AZ-400 Practice Test Questions

Your company has an Azure DevOps project that produces Node Package Manager (npm) packages. Multiple projects consume the packages. You need to minimize the amount of disk space used by older packages in Azure Artifacts. What should you modify?

A. the retention settings of the project's pipeline

B. the retention settings of the project's release

C. the retention settings of the project's tests

D. the retention settings of the company pipeline

A. the retention settings of the project's pipeline

Explanation: To minimize the amount of disk space used by older packages in Azure Artifacts, you should modify the retention settings of the project's release. This can be done by navigating to the project's release settings and adjusting the retention policy. For more information, please refer to the Microsoft documentation.

Your company has a release pipeline in an Azure DevOps project. You plan to deploy to an Azure Kubernetes Services (AKS) cluster by using the Helm package and deploy task. You need to install a service in the AKS namespace for the planned deployment. Which service should you install?

A. Azure Container Registry

B. Chart

C. Kubectl

D. Tiller

Explanation: Before you can deploy Helm in an RBAC-enabled AKS cluster, you need a service account and role binding for the Tiller service.

You plan to deploy a solution that will include multiple microservices. You need to recommend a deployment strategy for the microservices. The solution must meet the following requirements:

Enable users to test new features by using a specific URL.
Minimize the effort required to promote a test version to production.
Minimize the effort required to revert production code to the previous version.

Which strategy should you recommend?

A. A/B

B. feature toggle

C. progressive exposure

D. blue/green

A. A/B

You manage an Azure web app that supports an e-commerce website. You need to increase the logging level when the web app exceeds normal usage patterns. The solution must minimize administrative overhead. Which two resources should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. an Azure Automation run book

B. an Azure Monitor alert that has a dynamic threshold

C. an Azure Monitor alert that has a static threshold

D. the Azure Monitor auto scale settings

E. an Azure Monitor alert that uses an action group that has an email action

A. an Azure Automation run book

B. an Azure Monitor alert that has a dynamic threshold

Explanation:
A: You can use Azure Monitor to monitor base-level metrics and logs for most services in Azure. You can call Azure Automation run books by using action groups or by using classic alerts to automate tasks based on alerts.
B: Metric Alert with Dynamic Thresholds detection leverages advanced machine learning (ML) to learn metrics' historical behavior, identify patterns and anomalies that indicate possible service issues. It provides support of both a simple UI and operations at scale by allowing users to configure alert rules through the Azure Resource Manager API, in a fully automated manner.

You are integrating Azure Pipelines and Microsoft Teams. You install the Azure Pipelines app in Microsoft Teams. You have an Azure DevOps organization named Contoso that contains a project name Project1. You subscribe to Project1 in Microsoft Teams. You need to ensure that you only receive events about failed builds in Microsoft Teams. What should you do first?

A. From Microsoft Teams, tun @azure pipelines subscribe
https://dev.azure.com/Contoso/Project1.

B. From Microsoft Teams, run @azure pipelines subscriptions.

C. From Azure Pipelines, enable continuous integration for Project1

D. From Azure Pipelines, add a Publish Build Artifacts task to Project1.

A. From Microsoft Teams, tun @azure pipelines subscribe
https://dev.azure.com/Contoso/Project1.

Explanation:
To start monitoring all pipelines in a project, use the following command inside a channel:
@azure pipelines subscribe [project url]
The project URL can be to any page within your project (except URLs to pipelines).
For example:
@azure pipelines subscribe https://dev.azure.com/myorg/myproject/

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You manage a project in Azure DevOps. You need to prevent the configuration of the project from changing over time. Solution: Perform a Subscription Health scan when packages are created. Does this meet the goal?

A. Yes

B. No

Explanation: Instead implement Continuous Assurance for the project. Note: The Subscription Security health check features in AzSK contains a set of scripts that examines a subscription and flags off security issues, misconfigurations or obsolete artifacts/settings which can put your subscription at higher risk.

You use Azure Pipelines to manage project builds and deployments. You plan to use Azure Pipelines for Microsoft Teams to notify the legal team when a new build is ready for release. You need to configure the Organization Settings in Azure DevOps to support Azure Pipelines for Microsoft Teams. What should you turn on?

A. Azure Active Directory Conditional Access Policy Validation

B. Alternate authentication credentials

C. Third-party application access via OAuth

D. SSH authentication

C. Third-party application access via OAuth

Explanation: The Azure Pipelines app uses the OAuth authentication protocol, and requires Third-party application access via OAuth for the organization to be enabled. To enable this setting, navigate to Organization Settings > Security > Policies, and set the Third-party application access via OAuth for the organization setting to On.

Unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen. You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment. You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos. Solution: You create a service hook subscription that uses the build completed event Does this meet the goal?

A. Yes

B. No

Explanation: You can create a service hook for Azure DevOps Services and TFS with Jenkins. However, the service subscription event should use the code pushed event, is triggered when the code is pushed to a Git repository.

Your company deploys applications m Docket containers. You want to detect known exploits in the Docket images used to provision the Docker containers. You need to integrate image scanning into the application lifecycle. The solution must expose the exploits as early as possible during the application lifecycle. What should you configure?

A. a task executed in the continuous deployment pipeline and a scheduled task against a running production container.

B. a task executed in the continuous integration pipeline and a scheduled task that analyzes the production container.

C. a task executed in the continuous integration pipeline and a scheduled task that analyzes the image registry

D. manual tasks performed during the planning phase and the deployment phase

C. a task executed in the continuous integration pipeline and a scheduled task that analyzes the image registry

Explanation: You can use the Docker task to sign into ACR and then use a subsequent script to pull an image and scan the container image for vulnerabilities. Use the docker task in a build or release pipeline. This task can be used with Docker or Azure Container registry.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt. You need to recommend changes to reduce the accumulated technical debt. Solution: You recommend increasing the code duplication. Does this meet the goal?

A. Yes

B. No

You have 50 Node.js-based projects that you scan by using WhiteSource. Each project includes Package.json, Package-lock.json, and Npm-shrinkwrap.json files. You need to minimize the number of libraries reports by WhiteSource to only the libraries that you explicitly reference. What should you do?

A. Configure the File System Agent plug in.

B. Delete Package lock.json.

C. Configure the Artifactory plug-in.

D. Add a devDependencies section to Package-lock.json.

Explanation: Separate Your Dependencies Within your package.json file be sure you split out your npm dependencies between devDependencies and (production) dependencies. The key part is that you must then make use of the --production flag when installing the npm packages. The --production flag will exclude all packages defined in the devDependencies section.

You have a pipeline named Pipeline1 in Azure Pipelines. You need to create a service connection to enable Pipeline1 to download a public container image. Which type of service connection should you create?

A. a Docker host

B. Azure Service Fabric

C. Azure Kubernetes Service (AKS)

D. a Docker registry