Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ-400 > Questions > Flashcards

Questions Flashcards

1
Q

HOTSPOT - How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

A

MSAppCenter.Start

(“{ Your App Secret }” , withServices: [MAAnalytics.self, MSCrashes.self] )

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

DRAG DROP - You are planning projects for three customers.The customers all plan to use Azure DevOps for work item management. Which work item process should you use for each customer?

a.Datum: Track Requirements, Change Requests, risks and reviews

A

CMMI

Choose CMMI when your team follows more formal project methods that require a framework for process improvement and an auditable record of decisions. With this process, you can track requirements, change requests, risks, and reviews.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

You have an Azure DevOps organization named Contoso and an Azure subscription. You use Azure DevOps to build and deploy a web app named App1. Azure Monitor is configured to generate an email notification in response to alerts generated whenever App1 generates a server-side error. You need to receive notifications s in Microsoft Teams whenever an Azure Monitor alert is generated. Which two actions should you perform?

A

Create an Azure logic app that has an HTTP request trigger.

Modify an action group in Azure Monitor.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

SIMULATION - You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity. The solution must use the principle of least privilege. To complete this task, sign in to the Microsoft Azure portal

A
  1. In Azure portal navigate to the az400-9940427-main app.
  2. Scroll down to the Settings group in the left navigation.
  3. Select Managed identity.
  4. Within the System assigned tab, switch Status to On. Click Save.
    https: //docs.microsoft.com/en-us/azure/app-service/overview-managed-identity
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You create a Microsoft ASP.NET Core application. You plan to use Azure Key Vault to provide secrets to the application as conguration data. You need to create a Key Vault access policy to assign secret permissions to the application. The solution must use the principle of least privilege. Which secret permissions should you use?

A

Get only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

HOTSPOT - Your company has an Azure subscription. The company requires that all resource groups in the subscription have a tag named organization set to a value of Contoso. You need to implement a policy to meet the tagging requirement. How should you complete the policy? To answer, select the appropriate options in the answer area.

A

“MicrosoftResources\subscriptions\resouceGroups”

“Append”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues. You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base. What should you use?

A

Black Duck

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

You are automating the build process for a Java-based application by using Azure DevOps. You need to add code coverage testing and publish the outcomes to the pipeline. What should you use?

A

Cobertura = Java

Coverlet = .NET

Bullseye = C++

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

You are designing the development process for your company. You need to recommend a solution for continuous inspection of the company’s code base to locate common code patterns that are known to be problematic. What should you include in the recommendation?

A

SonarCloud analysis

SonarCloud is a cloud service offered by SonarSource and based on SonarQube. SonarQube is a widely adopted open source platform to inspect continuously the quality of source code and detect bugs, vulnerabilities and code smells in more than 20 different languages. Note: The SonarCloud Azure DevOps extension brings everything you need to have your projects analyzed on SonarCloud very quickly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Project1 will provide support for incremental builds and third-party SDK components.

Question DRAG DROP - You need to recommend a procedure to implement the build agent for Project1. Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A
  1. Sign in to Azure Devops by using an account that is assigned the agent pool administrator role
  2. Create a presonal access token
  3. Install and register Azure Pipelines agent on an Azure virtual machine
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

SIMULATION - You need to create a notification if the peak average response time of an Azure web app named az400-9940427-main is more than five seconds when evaluated during a five-minute period. The notification must trigger the “https://contoso.com/notify” webhook.

To complete this task, sign in to the Microsoft Azure portal.

A
  1. Open Microsoft Azure Portal
  2. Log into your Azure account and go to App Service and look under Monitoring then you will see Alert.
  3. Select Add an alert rule
  4. Configure the alert rule as per below and click Ok.

Source: Alert on Metrics - Resource Group: az400-9940427-main Resource: az400-9940427-main - Threshold:

5 - Period: Over the last 5 minutes - Webhook: https://contoso.com/notify

Yes. Action group needs to be created. Setup the Alert criteria and then in the same process create an action group an select Webhook and save it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

HOTSPOT - You are configuring a release pipeline in Azure DevOps as shown in the exhibit. Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

How many Stages have Triggers set?

Which component should you modify to enable continuous delivery?

A

Artifact can be set for continuous deployment

Number of trigger bolt with checkmark

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Your company is building a new solution in Java. The company currently uses a SonarQube server to analyze the code of .NET solutions. You need to analyze and monitor the code quality of the Java solution. Which task types should you add to the build pipeline?

A

Gradle

Configure an Azure DevOps Services or TFS Maven or Gradle build task to use SonarQube for code project and technical debt analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Case Study …. Investment planning applications suite……

By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days.

Question HOTSPOT - How should you configure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area.

Global Release: ?

Production stage: ?

A

Global Release? - Set the default retention policy to 30 days.

Production stage: ? Set the stage retention policy to 60 days.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Your company is building a mobile app that targets Android and iOS devices. Your team uses Azure DevOps to manage all work items and release cycles. You need to recommend a solution to perform the following tasks:

✑ Collect crash reports for issue analysis.

✑ Distribute beta releases to your testers.

✑ Get user feedback on the functionality of new apps.

What should you include in the recommendation?

A

Microsoft Visual Studio App Center

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

DRAG DROP - Your company wants to use Azure Application Insights to understand how user behaviors affect an application. Which Application Insights tool should you use to analyze each behavior?

Feature usage?

User actions by day?

The effect that the performance has on the usage of the page or a feature?

A

Feature usage? - User Flows

User actions by day? - Users

The effect that the performance? – Impact

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You manage build pipelines and deployment pipelines by using Azure DevOps. Your company has a team of 500 developers. New members are added continually to the team. You need to automate the management of users and licenses whenever possible. Which task must you perform manually?

A

D. procuring licenses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

You use Azure SQL Database Intelligent Insights and Azure Application Insights for monitoring. You need to write ad-hoc queries against the monitoring data. Which query language should you use?

A

Azure Log Analytics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

You have a containerized solution that runs in Azure Container Instances. The solution contains a frontend container named App1 and a backend container named DB1. DB1 loads a large amount of data during startup. You need to verify that DB1 can handle incoming requests before users can submit requests to App1. What should you configure?

A

a readiness probe

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Your company uses ServiceNow for incident management. You develop an application that runs on Azure. The company needs to generate a ticket in ServiceNow when the application fails to authenticate. Which Azure Log Analytics solution should you use?

A

IT Service Management Connector (ITSM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

You are designing a configuration management solution to support five apps hosted on Azure App Service. Each app is available in the following three environments: development, test, and production. You need to recommend a configuration management solution that meets the following requirements: ✑ Supports feature flags ✑ Tracks configuration changes from the past 30 days ✑ Stores hierarchically structured configuration values ✑ Controls access to the configurations by using role-based access control (RBAC) permission ✑ Stores shared values as key/value pairs that can be used by all the apps Which Azure service should you recommend as the configuration management solution?

A

Azure App configuration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

SIMULATION - You need to ensure that an Azure web app named az400-9940427-main supports rolling upgrades. The solution must ensure that only 10 percent of users who connect to az400-9940427-main use update versions of the app. The solution must minimize administrative effort. To complete this task, sign in to the Microsoft Azure portal.

A

Set up staging environments in Azure App Service

  1. Open Microsoft Azure Portal
  2. Log into your Azure account, select your app’s resource page, in the left pane, select Deployment slots > Add Slot.
  3. In the Add a slot dialog box, give the slot a name, and select whether to clone an app configuration from another deployment slot. Select Add to continue.
  4. After the slot is added, select Close to close the dialog box. The new slot is now shown on the Deployment slots page. By default, Traffic% is set to 0 for the new slot, with all customer traffic c routed to the production slot.
  5. Select the new deployment slot to open that slot’s resource page
  6. Change TRAFFIC to 10
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

DRAG DROP - You are configuring Azure Pipelines for a projects in Azure DevOps.

Which version control system should you recommend for the project?

The sensitivity of the project requires that the source code be hosted on the managed Windows Server on your company network.

A

Github Entwerprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

You plan to use Terraform to deploy an Azure resource group. You need to install the required frameworks to support the planned deployment. Which two frameworks should you install?

A

Yeoman

Terratest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Your company has a project in Azure DevOps. You need to ensure that when there are multiple builds pending deployment, only the most recent build is deployed. What should you use?

A

deployment queue settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

You plan to use Azure Repos for all the projects. Which version control system should you use for each project?

The release branch must only be viewable or editable by the project leads

A

Git or TFVS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

DRAG DROP - You need to find and isolate shared code. The shared code will be maintained in a series of packages. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A

Create a dependancy graph for the application

group the related components

Assign ownership to each component group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

You have an Azure DevOps organization named Contoso that contains a project named Project1. You provision an Azure key vault named Keyvault1. You need to reference Keyvault1 secrets in a build pipeline of Project1.

What should you do first?

A

Create a variable group in Project1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

You use WhiteSource Bolt to scan a Node.js application. The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment. You need to ensure that WhiteSource Bolt only scans production dependencies. Which two actions should you perform?

A

Run npm install and specify the –production

Modify the devDependencies section of the project’s Package.json

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Question What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite?

A

A. a pre-deployment approval

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Your team uses an agile development approach. You need to recommend a branching strategy for the team’s Git repository. The strategy must meet the following requirements.

✑ Provide the ability to work on multiple independent tasks in parallel.

✑ Ensure that checked-in code remains in a releasable state always.

✑ Ensure that new features can be abandoned at any time.

✑ Encourage experimentation. What should you recommend?

A

a single-running branch with multiple short-lived topic branches

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Your company has a release pipeline in an Azure DevOps project. You plan to deploy to an Azure Kubernetes Services (AKS) cluster by using the Helm package and deploy task. You need to install a service in the AKS namespace for the planned deployment. Which service should you install?

A

Chart

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

DRAG DROP - You need to use Azure Automation State Configure to manage the ongoing consistency of virtual machine configure Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A

Upload a configuration to Azure Automation State Configuration

Compile a configuration into a node configuration

Onboard the VM to Azure ASC

Assign the node configuration

Check the comploiance Status of the node

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Your company has an Azure DevOps project, The source code for the project is stored in an on-premises repository and uses on an on-premises build server. You plan to use Azure DevOps to control the build process on the build server by using a self-hosted agent. You need to implement the self-hosted agent. You download and install the agent on the build server.

Which two actions should you perform next?

A

D. From DevOps, create a personal access token (PAT).

E. From the build server, run config.cmd.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

You have an application that consists of several Azure App Service web apps and Azure functions. You need to access the security of the web apps and the functions. Which Azure features can you use to provide a recommendation for the security of the application?

A

Compute & apps in Azure Security Center

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

SIMULATION - You need to create a virtual machine template in an Azure DevTest Labs environment named az400-9940427-dtl1. The template must be based on Windows Server 2016 Datacenter. Virtual machines created from the template must include the selenium tool and the Google Chrome browser. To complete this task, sign in to the Microsoft Azure portal

A
  1. Open Microsoft Azure Portal
  2. Select All Services, and then select DevTest Labs in the DEVOPS section.
  3. From the list of labs, select the az400-9940427-dtl1 lab
  4. On the home page for your lab, select + Add on the toolbar.
  5. Select the Windows Server 2016 Datacenter base image for the VM.
  6. Select automation options at the bottom of the page above the Submit button.
  7. You see the Azure Resource Manager template for creating the virtual machine.
  8. The JSON segment in the resources section has the definition for the image type you selected earlier

REMARK: https://docs.microsoft.com/en-us/azure/devtest-labs/devtest-lab-add-vm#add-an-existing-artifact-to-a-vm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

You have an Azure Resource Manager template that deploys a multi-tier application. You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application. What should you use?

A

Azure Key Vault

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

You are developing an iOS application by using Azure DevOps. You need to test the application manually on 10 devices without releasing the application to the public. Which two actions should you perform? Each correct answer presents part of the solution.

A

Distribute a new release of the application.

Register the IDs of the devices in the Apple Developer portal.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Your company has a project in Azure DevOps for a new application. The application will be deployed to several Azure virtual machines that run Windows Server 2016. You need to recommend a deployment strategy for the virtual machines. The strategy must meet the following requirements: ✑ Ensure that the virtual machines maintain a consistent configuration. Minimize administrative effort to configure the virtual machines.

What should you include in the recommendation?

A

Azure Resource Manager templates and the PowerShell Desired State Configuration (DSC) extension for WIndows.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

HOTSPOT - Your company uses Team Foundation Server 2013 (TFS 2013). You plan to migrate to Azure DevOps. You need to recommend a migration strategy that meets the following requirements:

✑ Preserves the dates of Team Foundation Version Control changesets

✑ Preserves the changes dates of work items revisions

✑ Minimizes migration effort

✑ Migrates all TFS artifacts

A

On the TFS Server Upgrade TFS to the most recent RTW Release

To perform the megration use the TFS Database Import Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

You need to recommend a Docker container build strategy that meets the following requirements:

✑ Minimizes image sizes

✑ Minimizes the security surface area of the final image What should you include in the recommendation?

A

multi-stage builds

References: https://docs.docker.com/develop/develop-images/multistage-build/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Your company uses Azure DevOps for the build pipelines and deployment pipelines of Java-based projects. You need to recommend a strategy for managing technical debt. Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

A

B. Configure pre-deployment approvals in the deployment pipeline.

C. Integrate Azure DevOps and SonarQube.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues. You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base. What should you use?

A

WhiteSource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is:

Lead Time?

Cycle Time?

Burndown?

A

Lead Time = Lead time measures the total time elapsed from the creation of work items to their completion.

Cycle Time = Cycle time measures the time it takes for your team to complete work items once they begin actively working on them.

Burndown = Burndown charts focus on remaining work within a specific time period

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources: ✑ Two resource groups ✑ Four Azure virtual machines in one resource group ✑ Two Azure SQL databases in other resource group You need to recommend a solution to deploy the resources.

Solution 1: Create a main template that will deploy the resources in one resource group and a nested template that will deploy the resources in the other resource group.

Solution 2: Create a main template that has two linked templates, each of which will deploy the resources in its respective group.

A

Solution 1: No - Beter solution : Use two linked templates, instead of the nested template.

Solution 2: Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

SIMULATION - You plan to deploy a template named D:\Deploy.json to a resource group named Deploy-lod9940427. You need to modify the template to meet the following requirements, and then to deploy the template: ✑ The address space must be reduced to support only 256 total IP addresses. ✑ The subnet address space must be reduced to support only 64 total IP addresses. To complete this task, sign in to the Microsoft Azure portal.

A
  1. Sign in to the portal,
  2. Choose template Deploy-lod9940427
  3. Select Edit template, and then paste your JSON template code into the code window.
  4. Change the ASddressPrefixes to 10.0.0.0/24 in order to support only 256 total IP addresses. addressSpace”:{“addressPrefix to 10.0.0.0/26 to support only 64 total IP addresses. “subnets”:[ { “name”:”rstSubnet”, “properties”:{ “addressPrefix”:”10.0.0.0/24” }
  5. Select Save.
  6. Select Edit parameters, provide values for the parameters that are shown, and then select OK.

8 Select Subscription. Choose the subscription you want to use, and then select OK.

  1. Select Resource group. Choose an existing resource group or create a new one, and then select OK
  2. Select Create. A new tile on the dashboard tracks the progress of your template deployment.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

You have a project in Azure DevOps. You have an Azure Resource Group deployment project in Microsoft Visual Studio that is checked in to the Azure DevOps project. You need to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The solution must minimize administrative effort. Which task type should you include in the solution?

A

Azure PowerShell

Add a single step to your build pipeline that runs the PowerShell script that’s included in the Azure Resource Group deployment project (DeployAzureResourceGroup.ps1). The script copies artifacts and then deploys the template.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Your company develops an application named App1 that is deployed in production. As part of an application update, a new service is being added to App1. The new service requires access to an application named App2 that is currently in development. You need to ensure that you can deploy the update to App1 before App2 becomes available. You must be able to enable the service in App1 once App2 is deployed. What should you do?

A

A. Implement a feature

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is xcpretty

A

xcpretty is a fast and flexible code formater

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Your company plans to use an agile approach to software development. You need to recommend an application to provide communication between members of the development team who work in locations around the world. The applications must meet the following requirements:

✑ Provide the ability to isolate the members of different project teams into separate communication channels and to keep a history of the chats within those channels. ✑ Be available on Windows 10, Mac OS, iOS, and Android operating systems. ✑ Provide the ability to add external contractors and suppliers to projects. ✑ Integrate directly with Azure DevOps. What should you recommend?

A

Slack is a popular team collaboration service that helps teams be more productive by keeping all communications in one place and easily searchable from virtually anywhere. All your messages, your files and everything from Twitter, Dropbox, Google Docs, Azure DevOps, and more all together. Slack is a popular team collaboration service that helps teams be more productive by keeping all communications in one place and easily searchable from virtually anywhere.

Teams and if not Slack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Question DRAG DROP -

You need to configure Azure Automation for the computers in Pool7. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A
  1. Create a Disired State configuration file with etension .ps1
  2. Run the Import-AzureRMAutomationDSCConfiguration Powershell cmdlet
  3. Run the Start-AzureRMAutomationDSCCompilationJob cmdlet
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

You are creating a build pipeline in Azure Pipelines. You define several tests that might fail due to third-party applications. You need to ensure that the build pipeline completes successfully if the third-party applications are unavailable. What should you do?

A

Configure flaky tests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Your company has a project in Azure DevOps for a new web application. The company uses ServiceNow for change management. You need to ensure that a change request is processed before any components can be deployed to the production environment. What are two ways to integrate ServiceNow into the Azure DevOps release pipeline? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A

Define a pre-deployment gate before the deployment to the Prod stage.

Define a post-deployment gate after the deployment to the QA stage.

TBC: only approvals gate at pre prod & qa

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

You are automating the build process for a Java-based application by using Azure DevOps. You need to add code coverage testing and publish the outcomes to the pipeline. What should you use?

A

Cobertura

Cobertura is a free Java tool that calculates the percentage of code accessed by tests. It can be used to identify which parts of your Java program are lacking test coverage. It is based on jcoverage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

You use Azure Pipelines to manage build pipelines, GitHub to store source code, and DependaBot to manage dependencies. You have an app named App1. DependaBot detects a dependency in App1 that requires an update. What should you do

A

. Approve the pull request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

You store source code in a Git repository in Azure repos. You use a third-party continuous integration (CI) tool to control builds. What will Azure DevOps use to authenticate with the tool?

A

a personal access token (PAT)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

You use Azure Artifacts to host NuGet packages that you create. You need to make one of the packages available to anonymous users outside your organization. The solution must minimize the number of publication points. What should you do?

A. Change the feed URL of the package

B. Create a new feed for the package

C. Promote the package to a release view.

D. Publish the package to a public NuGet repository

A

B

to be checked

T1Q1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

DRAG DROP - You are defining relase strategy for two applications:

App1 - Failure of App 1 has a major impact on your company. You need a small group of users, who opted in to a testing App1, to test new releases of the application.

App2 - you need to minimize the time it takes to deploy new releases of App2, and you must be able to roll back as quickly as possible.

A

App1 - Canary Deployment

App2 - Blue/Green Deployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

SIMULATION - You need to create an instance of Azure Application Insights named az400-9940427-main and configure the instance to receive telemetry data from an Azure web app named az400-9940427-main. To complete this task, sign in to the Microsoft Azure portal.

A

Step 1: Create an instance of Azure Application Insights 1. Open Microsoft Azure Portal 2. Log into your Azure account, Select Create a resource > Developer tools > Application Insights. 3. Enter the following settings, and then select Review + create. Name: az400-9940427-main -

Step 2: Configure e App Insights SDK 4. Open your ASP.NET Core Web App project in Visual Studio > Right-click on the AppName in the Solution Explorer > Select Add > Application Insights Telemetry 5. Click the Get Started button 6. Select your account and subscription > Select the Existing resource you created in the Azure portal > Click Register

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

You plan to create an image that will contain a .NET Core application. You have a Docker file that contains the following code. (Line numbers are included for reference only.) You need to ensure that the image is as small as possible when the image is built. Which line should you modify in the file?

A

Line 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

DRAG DROP - You are implementing an Azure DevOps strategy for mobile devices using App Center. You plan to use distribution groups to control access to releases. You need to create the distribution groups shown in the following table.

Group1: Application testers which are invited per Email

Group2: Early release Users who use unauthenticated public links

Group3: Application testers for all the apps of your company

A

Group1: Privat

Group2: Public

Group3: Shared

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant. You are configuring a build pipeline in Azure Pipelines that will include a task named Task1. Task1 will authenticate by using an Azure AD service principal. Which three values should you configure for Task1?

A

the tenant ID

the client secret

the app ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

You are designing an Azure DevOps strategy for your company’s development team. You suspect that the team’s productivity is low due to accumulate technical debt. You need to recommend a metric to assess the amount of the team’s technical debt. What should you recommend?

A

the percentage of overall time spent on rework

Technical Debt is the estimated cost to fix code elements issues.

Technical Debt Ratio: Ratio between the cost to develop the software and the cost to fix it. The Technical Debt Ratio formula is: Remediation cost / Development cost Which can be restated as: Remediation cost / (Cost to develop 1 line of code * Number of lines of code)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

DRAG DROP - You need to increase the security of your team’s development process. Which type of security tool should you recommend for each stage of the development process?

Design phase?

Use case formation?

A

threat modeling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

You have a GitHub repository. You create a new repository in Azure DevOps. You need to recommend a procedure to clone the repository from GitHub to Azure DevOps. What should you recommend?

A

From Import a Git repository, click Import.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

DRAG DROP - You need to increase the security of your team’s development process. Which type of security tool should you recommend for each stage of the development process?

Continuous Delivery?

A

Pen Test

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Your company develops an app for iOS. All users of the app have devices that are members of a private distribution group in Microsoft Visual Studio App Center. You plan to distribute a new release of the app. You need to identify which certificate file you require to distribute the new release from App Center. Which file type should you upload to App Center?

A

.p12

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

You are integrating Azure Pipelines and Microsoft Teams. You install the Azure Pipelines app in Microsoft Teams. You have an Azure DevOps organization named Contoso that contains a project name Project1. You subscribe to Project1 in Microsoft Teams. You need to ensure that you only receive events about failed builds in Microsoft Teams. What should you do first?

A

From Microsoft Teams, run @azure pipelines subscriptions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

You have an existing project in Azure DevOps. You plan to integrate GitHub as the repository for the project. You need to ensure that Azure Pipelines runs under the Azure Pipelines identity. Which authentication mechanism should you use?

A

GitHub App

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

DRAG DROP - You need to increase the security of your team’s development process. Which type of security tool should you recommend for each stage of the development process?

Continuous Integration?

A

static code analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

You are developing a multi-tier application. The application will use Azure App Service web apps as the front end and an Azure SQL database as the back end. The application will use Azure functions to write some data to Azure Storage. You need to send the Azure DevOps team an email message when the front end fails to return a status code of 200. Which feature should you use?

A

Availability tests in Azure Application Insights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Your development team is building a new web solution by using the Microsoft Visual Studio integrated development environment (IDE). You need to make a custom package available to all the developers. The package must be managed centrally, and the latest version must be available for consumption in Visual Studio automatically. Which three actions should you perform?

A

A. Publish the package to a feed.

B. Create a new feed in Azure Artifacts.

E. Add the package URL to the NuGet Package Manager settings in Visual Studio.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

You are developing an open source solution that uses a GitHub repository. You create a new public project in Azure DevOps. You plan to use Azure Pipelines for continuous build. The solution will use the GitHub Checks API. Which authentication type should you use?

A

GitHub App

The Azure Pipelines GitHub App is the recommended authentication type for continuous integration pipelines. By installing the GitHub App in your GitHub account or organization, your pipeline can run without using your personal GitHub identity. Builds and GitHub status updates will be performed using the Azure Pipelines identity. The app works with GitHub Checks to display build, test, and code coverage results in GitHub.

> Checks, are unavailable with OAuth

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

DRAG DROP - You are planning projects for three customers. The customers all plan to use Azure DevOps for work item management. Which work item process should you use for each customer?

Liware: Track Product Backlog Items (PBI) on the Kanban Board. Break the PBIs down into tasks on the task board

A

SCRUM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

Project 6 will provide support forbuild and deployment pipelines Deployment will be allowed only if the number of current work items representing active Software bugs is 0.

Question DRAG DROP - You need to implement Project6. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A
  1. Open the release pipeline editor
  2. Add Query Work Items
  3. Enable Gates
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

You use Azure Pipelines to manage project builds and deployments. You plan to use Azure Pipelines for Microsoft Teams to notify the legal team when a new build is ready for release. You need to configure e the Organization Settings in Azure DevOps to support Azure Pipelines for Microsoft Teams. What should you turn on?

A

Third-party application access via OAuth

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues. You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base. What should you use?

A

WhiteSource Bolt

WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifcally for integration with Azure DevOps and Azure DevOps Server.

78
Q

Your company has an on-premises Bitbucket Server that is used for Git-based source control. The server is protected by a firewall that blocks inbound Internet traffic. You plan to use Azure DevOps to manage the build and release processes. Which two components are required to integrate Azure DevOps and Bitbucket? Each correct answer presents part of the solution.

A

D. a self-hosted agent

E. an External Git service connection

79
Q

You have a multi-tier application that has an Azure Web Apps front end and an Azure SQL Database back end. You need to recommend a solution to capture and store telemetry data. The solution must meet the following requirements: ✑ Support using ad-hoc queries to identify baselines. ✑ Trigger alerts when metrics in the baseline are exceeded. ✑ Store application and database metrics in a central location. What should you include in the recommendation?

A

C. Azure Application Insights

D. Azure Log Analytics

TBC

80
Q

DRAG DROP - You are configuring Azure Pipelines for a projects in Azure DevOps.

Which version control system should you recommend for the project?

The project team requires a centralized version control system to ensure that developers work with the most recent version.

A

Subversion

TBC

81
Q

You have an Azure DevOps organization named Contoso and an Azure DevOps project named Project1. You plan to use Microsoft-hosted agents to build container images that will host full Microsoft .NET Framework apps in a YAML pipeline in Project1. What are two possible virtual machine images that you can use for the Microsoft-hosted agent pool? Each correct answer presents a complete solution.

A

A. vs2017-win2016

B. ubuntu-16.04

82
Q

Project2 will use an automatic build policy. A small team of developers named team2 will work independly on changes to the project. Team2 members will not have permissions to project2.

Question DRAG DROP - You need to implement the code flow strategy for Project2 in Azure DevOps. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A
  1. Create a Fork
  2. Create a Build Policy
  3. Create s Branch
    - Why Create a Fork? Because: “– Enable Team2 to work independently on changes to a –> copy
83
Q

You plan to use Azure Repos for all the projects. Which version control system should you use for each project?

Project must be able to restrict access nividual files and folders on the repository?

A

Team foundation Version Control

TBC

84
Q

You have an Azure DevOps organization named Contoso and an Azure subscription. You use Azure DevOps to build a containerized app named App1 and deploy App1 to an Azure container instance named ACI1. You need to restart ACI1 when App1 stops responding. What should you do?

A

Add a liveness probe to the YAML configuration of App1

85
Q

You plan to share packages that you wrote, tested, validated, and deployed by using Azure Artifacts. You need to release multiple builds of each package by using a single feed. The solution must limit the release of packages that are in development. What should you use?

Views enable you to share subsets of the NuGet, npm, Maven, and Python package-versions in your feed with consumers.

A

. upstream sources

TBC

86
Q

You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements: ✑ The builds must access an on-premises dependency management system. ✑ The build outputs must be stored as Server artifacts in Azure DevOps. ✑ The source code must be stored in a Git repository in Azure DevOps.

Solution: Configure the build pipeline to use a Hosted VS 2017 agent pool. Include the Java Tool Installer task in the build pipeline.

A

No - https://azuredevopslabs.com/labs/vstsextend/octopus/

87
Q

This question is part of a series of questions that present the same scenario.

You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment. You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos.

Solution 1: You create an email subscription to an Azure DevOps notification?

Solution 2: You create a service hook subscription that uses the code pushed event.

Solution 3: You add a trigger to the build pipeline.

A

Solution 1 is NO

Solution 2 is Yes

Solution 3 is “Yes”

It should be “yes”, a build pipeline trigger can invoke 3rd party services

88
Q

You are designing the security validation strategy for a project in Azure DevOps. You need to identify package dependencies that have known security issues and can be resolved by an update. What should you use?

A

SonarQube

TBC (Octopus)

89
Q

DRAG DROP - You are planning projects for three customers.The customers all plan to use Azure DevOps for work item management. Which work item process should you use for each customer?

Contoso: Track User Stories and bugs on the Kanban Board. Track the Task and Bugs on the Task Board?

A

Agile

90
Q

DRAG DROP - Your company has a project in Azure DevOps. You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault. You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege. What should you include in the recommendation?

Enable key vaults for template deploying by using?

A

Key Vault access policy. (Old: advanced access policy)

91
Q

Your company plans to use an agile approach to software development. You need to recommend an application to provide communication between members of the development team who work in locations around the world. The applications must meet the following requirements:

✑ Provide the ability to isolate the members of different project teams into separate communication channels and to keep a history of the chats within those channels.

✑ Be available on Windows 10, Mac OS, iOS, and Android operating systems.

✑ Provide the ability to add external contractors and suppliers to projects. Integrate directly with Azure DevOps.

What should you recommend?

A

Microsoft Teams

92
Q

Your company creates a new Azure DevOps team. You plan to use Azure DevOps for sprint planning. You need to visualize the flow of your work by using an agile methodology. Which Azure DevOps component should you use?

A

Kanban Board

93
Q

You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources: ✑ Two resource groups ✑ Four Azure virtual machines in one resource group ✑ Two Azure SQL databases in other resource group You need to recommend a solution to deploy the resources.

Solution1: Create two standalone templates, each of which will deploy the resources in its respective group.

Solution2: Create a single standalone template that will deploy all the resources.

A

Solution1: each of which will deploy the resources in its respective group ?

Answer YES

Solution2: Deploying 2 RGs, 4 VMs in RG1, and 2SQL in RG2 is very much possible in a single template. So the Answer should be A.Yes??

Best Solution: Use two templates, one for each resource group, and link the templates.

94
Q

Your company hosts a web application in Azure. The company uses Azure Pipelines for the build and release management of the application. Stakeholders report that the past few releases have negatively affected system performance. You con

A

Gate

95
Q

You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure virtual machine scale set named VMSS1. VMSS1 hosts a web application named WebApp1. WebApp1 uses stateful sessions. The WebApp1 installation is managed by using the Custom Script extension. The script resides in an Azure Storage account named sa1. You plan to make a minor change to a UI element of WebApp1 and to gather user feedback about the change. You need to implement limited user testing for the new version of WebApp1 on VMSS1. Which three actions should you perform?

A

Modify the load balancer settings of VMSS1.

Upload a custom script file to sa1

Modify the Custom Script extension settings of VMSS1.

96
Q

You have a branch policy in a project in Azure DevOps. The policy requires that code always builds successfully.

You need to ensure that a specific user can always merge changes to the master branch, even if the code fails to compile. The solution must use the principle of least privilege. What should you do?

A

From the Security settings of the branch, modify the access control for the user.

97
Q

You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication. What should you do first?

A

Register GitHub in Azure AD.

98
Q

SIMULATION - You need to ensure that the https://contoso.com/statushook webhook is called every time a repository named az40010480345acr1 receives a new version of an image named dotnetapp. To complete this task, sign in to the Microsoft Azure portal.

A

Sign in to the Azure portal.

  1. Navigate to the container registry az40010480345acr1.
  2. Under Services, select Webhooks.
  3. Select the existing webhook https://contoso.com/statushook, and double-click on it to get its properties.
  4. For Trigger actions select image push

(scope is dontnetapp:* – https://docs.microsoft.com/en-us/azure/container-registry/container-registry-webhook)

99
Q

Your company uses Azure DevOps. Only users who have accounts in Azure Active Directory can access the Azure DevOps environment. You need to ensure that only devices that are connected to the on-premises network can access the Azure DevOps environment. What should you do?

A

. In Azure Active Directory, configure conditional access

100
Q

DRAG DROP - You need to increase the security of your team’s development process. Which type of security tool should you recommend for each stage of the development process? To answer, drag the appropriate security tools to the correct targets. Each security tool may be used once, more than once, or not at all.

Pull Request?

Continous integration?

Continuous delivery?

A

Pull Request? = Static code analysis

Continous integration? = Static code analysis

Continuous delivery? = PenTesting

101
Q

Your company has 60 developers who are assigned to four teams. Each team has 15 members. The company uses an agile development methodology. You need to structure the work of the development teams so that each team owns their respective work while working together to reach a common goal. Which parts of the taxonomy should you enable the team to perform autonomously?

A

Stories and Tasks

“Management owns Epics and Features, which provide alignment. Teams own Stories and Tasks and have autonomy on how they execute.

102
Q

You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements: ✑ The builds must access an on-premises dependency management system. ✑ The build outputs must be stored as Server artifacts in Azure DevOps. ✑ The source code must be stored in a Git repository in Azure DevOps.

Solution1: Configure an Octopus Tentacle on an on-premises machine. Use the Package Application task in the build pipeline.

Solution2: Install and configure a self-hosted build agent on an on-premises machine. Configure the build pipeline to use the Default agent pool. Include the Java Tool Installer task in the build pipeline.

A

Solution 1 : No

Solution 2 : Yes

103
Q

HOTSPOT - You have a project in Azure DevOps. You plan to create a build pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault. You need to ensure that you can dynamically generate the resource ID of the key vault during template deployment. What should you include in the template? To answer, select the appropriate options in the answer area.

A

“Microsoft.Resouce/deployment”

“templateLink”

104
Q

DRAG DROP - You need to recommend project metrics for dashboards in Azure DevOps. Which chart widgets should you recommend for each metric?

The elapsed Time from thr creation of the work item to their comletion.

A

Lead Time

105
Q

Project 5 will contain a Git Repository in Azure Repos and a continuous integration trigger that will initiate a build in response to any change exept for changes within /folder1 of the repository

Question HOTSPOT - How should you configure the filters for the Project5 trigger? To answer, select the appropriate options in the answer area.

Set a ……/folder1

Set a …. /.

A

Set a path filter for exclude /folder1

Set a path filter for include /.

106
Q

You have a multi-tier application. The front end of the application is hosted in Azure App Service. You need to identify the average load times of the application pages. What should you use?

A

Azure Application Insight

107
Q

Project2 will use an automatic build policy. A small team of developers named team2 will work independly on changes to the project. Team2 members will not have permissions to project2.

Question DRAG DROP - You need to implement the code flow strategy for Project2 in Azure DevOps. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order

A

Create a repository

Create a branch

Add a build validation Policy

108
Q

Question

HOTSPOT - Where should the build and release agents for the investment planning application suite run? To answer, select the appropriate options in the answer area.

Build agent:?

Release agent:?

A

Build agent:? A hosted service

Release agent:? A hosted service

since “investment planning” is a cloud application the correct answer is Hosted Service.

109
Q

DRAG DROP - Your company plans to deploy an application to the following endpoints: Ten virtual machines hosted in Azure ✑ Ten virtual machines hosted in an on-premises data center environment All the virtual machines have the Azure Pipelines agent. You need to implement a release strategy for deploying the application to the endpoints. What should you recommend using to deploy the application to the endpoints?

Ten virtual machines hosted in Azure?

Ten virtual machines hosted in an on-premise datacenter?

A

Both Deployment Group

Check:fFfar124143qeqrf

110
Q

You use a Git repository in Azure Repos to manage the source code of a web application. Developers commit changes directly to the master branch. You need to implement a change management procedure that meets the following requirements:

✑ The master branch must be protected, and new changes must be built in the feature branches firdt

✑ Changes must be reviewed and approved by at least one release manager before each merge.

✑ Changes must be brought into the master branch by using pull requests.

What should you configure in Azure Repos

A

branch policies of the master branch

111
Q

DRAG DROP - You are developing a full Microsoft .NET Framework solution that includes unit tests. You need to configure SonarQube to perform a code quality validation of the C# code as part of the build pipelines. Which four tasks should you perform in sequence?

A

Prepare Analysis Configuration

Visua Studio Build

Visual Studio Test

Run Code Analysis

112
Q

Project3: Project3 will be integrated with SonarQube

Question In Azure DevOps, you create Project3. You need to meet the requirements of the project. What should you do?

A

From SonarQube, create a project

Then Obtain a token

Then create a service point

113
Q

You have an Azure DevOps organization named Contoso. You need to receive Microsoft Teams notifications when work items are updated. What should you do?

A

From Microsoft Teams, configure a connector

TBC

114
Q

You have a project in Azure DevOps named Project1. Project1 contains a pipeline that builds a container image named Image1 and pushes Image1 to an Azure container registry named ACR1. Image1 uses a base image stored in Docker Hub. You need to ensure that Image1 is updated automatically whenever the base image is updated. What should you do?

A

Create and run an Azure Container Registry task.

115
Q

SIMULATION - You need to ensure that Microsoft Visual Studio 2017 can remotely attach to an Azure Function named fa-11566895. To complete this task, sign in to the Microsoft Azure portal.

A
  1. Navigate in the Azure portal to your function app fa-11566895 and click on Configuration in left panel
  2. Go to the “General settings”
  3. Under “Debugging” set Remote Debugging to On and set Remote Visual Studio version to 2017.
116
Q

You have a Microsoft ASP.NET Core web app in Azure that is accessed worldwide. You need to run a URL ping test once every five minutes and create an alert when the web app is unavailable from specific Azure regions. The solution must minimize development time. What should you do?

A

Create an Azure Application Insights availability test and alert.

117
Q

You have a private project in Azure DevOps. You need to ensure that a project manager can create custom work item queries to report on the project’s progress. The solution must use the principle of least privilege. To which security group should you add the project manager?

A

Contributor

Reference: https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions

118
Q

DRAG DROP - Your company has a project in Azure DevOps. You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault. You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege. What should you include in the recommendation?

Restrict Access to the secrets in key vault by using?

A

Azure Key Vault Access Policy

119
Q

HOTSPOT - You currently use JIRA, Jenkins, and Octopus as part of your DevOps processes. You plan to use Azure DevOps to replace these tools. Which Azure DevOps service should you use to replace each tool? To answer, select the appropriate options in the answer area.

A

JIRA: Board

Jenkins: Build Pipelines

Octopus: Release Pipeline

120
Q

Your company develops a client banking application that processes a large volume of data. Code quality is an ongoing issue for the company. Recently, the code quality has deteriorated because of an increase in time pressure on the development team. You need to implement static code analysis. During which phase should you use static code analysis

A

build

121
Q

Your company uses the following resources: ✑ Windows Server 2019 container images hosted in an Azure Container Registry. ✑ Azure virtual machines that run the latest version of Ubuntu ✑ An Azure Log Analytics workspace ✑ Azure Active Directory (Azure AD) ✑ An Azure key vault For which two resources can you receive vulnerability assessments in Azure Security Center?

A

the Azure virtual machines that run the latest version of Ubuntu

The Windows Server 2019 container images hosted in the Azure Container Registry.

122
Q

You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure SQL database named DB1. You need to create a release pipeline that uses the Azure SQL Database Deployment task to update DB1. Which artifact should you deploy?

A

DACPAC

123
Q

Your company uses a Git repository in Azure Repos to manage the source code of a web application. The master branch is protected from direct updates. Developers work on new features in the topic branches. Because of the high volume of requested features, it is dificult to follow the history of the changes to the master branch. You need to enforce a pull request merge strategy. The strategy must meet the following requirements: ✑ Consolidate commit histories. ✑ Merge the changes into a single commit. Which merge strategy should you use in the branch policy?

A

Squash merging

Squash merging is a merge option that allows you to condense the Git history of topic branches when you complete a pull request.

124
Q

During a code review, you discover quality issues in a Java application. You need to recommend a solution to detect quality issues including unused variables and empty catch blocks. What should you recommend?

A

In a Maven build task, select Run PMD.

PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth

125
Q

DRAG DROP - You plan to use Azure Kubernetes Service (AKS) to host containers deployed from images hosted in a Docker Trusted Registry. You need to recommend a solution for provisioning and connecting to AKS. The solution must ensure that AKS is RBAC-enabled and uses a custom service principal. Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

A
  1. az ad sp create-for-rbac - create the service principle
  2. az aks create - create the aks with the service principle
  3. az role assignment - delegate access to other resource

TBC

126
Q

DRAG DROP - You need to increase the security of your team’s development process. Which type of security tool should you recommend for each stage of the development process?

Pull Request?

A

Static Code analysis

TBC

127
Q

You plan to use Azure Repos for all the projects. Which version control system should you use for each project?

The project members must be able to work in Azure Repos directly from Xcode.

A

: Xcode is an integrated development environment (IDE) for macOS containing a suite of software development tools developed by Apple

XCode is supported by Git and Subversion

TBC

128
Q

You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed. You have a policy stating that approvals must occur within eight hours. You discover that deployment fail if the approvals take longer than two hours. You need to ensure that the deployments only fail if the approvals take longer than eight hours.

Solution1: From Post-deployment conditions, you modify the Time between re-evaluation of gates option.

Solution2: From Pre-deployment conditions, you modify the Time between re-evaluation of gates option.

Solution3: From Pre-deployment conditions, you modify the Timeout setting for pre-deployment approvals.

A

Solution1: No

Solution2: Yes or No TBC

Solution3: Yes

129
Q

You are building a Microsoft ASP.NET application that requires authentication. You need to authenticate users by using Azure Active Directory (Azure AD). What should you do first?

A

Create an app registration in Azure AD

130
Q

You plan to create in Azure DevOps. Multiple developers will work on the project. The developers will work offline e frequently and will require access to the full project history while they are offline. Which version control solution should you use?

A

Git

131
Q

Azure DevOps Server

Azure DevOps Proxy Server

A

Azure DevOps Server 8080

Azure DevOps Proxy Server 8081

132
Q

You manage a project in Azure DevOps. You need to prevent the configuration of the project from changing over time.

Solution 1: Add a code coverage step to the build pipelines.

Solution 2: Implement Continuous Integration for the project.

Solution 3: Implement Continuous Assurance for the project.

A

Solution 1: No - Code Coverage is only checking how much of your code base as testscases applied to it

Solution 2: CI has nothing to do with it

Solution 3: The basic idea behind Continuous Assurance (CA) is to setup the ability to check for “drift” from what is considered a secure snapshot of a system.

133
Q

You have 50 Node.js-based projects that you scan by using WhiteSource. Each project includes Package.json, Package-lock.json, and Npmshrinkwrap.json

A

. Add a devDependencies section to Package.json

134
Q

DRAG DROP - Your company has a project in Azure DevOps. You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault. You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege.

  1. Restrict Access to delete the Key Vault
  2. Restrict Access to the Secrets stored in Key Vault
A
  1. RBAC
  2. Key Vault access Policy

Deleting the vault is controled by RBAC， while access to key, secrect and cert is done thru access policy

135
Q

Your company creates a web application. You need to recommend a solution that automatically sends to Microsoft Teams a daily summary of the exceptions that occur in the application. Which two Azure services should you recommend? Each correct answer presents part of the solution.

A

Azure Logic Apps

Azure Application Insights

136
Q

You plan to use Azure Repos for all the projects. Which version control system should you use for each project?

The Version COntrol System must enforce the following rules on the server before merging any changes to the main branch:

  1. Changes must be reviewed by at least two project members
  2. changes must be associated by at least one work item.
A

Git

137
Q

DRAG DROP - You are creating a NuGet package. You plan to distribute the package to your development team privately. You need to share the package and test that the package can be consumed. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A

create a new Azure Artifacts feed

Publish a package

connect to an Azure Artifact feed

Install the package

138
Q

DRAG DROP - You need to recommend a solution for deploying charts by using Helm and Tiller to Azure Kubernetes Service (AKS) in an RBAC-enabled cluster. Which three commands should you recommend be run in sequence?

A

kubectl create

helm init

helm install

$ kubectl create -f rbac-config.yaml serviceaccount “tiller” created

clusterrolebinding “tiller” created

$ helm init –service-account tille

139
Q

The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt. You need to recommend changes to reduce the accumulated technical debt.

Solution1: You recommend increasing the test coverage.

Solution2: You recommend reducing the code complexity.

A

Solution1 - TBC

Solution 2: Yes

Reference: https://dzone.com/articles/fight-through-the-pain-how-to-deal-with-technical

140
Q

You have a multi-tier application that has an Azure Web Apps front end and an Azure SQL Database back end. You need to recommend a solution to capture and store telemetry data. The solution must meet the following requirements: ✑ Support using ad-hoc queries to identify baselines. ✑ Trigger alerts when metrics in the baseline are exceeded. Store application and database metrics in a central location.

What should you include in the recommendation?

A

Azure Platform as a Service (PaaS) resources, like Azure SQL and Web Sites (Web Apps), can emit performance metrics data natively to Log Analytics.

141
Q

During a code review, you discover many quality issues. Many modules contain unused variables and empty catch blocks. You need to recommend a solution to improve the quality of the code. What should you recommend?

A

In a Maven build task, select Run PMD

There is an Apache Maven PMD Plugin which allows you to automatically run the PMD code analysis tool on your project’s source code and generate a site report with its results.

142
Q

You plan to use a NuGet package in a project in Azure DevOps. The NuGet package is in a feed that requires authentication. You need to ensure that the project can restore the NuGet package automatically. What should the project use to automate the authentication?

A

an Azure Artifacts Credential Provider

143
Q

DRAG DROP - You need to recommend project metrics for dashboards in Azure DevOps. Which chart widgets should you recommend for each metric?

The remeining work

A

Burndown

144
Q

What is Perforce?

A

Perforce ist eine Software zur Versionsverwaltung von Dateien und Verzeichnissen.

TBC

145
Q

You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling.

You use Azure DevOps to build a web app named App1 and deploy App1 to VMSS1. App1 is used heavily and has usage patterns that vary on a weekly basis. You need to recommend a solution to detect an abnormal rise in the rate of failed requests to App1. The solution must minimize administrative effort. What should you include in the recommendation?

A

the Smart Detection feature in Azure Application Insights

146
Q

HOTSPOT - Your company is building a new web application. You plan to collect feedback from pilot users on the features being delivered. All the pilot users have a corporate computer that has Google Chrome and the Microsoft Test & Feedback extension installed. The pilot users will test the application by using Chrome. You need to identify which access levels are required to ensure that developers can request and gather feedback from the pilot users. The solution must use the principle of least privilege. Which access levels in Azure DevOps should you identify? To answer, select the appropriate options in the answer area.

Developers?

Pilot User?

A

Developers? Basic

Pilot User? Stakeholder

147
Q

Case Study

Current Technical Issue - The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration nodes are registered by using the following command.

Question: To resolve the current technical issue, what should you do to the Register-AzureRmAutomationDscNode command?

A

Change the ConfigurationMode parameter from ApplyOnly to ApplyAndAutocorrect.

148
Q

You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed. You have a policy stating that approvals must occur within eight hours. You discover that deployment fail if the approvals take longer than two hours. You need to ensure that the deployments only fail if the approvals take longer than eight hours.

Solution1: From Post-deployment conditions, you modify the Timeout setting for post-deployment approvals.

A

Solution 1: no- should be predeployment

149
Q

You are automating the testing process for your company. You need to automate UI testing of a web application. Which framework should you use?

A

Selenium

Performing user interface (UI) testing as part of the release pipeline is a great way of detecting unexpected changes, and need not be dificult. Selenium can be used to test your website during a continuous deployment release and test automation

150
Q

SIMULATION - You need to configure an Azure web app named az400-9940427-main to contain an environmental variable named “MAX_ITEMS”. The environmental variable must have a value of 50. To complete this task, sign in to the Microsoft Azure portal.

A
  1. In the Azure portal, navigate to the az400-9940427-main app’s management page. In the app’s left menu, click Configuration > Application settings.
  2. Click New Application settings
  3. Enter the following: ✑ Name: MAX_ITEMS ✑ Value: 50

“In App Service, app settings are variables passed as environment variables to the application code.”

151
Q

HOTSPOT - Your company is creating a suite of three mobile applications. You need to control access to the application builds. The solution must be managed at the organization level. What should you use?

Groups to control the build access?

Group Type?

A

Groups to control the build access? - Microsoft Visual Studio App Center distribution Groups

Group Type? - Shared

152
Q

SIMULATION - You need to prepare a network security group (NSG) named az400-9940427-nsg1 to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet. To complete this task, sign in to the Microsoft Azure portal.

A
  1. Open Microsoft Azure Portal and Log into your Azure account.
  2. Select network security group (NSG) named az400-9940427-nsg1
  3. Select Settings, Outbound security rules, and click Add
  4. Click Advanced
  5. Change the following settings: ✑ Destination Port range: 8080 ✑ Protocol. TCP ✑ Action: Allow

Remark: Check if 443 is right

153
Q

Your company is building a new solution in Java. The company currently uses a SonarQube server to analyze the code of .NET solutions. You need to analyze and monitor the code quality of the Java solution. Which task types should you add to the build pipeline?

A

Maven

154
Q

You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1. You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines. What should you do?

A

Use a variable group to store values that you want to control and make available across multiple pipelines.

155
Q

DRAG DROP - You are implementing a package management solution for a Node.js application by using Azure Artifacts. You need to configure the development environment to connect to the package repository. The solution must minimize the likelihood that credentials will be leaked. Which file should you use to configure each connection?

Feed registry information?

Credentials?

A

The .npmrc file in your Project

The .npmrc file in the user’s home directory

156
Q

DRAG DROP - You are configuring Azure Pipelines for a projects in Azure DevOps.

Which version control system should you recommend for the project?

The project team provides preconfigured YAML that it wants to use to manage future pipeline configuration changes?

A

Git in Azure Repors (DevOps)

157
Q

Your company uses Azure Artifacts for package management. You need to configure an upstream source in Azure Artifacts for Python packages. Which repository type should you use as an upstream source?

A

. PyPI

158
Q

You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company’s development process: ✑ Licensing violations ✑ Prohibited libraries

Solution1: You implement continuous integration.

A

Solution1: TBC Reference: https://azuredevopslabs.com/labs/vstsextend/whitesource/

159
Q

Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically. Solution: From the Triggers tab of the build pipeline, you select Enable continuous integration.

Yes or No?

A

Yes

In Visual Designer you enable continuous integration (CI) by:

  1. Select the Triggers tab.
  2. Enable Continuous integration.
160
Q

You have a free tier of an Azure DevOps organization named Contoso. Contoso contains 10 private projects. Each project has multiple jobs with no dependencies. You frequently run the jobs on five self-hosted agents but experience long build times and frequently queued builds. You need to minimize the number of queued builds and the time it takes to run the builds. What should you do?

A

Purchase self-hosted parallel jobs.

161
Q

Your company uses cloud-hosted Jenkins for builds. You need to ensure that Jenkins can retrieve source code from Azure Repos. Which three actions should you perform?

A

. Add the Team Foundation Server (TFS) plug-in to Jenkins

Create a personal access token in your Azure DevOps account.

Create a service hook in Azure DevOps.

162
Q

SIMULATION - You have an Azure function hosted in an App Service plan named az400-9940427-func1. You need to configure az400-9940427-func1 to upgrade the functions automatically whenever new code is committed to the master branch of https://github.com/ Azure-Samples/functions-quickstart. To complete this task, sign in to the Microsoft Azure portal.

A

I think this is a better explanation: https://docs.microsoft.com/en-us/azure/azure-functions/functions-continuous-deployment

163
Q

Your company uses Azure DevOps to manage the build and release processes for applications. You use a Git repository for applications source control. You need to implement a pull request strategy that reduces the history volume in the master branch.

Solution 1: You implement a pull request strategy that uses fast-forward merges.

Solution2: You implement a pull request strategy that uses squash merges.

Solution3 : You implement a pull request strategy that uses an explicit merge.

Solution 4:You implement a pull request strategy that uses a three-way merge.

A

Solution 1: No

Solution2: Yes

Solution 3 : No

Solution 4: No

164
Q

You have a private distribution group that contains provisioned and unprovisioned devices. You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center. What should you do?

A

Register the devices on the Apple Developer portal.

TBC

165
Q

You plan to provision a self-hosted Linux agent. Which authentication mechanism should you use to register the self-hosted agent?

A

personal access token (PAT)

166
Q

Your company deploys applications in Docker containers. You want to detect known exploits in the Docker images used to provision the Docker containers. You need to integrate image scanning into the application lifecycle. The solution must expose the exploits as early as possible during the application lifecycle. What should you configure?

A

. a task executed in the continuous integration pipeline and a scheduled task that analyzes the image registry

No way you should do manual task.

167
Q

You have a private distribution group that contains provisioned and unprovisioned devices. You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center. What should you do?

A

Register the devices on the Apple Developer portal.

168
Q

Your company uses Azure DevOps to manage the build and release processes for applications. You use a Git repository for applications source control. You plan to create a new branch from an existing pull request. Later, you plan to merge the new branch and the target branch of the pull request. You need to use a pull request action to create the new branch. The solution must ensure that the branch uses only a portion of the code in the pull request. Which pull request action should you use?

A

Cherry-pick a pull request

169
Q

DRAG DROP - You need to recommend project metrics for dashboards in Azure DevOps. Which chart widgets should you recommend for each metric?

The elapsed time to complete work items once they are active

A

Cycle Time

170
Q

Your company has a hybrid cloud between Azure and Azure Stack. The company uses Azure DevOps for its full CI/CD pipelines. Some applications are built by using Erlang and Hack. You need to ensure that Erlang and Hack are supported as part of the build strategy across the hybrid cloud. The solution must minimize management overhead. What should you use to execute the build pipeline?

A

D. Azure DevOps self-hosted agents on virtual machines that run on Azure Stack

TBC

References: https://docs.microsoft.com/en-us/azure/azure-stack/user/azure-stack-compute-overview

171
Q

You need to execute inline testing of an Azure DevOps pipeline that uses a Docker deployment model. The solution must prevent the results from being published to the pipeline. What should you use for the inline testing?

A

a Docker Compose

172
Q

DRAG DROP - You are configuring Azure DevOps build pipelines. You plan to use hosted build agents. Which build agent pool should you use to compile each application type?

An application that runs on iOS?

An IIS Web application that runs in docker?

A

Hosted maxOS

Hosted Windows container

T2Q10 - TBC

173
Q

Project 4 will provide support for a build pipeline that creates a docker image and pushes the image to ACR. Project 4 will use an existing docker file.

Question You need to implement Project4. What should you do first?

A

Add a Docker task to the build pipeline

174
Q

You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements: ✑ The builds must access an on-premises dependency management system. ✑ The build outputs must be stored as Server artifacts in Azure DevOps. ✑ The source code must be stored in a Git repository in Azure DevOps.

Solution 1: Configure the build pipeline to use a Hosted Ubuntu agent pool. Include the Java Tool Installer task in the build pipeline.

A

Solution 1: No. A hosted agent does nor have access to on-prem servers.

175
Q

You have an Azure DevOps project. Your build process creates several artifacts. You need to deploy the artifacts to on-premises servers.

Solution1: You deploy a Kubernetes cluster on-premises. You deploy a Helm agent to the cluster. You add a Download Build Artifacts task to the deployment pipeline.

Solution2: You deploy a Docker build to an on-premises server. You add a Download Build Artifacts task to the deployment pipeline.

Solution3: You deploy an Azure self-hosted agent to an on-premises server. You add a Copy and Publish Build Artifacts task to the deployment pipeline.

A

Solution1: NO

Solution2: NO

Solution 3: Agent is OK - rest TBC

176
Q

You are developing an application. The application source has multiple branches. You make several changes to a branch used for experimentation. You need to update the main branch to capture the changes made to the experimentation branch and override the history of the Git repository.

Which Git option should you use?

A

Rebase

177
Q

You confgure an Azure Application Insights availability test. You need to notify the customer services department at your company by email when availability is degraded. You create an Azure logic app that will handle the email and follow up actions. Which type of trigger should you use to invoke the logic app?

A

an HTTP trigger

178
Q

You are designing a build pipeline in Azure Pipelines. The pipeline requires a self-hosted agent. The build pipeline will run once daily and will take 30 minutes to complete. You need to recommend a compute type for the agent. The solution must minimize costs. What should you recommend?

A

an Azure virtual machine scale set

TBC

179
Q

You have a build pipeline in Azure Pipelines that uses different jobs to compile an application for 10 different architectures. The build pipeline takes approximately one day to complete. You need to reduce the time it takes to execute the build pipeline. Which two actions should you perform?

A

C. Increase the number of parallel jobs

E. Create an agent pool

180
Q

You are deploying a server application that will run on a Server Core installation of Windows Server 2019. You create an Azure key vault and a secret. You need to use the key vault to secure API secrets for third-party integrations. Which three actions should you perform?

A

Modify the application to access the key vault.

Configure a Key Vault access policy.

Deploy a virtual machine that uses a system-assigned managed identity.

181
Q

SIMULATION - You plan to store signed images in an Azure Container Registry instance named az4009940427acr1. You need to modify the SKU for az4009940427acr1 to support the planned images. The solution must minimize costs. To complete this task, sign in to the Microsoft Azure portal.

A
  1. Open Microsoft Azure Portal, and select the Azure Container Registry instance named az4009940427acr1.
  2. Sku change: go to Azure Container Registry, choose update in overview blade. Change sku.
  3. Under Policies, select Content Trust > Enabled > Save
182
Q

A deployment pool named Pool7 that contains 10 Azure virtual machines that run Windows Server 2016

Question You add the virtual machines as managed nodes in Azure Automation State Configuration. You need to configure the managed computers in Pool7. What should you do next?

A

Run the Register-AzureRmAutomationDscNode Azure Powershell cmdlet

183
Q

A branching strategy that supports developing new functionality in isolation must be used.

Question Which branching strategy should you recommend for the investment planning applications suite?

A

feature isolation

Development isolation strategy have individual branches for development and Support changes. whereas feature isolation - branch will be used only for the functionality. “Work can be isolated in development branches by feature, organization, or temporary collaboration.” Development isolation not necessarily isolated by features.

184
Q

HOTSPOT - You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries. You need to ensure that the project can be scanned for known security vulnerabilities in the open source libraries. What should you do? To answer, select the appropriate options in the answer area.

Object to create?

Service to use?

A

Object: A build task

Service: WhiteSource Bolt

185
Q

DRAG DROP - You have an Azure Kubernetes Service (AKS) implementation that is RBAC-enabled. You plan to use Azure Container Instances as a hosted development environment to run containers in the AKS implementation. You need to configure Azure Container Instances as a hosted environment for running the containers in AKS. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A
  1. az role assignment create
  2. create a YAML file
  3. kubectl apply
186
Q

Question HOTSPOT - You need to configure a cloud service to store the secrets required by the mobile applications to call the share pricing service. What should you include in the solution? To answer, select the appropriate options in the answer area.

Required Secrets?

Storage Location?

A

Required secrets: Username and Password;

Storage Location: Azure Key Vault

187
Q

Question DRAG DROP - Which package feed access levels should be assigned to the Developers and Team Leaders groups for the investment planning applications suite? To answer, drag the appropriate access levels to the correct groups. Each access level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  1. Developers
  2. Team Leaders
A
  1. Developers - Reader
  2. Team Leaders - Owner
188
Q

Your company builds a multi-tier web application. You use Azure DevOps and host the production application on Azure virtual machines. Your team prepares an Azure Resource Manager template of the virtual machine that you will use to test new features. You need to create a staging environment in Azure that meets the following requirements: Minimizes the cost of Azure hosting ✑ Provisions the virtual machines automatically ✑ Uses the custom Azure Resource Manager template to provision the virtual machines What should you do?

A

In Azure DevOps, configure new tasks in the release pipeline to create and delete the virtual machines in Azure DevTest Labs

The extension installs three tasks:

✑ Create a VM

✑ Create a custom image from a VM

✑ Delete a VM

189
Q

Your company has a project in Azure DevOps for a new web application. The company identifies security as one of the highest priorities. You need to recommend a solution to minimize the likelihood that infrastructure credentials will be leaked. What should you recommend?

A

Add Azure Key Vault references to Azure Resource Manger templates.

TBC

190
Q

DRAG DROP - You need to configure access to Azure DevOps agent pools to meet the following requirements:

✑ Use a project agent pool when authoring build or release pipelines.

✑ View the agent pool and agents of the organization.

✑ Use the principle of least privilege.

Which role memberships are required for the Azure DevOps organization and the project?

A

Organization -> Reader

Project -> User

Reader –Members of this role can view the agent pool as well as agents. You typically use this to add operators that are responsible for monitoring the agents and their health.

User —Members of this role can use the project agent pool when authoring pipelines.

191
Q

Your company implements an Agile development methodology. You plan to implement retrospectives at the end of each sprint. Which three questions should you include?

A

B. Who should have performed better?

C. What could have gone better?

E. What should we try next?

192
Q

Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically.

Solution 1: From the Continuous deployment trigger settings of the release pipeline, you enable the Pull request trigger setting.

Solution 2: From the Pre-deployment conditions settings of the release pipeline, you select After stage.

Solution 3: From the Pre-deployment conditions settings of the release pipeline, you select Batch changes while a build is in progress.

Solution 4: From the Triggers tab of the build pipeline, you select Enable continuous integration.

A

Solution 1: No

Solution 2 No

Solution 3: Yes - . This is with regards to the Build pipeline, not the release.

Solution 4: Yes

AZ-400 (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions