Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Az-400 > Az-400 > Flashcards

Az-400 Flashcards

1
Q

Examples of static analysis tools

A

Sonarqube
white source bolt
PMD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

White source bolt

A

provides license and vulnerabilities details on 3rd party packages in your project

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Dynamic analysis

A

ran against live deployed code. commonly used to run pentests against known vulnerabilities like SQL injection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Examples of Dynamic code analysis tools

A

owasp ZED ATTACK PROXY (zap)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What should unit tests be built for?

A

testing a single piece or a core function in isolation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What test data should be used in unit tests

A

mock data from a file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

what data should be used in integration tests

A

data hosted on the same DB system as the production environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

When should you make a package

A

when code can be reused across your projects and the code does not need to be changed ofter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Symantec versioning

A

in x.x.x format. major breaking change. feature change that is backwards compatible. hotfix or patch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Project type that includes change requests, issues, reviews and risk tracking items

A

CMMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is a burndown report?

A

tracks work completed and remaining work across teams and sprints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what is a burnup report?

A

tracks completed work items over teams and sprints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what is a

Cumulative Flow Diagram (CFD)

A

shows count of work items in each column of a kanban board

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

lead time

A

how long a work item goes from being created in backlog to completed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

velocity

A

shows how much work is completed during a sprint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

You are automating the build process for a Java-based application by using Azure DevOps. You need to add code coverage testing and publish the outcomes to the pipeline. What should you use?

A

java - jacoco, cobertura, clover
c++ - bullseye
python - coverage.py
,net/c# - ncover, dotcover

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You are designing the development process for your company. You need to recommend a solution for continuous inspection of the company’s code base to locate common code patterns that are known to be problematic. What should you include in the recommendation?

A

SonarCloud analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What should you use for a code quality restriction on a release pipeline?

A

a pre-deployment approval

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How to connect github enterprise to azure active directory

A

Admin on github account, and on azure create an sso to github

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Recommended versioning format

A

semantic + quality of change | ex 2.1.3-release

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

service hooks vs service connectors

A

service hooks: external services act in response to azure devops events
service connector: integrate external services more deeply to azure pipelines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

common external connection tool authentication methods

A 
personal access token
api token (aka auth tokens)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

popular code scanning services

A

white source bolt and snyk - find and fix open-source vulnerabilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is octopus deploy?

A

devops automation/dependency scanning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

mutable vs immutable configuration. What is mutable infrastructure

A

in place updates, keep existing servers, easier to introduce

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

mutable vs immutable configuration. What is immutable infrastructure

A

zero config drift, easy to diagnose, simple rollback and recovery, easy to scale horizontally

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

declarative vs imperative code. what is Imperative code?

A

uses statements that change a program’s state. greater form of control, this is the anti-pattern

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

declarative vs imperative code. what is declarative code?

A

say the end state, great for immutability, code reuse, understandable code, scalable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is a DACPAC?

A

data application code package, it contains no data from the database, just the schema

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is a BACPAC?

A

backup package for sql. it contains the data and the schema of the database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Use this when working with a BACPAC

A

use export/import for BACPAC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Use this when working with a DACPAC

A

extract/publish for DACPAC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is azure app configuration

A

it is a way to hold app configurations and pass them to other applications, specifically serverless apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Two types of release gates

A

pre-deployment and post deployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Use this type of release gate after deploying to a staging environment

A

post deployment gate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What do you need for a blue/green deployment?

A

Tags, two running environments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

How to integrate feature flags into a pipeline

A

Use launch darkly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

components of azure ad conditional access

A

set the scope
determine the conditions
make the decision

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

managed identity

A

azure resource identity that allows access privileges to other azure resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

system-managed identity

A

tied to your resource or app and is deleted if the resource is deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

user-managed identity

A

standalone user created identity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

main way to use azure key vault with azure devops

A

connect to azure key vault via a service principal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is azure policy used for?

A

monitor and enforce rules and standards across your azure resources
can be integrated in azure devops

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What are the components of an azure policy?

A

needs a policy definition - what to evaluate and what action to take

assignment - scope for the policy

initiative - group related policy definitions together

check condition - evaluates compliance every hour

trigger action - based on evaluation results

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is azure defender

A

security that uses machine learning to determine if there is an attack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Where should diagnostic log storage be sent?

A

to either log analytics workspace or event hub

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Language that Azure monitor uses

A

kusto query language (kql)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

How to setup VM’s with azure monitor

A

install extension on vm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

How to filter with KQL?

A

where

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

How to limit results with KQL?

A

take # where # is the number you want.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

How to sort results with KQL?

A

sort

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

VM agent limits for Azure Monitor

A

windows agents can send logs to multiple workspaces, linux can only send to one workspace

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What does distributed tracing show?

A

a unique id to show where the logs came from

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Information Visual Studio App Center Analytics can show

A 
active users
sessions
geographic data
devices
operating systems
languages
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

get kubernetes credentials at azure cli

A

az aks get-credentials -g rg_name -n aks-cluster-name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

azure monitor integration with dynatrace

A

provide additional metrics for over 70 types of azure resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What can azure pricing calculator do?

A

can give estimate of how much things will cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

How to connect jira with azure devops?

A

install the azure pipelines jira extension

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

How to connect github to azure boards?

A

in az devops click connect to github, provide connection information

60
Q

create azure boards integration from slack/teams

A

/azboards signin /azboards link, /azboards subscriptions /azboards addareapath

61
Q

agile v scrum vs others

A

cmmi consists of epics features requirements bugs and tasks. agile has product backlog items, scrum has user stories

62
Q

Components of powershell dsc

A

needs config file, target node, config data

63
Q

Benefits of using powershell dsc?

A

powershell dsc can combine with azure automation. it allows you to minimize config drift

64
Q

What is the node line in powershell dsc for?

A

defining the target nodes of the script. the important bit is the name of the package getting installed.

65
Q

What is the extension a powershell dsc fata file is saved as?

A

.psd1

66
Q

How are powershell dsc files saved in azure?

A

dsc files must be saved as zip files and stored in a storage account

67
Q

How to install powershell dsc on a server?

A

it must be installed as an extension

68
Q

How can a vm communicate with azure automation server?

A

it needs a registration key

69
Q

Setup powershell dsc via azure automation in windows

A

ensure latest win management framework 5 is installed, generate dsc meta-configuration, then apply the metaconfiguration settings

70
Q

Setup powershell dsc via azure automation in linux

A

ensure ps dsc is installed, use register.py command to register with azure automation generate dsc metaconfigruation, apply metaconfiguration

71
Q

basics of arm template

A

schema, version (version of template),

api (specify to not have to specify on each resource)

parameters (input values, limit of 256),

variables (variables used in the template),

functions (complex structures, can only have parameters defined in function)

resource (actual things getting deployed or updated),

outputs (values returned from deployment)

72
Q

What are the benefits of a parameters file for an arm template?

A

customize arm templates for specific deployments

arm templates get deployed with “az deployment group create”

73
Q

reference keyvault secret with arm template

A

reference the id of the keyvault. ie adminpassword: {reference :{key vault :{ id

74
Q

adding k8s to build pipeline

A

copy files from source folder to artifactstagingdirectory,

deploy to k8s with a k8s service connection to the cluster

75
Q

deploying containers to web app on release pipeline

A

use service connection, give image name including registry

76
Q

how to deploy from release pipeline to k8s

A

use k8s deployment task, use cluster service connection, give namespace, and the manifest file. do this for each file (you could make this into one large file instead)

77
Q

add helm repo with helm installed

A

helm repo add stable url_to_repo

78
Q

using helm

A

helm search repo stable,

helm install appname

79
Q

azure pipelines system defined variable that is mapped to a folder to copy all the artifacts that have been built, typically mapped to _work/1/a

A

$(build.artifactStagingDirectory)

80
Q

how to expose artifacts to the release pipeline

A

use the PublishBuildArtifact task. It puts artifacts in a drop container

81
Q

azure pipelines system defined variable that is the working directory

A

$(system.defaultWorkingDirectory)

82
Q

release pipeline keyvault task

A

use a service connection to auth, and add an access policy for the service connection’s service principal to the key vault. This will fetch all secrets unless specified by a filter.

83
Q

how to reference a keyvault secret in a pipeline

A

use service principal to connect to keyvault, give the service principal access on the key vault, then the secret can be referenced via $(secretname)

84
Q

What is the purpose of a variable group

A

variable groups can be shared across pipelines

85
Q

How do you reference a variable group in a pipeline

A

you put the variable group in the pipeline then you can reference the variables in the group

variables:
- group: my-variable-group

86
Q

add a keyvault to a variable group

A

authorize azure devops to access the kv, which gives get and list. then the secrets can be chosen from the kv to add to the variable group and used as normal

87
Q

Can variable groups be linked from build pipelines to release pipelines?

A

yes

88
Q

What is azure traffic manager?

A

global service, routes requests from users at a dns level. can go to web apps, vm’s, azure lb’s on-prem servers, static websites, etc

89
Q

How does azure traffic manager priority routing work?

A

priority routing will check priority 1, then if its unhealthy go to priority 2, etc

90
Q

How does azure traffic manager weighted routing work?

A

splits the traffic between multiple targets as defined, used in blue green by setting blue to 100% and green to 0%.

91
Q

How does azure traffic manager performance routing method work?

A

routes users to closest deployment

92
Q

Difference between azure load balancer and azure traffic manager

A

azure load balancer is layer 3, azure traffic manager is layer 7

93
Q

Can you add markdown to an azure monitor dashboard?

A

yes

94
Q

Basics of azure alerts

A

aggregation granularity is the period you want checked for the alert,
frequency of evaluation is how frequently you want that metric checked to see if the conditions are met

95
Q

What is an azure alerts action group?

A

what is happening when an alert is triggered

96
Q

possible action group triggered services

A

logic app, function app, webhook, azure automation runbook

97
Q

What is required for azure alerts to trigger a function

A

create an http trigger on the function

98
Q

a common azure monitor query

A

event | where TimeGenerated > ago(12h)
| order by TimeGenerated desc
| summarize count () by Computer

99
Q

How to create work items in an external system based on alert

A

use the it service management connector

100
Q

What is a liveness probe

A

check whether the container is in a healthy condition or not and then restart the container as required

101
Q

What is a readiness probe?

A

used to ensure the container is ready to handle incoming requests.

can be used on containers that have to load data before taking on requests

102
Q

What is visual studio application center used for?

A

test and distribute apps. apps get distributed via distribution groups. there are public, shared and private distribution groups

103
Q

enable signed images in acr

A

az acr config content-trust update

104
Q

what is required for github sso from azure ad?

A

GitHub Enterprise plans.

105
Q

Authenticate to Azure Artifacts from Visual Studio

A

Visual Studio allows native authentication using a Credential Provider

106
Q

How to increase the number of jobs in Azure pipelines?

A

Purchase additional parallel jobs

107
Q

Certificate used for android app signing

A

.jks

108
Q

use this to create a staging environment for an app service

A

Deployment slots

109
Q

What service can be used for feature flags in azure app service?

A

Azure App Configuration

110
Q

what is azure stack used for?

A

hybrid/on-prem deployments

111
Q

what is needed to connect to azure stack from azure devops

A

a service connection

112
Q

what do you need for an iot release pipeline

A

azure iot edge release pipeline

113
Q

What are linked work items used for?

A

Traceability on pull requests

114
Q

What steps are needed for a cdn deployment?

A

compression and caching before publishing

115
Q

what are feature branches?

A

creates a branch for each feature. feature flags should be used

116
Q

what is release branching?

A

a release branch is put in place between main and dev. it supports multiple versions in parallel and customization for a specific customer

117
Q

what are some features of azure app configurations

A

can hold application configurations.
can hold key mappings
has ui for feature flags
works with key vault on sensitive key pairs

118
Q

types of pipeline gates:

A 
check azure policy compliance
invoke azure function
invoke rest api
query azure monitor alerts
query work items

there are also agentless jobs that can be used for manual intervention or validation

119
Q

azure policy components

A 
policy definition
assignment
initiative - group of policies
check condition - checks compliance every hour
trigger action
120
Q

what are container registry quick tasks?

A

let you build and publish images without using your local machine from the azure cli

121
Q

container registry automatic tasks

A

automated tasks that are triggered. Possible triggers: code commit (requires public access token), pr, base image change, timer

122
Q

what do kql queries start with?

A

a tablename

123
Q

how to search in kql

A

| “| where Computer == “computername”

where . you can search by key:value such as

124
Q

how to get N number of results in kql

A

take N

125
Q

what does | count do in kql?

A

gives you the number of records that match the pattern that exist

126
Q

What does | project do in KQL?

A

It lets you filter down to the columns you want to see. You have to provide the names of the columns

127
Q

What is this query doing? | summarize FailedLogons = count() by Computer

A

this query will summarize all of the failed logins and give a count by the Computer column

128
Q

What is this query doing? | order by FailedLogons

A

Sorts the highest occurrence of the column to lowest

129
Q

What does whitesource bolt do?

A

Finds and fixes open source vulnerabilities

130
Q

What does Snyk do?

A

Find and automatically fix vulnerabilities in your code, open source dependencies, containers, and infrastructure as code

131
Q

This tool can be used for dependency scanning

A

Dependabot

132
Q

What does SonarQube do?

A

Check for code quality, bugs, performs static analysis of code and checks for vulnerabilities

133
Q

how to connect azure repos to jenkins?

A

create a jenkins build and a service hook

134
Q

how many run commands can you have in a dockerfile?

A

1

135
Q

what is required to prepare a TFS server to be migrated to azure devops?

A

You must update TFS to the latest version

136
Q

where should you store connection strings in an azure app service

A

in the application settings

137
Q

powershell command to upload an an azure automation dsc?

A

import-azureRmAutomationDscConfiguration

138
Q

code coverage tool for java

A

cobertura

139
Q

does servicenow have a direct integration with azure pipelines?

A

yes

140
Q

this feature of application insights can show you whether users are completing multiple stages within your application

A

funnels

141
Q

What do user flows do in application insights?

A

visualize how users navigate between the pages and features of your site

142
Q

what does impact do in application insights?

A

gives insight into how best to balance optimization and performance to maximize user conversion

143
Q

The start of a command to create a keyvault secret

A

az keyvault secret set

144
Q

steps to add a package to azure artifacts from azure repos

A

create personal access token
create feed within azure artifacts
create packages and send to artifacts

145
Q

what is a deployment group?

A

a logical set of deployment target machines that have agents installed on them. you can specify the deployment targets for a pipeline job using a deployment group

146
Q

deploy arm template with powershell

A

new-AzResourceGroupDeployment

Az-400 (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions