure SQL database named DB1.

You need to create a release pipeline that uses the Azure SQL Database Deployment task to update DB1.

Which artifact should you deploy?

a BACPAC

a DACPAC

an LDF file

an MDF file

65. You need to implement Project4.

What should you do first?

Add the FROM instruction in the Dockerfile file.

Add a Copy and Publish Build Artifacts task to the build pipeline.

Add a Docker task to the build pipeline.

Add the MAINTAINER instruction in the Dockerfile file.

66. You have an Azure DevOps organization named Contoso and an Azure subscription.

You use Azure DevOps to build a containerized app named Appl and deploy App1 to an Azure container instance named ACM.

You need to restart ACI1 when App1 stops responding.

What should you do?

Add a liveness probe to the YAML configuration of App1.

Use Connection Monitor in Azure Network Watcher.

Add a readiness probe to the YAML configuration of App1.

Use IP flow verify in Azure Network Watcher.

67. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured

for autoscaling.

You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1.

You need to ensure that an email alert is generated whenever VMSS1 scales in or out.

Solution: From Azure DevOps, configure the Service hooks settings for Project1.

Does this meet the goal?

Yes

68. You have an Azure DevOps project that contains a release pipeline and a Git repository.

When a new code revision is committed to the repository, a build and release is triggered.

You need to ensure that release information for the pipeline is added automatically to the work items associated to the Git commit.

What should you do?

Modify the Integrations options for the pipeline.

Modify the post-deployment conditions for the last stage of the pipeline.

Add an agentless job to the pipeline.

Modify the service hooks for the project.

69. What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite?

a trigger

a pre deployment approval

a post-deployment approval

a deployment gate

70. You use Azure SQL Database Intelligent Insights and Azure Application Insights for monitoring.

You need to write ad-hoc queries against the monitoring data.

Which query language should you use?

Kusto Query Language (KQL)

PL/pgSQL

PL/SQL

Transact-SQL

Page 8 of 9

71. CORRECT TEXT

You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity.

The solution must use the principle of least privilege.

To complete this task, sign in to the Microsoft Azure portal.

72. Note: This question part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the staled goals. Some question sets might have more than one correct solution, whale others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.

You integrate a cloud-hosted Jenkins server and a new Azure DevOps depsoyment.

You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos.

Solution: You add a trigger to the build pipeline.

Does this meet the goal?

Yes

73. DRAG DROP

NO: 15 DRAG DROP

You are developing a full Microsoft .NET Framework solution that includes unit tests.

You need to configure SonarQube to perform a code quality validation of the C# code as part of the build pipelines.

Which four tasks should you perform in sequence? To answer, move the appropriate tasks from the list of tasks to the answer area and arrange them in the correct order.

74. You are developing a multi-tier application. The application will use Azure App Service web apps as the front end and an Azure SQL database as the back end. The application will use Azure functions to write some data to Azure Storage.

You need to send the Azure DevOps team an email message when the front end fails to return a status code of 200.

Which feature should you use?

Service Map in Azure Log Analytics

Profiler in Azure Application Insights

availability tests in Azure Application Insights

Application Map in Azure Application Insights

75. HOTSPOT

Your company is creating a suite of three mobile applications.

You need to control access to the application builds. The solution must be managed at the organization level

What should you use? To answer, select the appropriate options m the answer area. NOTE: Each correct selection is worth one point.

76. DRAG DROP

You are deploying a new application that uses Azure virtual machines.

You plan to use the Desired State Configuration (DSC) extension on the virtual machines.

You need to ensure that the virtual machines always have the same Windows features installed.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

77. DRAG DROP

You use Azure Pipelines to automate Continuous Integration/Continuous Deployment (CI/CD) for an Azure web app named WebApp1.

You configure an Azure Monitor alert that is triggered when WebApp1 generates an error.

You need to configure the alert to forward details of the error to a third-party system. The solution must minimize administrative effort.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

78. DRAG DROP

You need to recommend a solution for deploying charts by using Helm and Title to Azure Kubemets Service (AKS) in an RBAC-enabled cluster.

Which three commands should you recommend be run m sequence? To answer, move the

appropriate commands from the list of commands to the answer area and arrange them in the correct order.

79. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a project in Azure DevOps for a new web application.

You need to ensure that when code is checked in, a build runs automatically.

Solution: From the Pre-deployment conditions settings of the release pipeline, you select Batch changes while a build is in progress.

Does this meet the goal?

Yes

80. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed.

You have a policy stating that approvals must occur within eight hours.

You discover that deployment fail if the approvals take longer than two hours.

You need to ensure that the deployments only fail if the approvals take longer than eight hours.

Solution: From Post-deployment conditions, you modify the Timeout setting for post-deployment approvals.

Does this meet the goal?

Yes

Page 9 of 9

81. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You manage a project in Azure DevOps.

You need to prevent the configuration of the project from changing over time.

Solution: Add a code coverage step to the build pipelines.

Does this meet the goal?

Yes

82. DRAG DROP

Your company wants to use Azure Application Insights to understand how user behaviors affect an application.

Which application Insights tool should you use to analyze each behavior? To answer, drag the appropriate tools to the correct behaviors. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.