[Nov-2023] Microsoft AZ-400 Official Cert Guide PDF [Q93-Q110]

November 1, 2023 admin 0

Categories : AZ-400 , Microsoft

Rate this post

[Nov-2023] Microsoft AZ-400 Official Cert Guide PDF

Exam AZ-400: Designing and Implementing Microsoft DevOps Solutions – VCEPrep

To pass the AZ-400 exam, candidates should have a strong understanding of DevOps practices and Microsoft technologies. They should also be familiar with software development methodologies, such as Agile and Scrum. Additionally, candidates should have experience working with cloud technologies, particularly Microsoft Azure. By passing AZ-400 exam, IT professionals can demonstrate their expertise in DevOps and improve their career prospects in this field.

NO.93 You have an application named App1 that has a custom domain of app.contoso.com.
You create a test in Azure Application Insights as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE:Each correct selection is worth one point.

Explanation

Box 1: every five minutes at a random location
Test frequency: Sets how often the test is run from each test location. With a defaultfrequency of five minutes and five test locations, your site is tested on average every minute.
Box 2:
Parse dependent requests: Test requests images, scripts, style files, and other files that are part of the web page under test. The recorded response time includes the time taken to get these files. The test fails if any of these resources cannot be successfully downloaded within the timeout for the whole test.
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/monitor-web-app-availability

NO.94 You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity.
The solution must use the principle of least privilege.
To complete this task, sign in to the Microsoft Azure portal.

1. In Azure portal navigate to the az400-9940427-main app.
2. Scroll down to the Settings group in the left navigation.
3. Select Managed identity.
4. Within the System assigned tab, switch Status to On. Click Save.

References:
https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity

NO.95 You need to implement Project6.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them m the correct order.

Explanation

Scenario: Implement Project3, Project5, Project6, and Project7 based on the planned changes

Step 1: Open the release pipeline editor.
In the Releases tab of Azure Pipelines, select your release pipeline and choose Edit to open thepipeline editor.
Step 2: Enable Gates.
Choose the pre-deployment conditions icon for the Production stage to open the conditions panel. Enable gates by using the switch control in the Gates section.
Step 3: Add Query Work items.
Choose + Add and select the Query Work Items gate.
Configure the gate by selecting an existing work item query.

Note: A case for release gate is:
Incident and issues management. Ensure the required status for work items, incidents, and issues. For example, ensure deployment occurs only if no priority zero bugs exist, and validation that there are no active incidents takes place after deployment.
References:
https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deploy-using-approvals?view=azure-devops#co

NO.96 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed.
You have a policy stating that approvals must occur within eight hours.
You discover that deployment fail if the approvals take longer than two hours.
You need to ensure that the deployments only fail if the approvals take longer than eight hours.
Solution: From Post-deployment conditions, you modify the Timeout setting for post-deployment approvals.
Does this meet the goal?

Yes

Use Pre-deployments conditions instead.
Use a gate instead of an approval instead.
References:
https://docs.microsoft.com/en-us/azure/devops/pipelines/release/approvals/gates

NO.97 In Azure DevOps, you create Project3.
You need to meet the requirements of the project.
What should you do first?

From Azure DevOps, create a service endpoint.

From SonarQube, obtain an authentication token.

From Azure DevOps, modify the build definition.

From SonarQube, create a project.

The first thing to do is to declare your SonarQube server as a service endpoint in your VSTS/DevOps project settings.
References: https://docs.sonarqube.org/display/SCAN/Analyzing+with+SonarQube+Extension+for+vsts-TFS

NO.98 You have an Azure DevOps project that contains a release pipeline and a Git repository.
When a new code revision is committed to the repository, a build and release is triggered.
You need to ensure that release information for the pipeline is added automatically to the work items associated to the Get commit.
What should you do?

Modify the Integrations options for the pipeline.

Modify the post-deployment conditions for the last stage of the pipeline.

Add an agentless job to the pipeline.

Modify the service hooks for the project.

Explanation
Service hooks in Azure DevOps allow you totrigger actions in other tools based on events that occur in your Azure DevOps project. To automatically add release information to work items associated with a Get commit, you would need to configure a service hook that listens for commit events in yourGet repository, and then sends the release information to the appropriate work items.
Here’s the steps you can follow to set up a service hook for this purpose:
* In your Azure DevOps project, navigate to the project settings by clicking on the gear iconin the top right corner of the page.
* Select “Service Hooks” from the left-hand menu.
* Click on the “New Subscription” button to create a new service hook.
* In the “Event” drop-down menu, select “Code pushed” to trigger the service hook when a new code revision is committed to the repository.
* In the “Actions” section, select the action that you want to take place when the service hook is triggered.
For example, you might use the “Link work items to commits” action to automatically associate work items with therelevant commits.
* Configure the remaining settings as needed, and then click on the “Create” button to create the service hook.
You can find more information on Service hooks in Azure DevOps by following this linkhttps://docs.microsoft.com/en-us/azure/devops/service-hooks/overview?view=azure-devops

NO.99 Your company plans to deploy an application to the following endpoints:
* Ten virtual machines hosted in Azure
* Ten virtual machines hosted in an on-premises data center environment All the virtual machines have the Azure Pipelines agent.
You need to implement a release strategy for deploying the application to the endpoints.
What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate components to the correct endpoints. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Explanation

Box 1: A deployment group
When authoring an Azure Pipelines or TFS Release pipeline, you can specify the deployment targets for a job using a deployment group.
If the target machines are Azure VMs, you can quickly and easily prepare them by installing the Azure Pipelines Agent Azure VM extension on each of the VMs, or by using the Azure Resource Group Deployment task in your release pipeline to create a deployment group dynamically.
Box 2: A deployment group
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups

NO.100 You need to configure Azure Automation for the computers in Pool7.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them m the correct order.

1 – Create a Desired State Configuration (DSC) configuration file that has an extension of .ps1.
2 – Run the Import-….
3 – Run the Start-….

NO.101 You have an Azure subscription that contains Azure DevOps build pipelines.
You to implement pipeline caching by using the cache task
HOW should you complete the YAML definition? TO answer, select the appropriate options in the answer are a.

NO.102 You have an Azure subscription that contains a resources group named RG1. RG1 contains the following resources:
* Four Azure virtual machines that run Windows Server and have Internet Information Services (IIS) installed
* SQL Server on an Azure virtual machine
* An Azure Load Balancer
You need to deploy an application to the virtual machines in RG1 by using Azure Pipelines.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the List of actions to the answer area and arrange them in the correct order.

Explanation

Step 1: Create an agent pool
Azure Pipelines provides a pre-defined agent pool named Azure Pipelines with Microsoft-hosted agents.
Step 2: Create a deployment group
Deployment groups make it easy to define logical groups of target machines for deployment, and install the required agent on each machine.
Step 3: Execute the Azure Pipelines Agent extension to the virtual machines Install the Azure Pipelines Agent Azure VM extension Step 4: Add and configure a deployment group job for the pipeline Tasks that you define in a deployment group job run on some or all of the target servers, depending on the arguments you specify for the tasks and the job itself.
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups/howto-provision-deploymen

NO.103 Your company uses GitHub for source control. GitHub repositories store source code and store process documentation. The process documentation is saved as Microsoft Word documents that contain simple flow charts stored as .bmp files.
You need to optimize the integration and versioning of the process documentation and the flow charts. The solution must meet the following requirements:
* Store documents as plain text.
* Minimize the number of files that must be maintained.
* Simplify the modification, merging, and reuse of flow charts.
* Simplify the modification, merging, and reuse of documents.
What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.

Explanation

Box 1: Markdown (.md)
Github understands several text formats, including .txt and .md. .md stands for a file written in Markdown.
Box 2: Mermaid diagrams
Mermaid lets you create diagrams and visualizations using text and code.
It is a Javascript based diagramming and charting tool that renders Markdown-inspired text definitions to create and modify diagrams dynamically.
Reference:
https://ourcodingclub.github.io/tutorials/git/
https://mermaid-js.github.io/mermaid/#/

NO.104 You have a project in Azure DevOps that uses packages from multiple public feeds. Some of the feeds are unreliable.
You need to consolidate the packages into a single feed.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Create a NuGet package.
2 – Create an Azure Artifacts feed that uses upstream sources
3 – Create a Micrtosoft Visual Studio project that includes all the packages Reference:
https://docs.microsoft.com/en-us/azure/devops/artifacts/how-to/set-up-upstream-sources

NO.105 You have a project in Azure DevOps named Project1 that contains two Azure DevOps pipelines named Pipeline1 and Pipeline2.
You need to ensure that Pipeline1 can deploy code successfully to an Azure web app named webapp1. The solution must ensure that Pipeline2 does not have permission to webapp1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Create a service orincipal Azure Active Directory.
2 – In Project1, create a service connection.
3 – In Project1, configure permissions.
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/library/connect-to-azure?view=azure-devops

NO.106 You are configuring the settings of a new Git repository in Azure Repos.
You need to ensure that pull requests in a branch meet the following criteria before they are merged:
Committed code must compile successfully.
Pull requests must have a Quality Gate status of Passed in SonarCloud.
Which policy type should you configure for each requirement? To answer, drag the appropriate policy types to the correct requirements. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/devops/repos/tfvc/add-check-policies
https://azuredevopslabs.com/labs/vstsextend/sonarcloud/

NO.107 Your company has four projects. The version control requirements for each project are shown in the following table.

You plan to use Azure Repos for all the projects.
Which version control system should you use for each project? To answer, drag the appropriate version control systems to the correct projects. Each version control system may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Explanation
1 -> TFVS Refer :
https://docs.microsoft.com/en-us/azure/devops/repos/tfvc/control-access-team-foundation-version-control?view=
2 -> TFVS Refer :
https://docs.microsoft.com/en-us/azure/devops/repos/tfvc/add-check-policies?view=azure-devops
3 -> Git Refer :
https://docs.microsoft.com/en-us/azure/devops/repos/git/share-your-code-in-git-xcode?view=azure-devops
4 -> TFVS Refer
:https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions?view=azure-devops#tfvc

NO.108 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage a project in Azure DevOps.
You need to prevent the configuration of the project from changing over time.
Solution: Perform a Subscription Health scan when packages are created.
Does this meet the goal?

Yes

Instead implement Continuous Assurance for the project.
Note: The Subscription Security health check features in AzSK contains a set of scripts that examines a subscription and flags off security issues, misconfigurations or obsolete artifacts/settings which can put your subscription at higher risk.
Reference:
https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

NO.109 Your company uses Azure DevOps.
Only users who have accounts in Azure Active Directory can access the Azure DevOps environment.
You need to ensure that only devices that are connected to the on-premises network can access the Azure DevOps environment.
What should you do?

Assign the Stakeholder access level all users.

In Azure Active Directory, configure risky sign-ins.

In Azure DevOps, configure Security in Project Settings.

In Azure Active Directory, configure conditional access.

Conditional Access is a capability of Azure Active Directory. With Conditional Access, you can implement automated access control decisions for accessing your cloud apps that are based on conditions.
Conditional Access policies are enforced after the first-factor authentication has been completed.
References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

NO.110 As part of your application build process, you need to deploy a group of resources to Azure by using an Azure Resource Manager template located on GitHub.
Which three action should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation

Step 1: Create a release pipeline
You need to create a new pipeline.
You can integrate Azure Resource Manager templates (ARM templates) with Azure Pipelines for continuous integration and continuous deployment (CI/CD).
Step 2: Add an Azure Resource Group Deployment task
Step 3: Set the template parameters
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/add-template-to-azure-pipelines

Loading …

For more info visit:

MICROSOFT AZ-400 Exam Reference, and Microsoft Documents

Microsoft AZ-400: Designing & Implementing Microsoft DevOps Solutions is a qualifying exam required for obtaining the Microsoft Certified: DevOps Engineer Expert certification. This test is designed to measure the competence of the candidates in developing instrumentation strategies; developing an SRE (Site Reliability Engineering) strategy; developing a compliance and security plan; defining and implementing a continuous delivery & release management strategy; defining and implementing continuous integration; facilitating collaboration and communication; handling source control.

Free AZ-400 Exam Dumps to Improve Exam Score: https://www.vceprep.com/AZ-400-latest-vce-prep.html