Microsoft Microsoft Certifications AZ-400 Questions & Answers

• Question 261:

  You have an on-premises app named App1 that accesses Azure resources by using credentials stored in a configuration file.

  You plan to upgrade App1 to use an Azure service principal.

  What is required for App1 to programmatically sign in to Azure Active Directory (Azure AD)?

  A. the application ID, a client secret, and the object ID

  B. a client secret, the object ID, and the tenant ID

  C. the application ID, a client secret, and the tenant ID

  D. the application ID, a client secret, and the subscription ID

  Correct Answer: C

• Question 262:

  You have a project in Azure DevOps named Project1 that contains two environments named environment1 and environment2.

  When a new version of Project is released, the latest version is deployed to environment2, and the previous version is redeployed to environment1.

  You need to distribute users across the environments. The solution must meet the following requirements:

  New releases must be available to only a subset of the users.

  You must gradually increase the number of users that can access environment2.

  What should you use?

  A. VIP swaping

  B. web app deployment slots

  C. Azure Load Balancer

  D. Azure Traffic Manager

  Correct Answer: B

  Explanation:

  Use deployment slots

  Whenever possible, use deployment slots when deploying a new production build. When using a Standard App Service Plan tier or better, you can deploy your app to a staging environment, validate your changes, and do smoke tests. When

  you are ready, you can swap your staging and production slots. The swap operation warms up the necessary worker instances to match your production scale, thus eliminating downtime.

  Reference:

  https://docs.microsoft.com/en-us/azure/app-service/deploy-best-practices#use-deployment-slots

• Question 263:

  You have an Azure DevOps project that produces Node Package Manager (npm) packages. Multiple projects consume the packages.

  You need to configure Azure Artifacts to ensure that both the latest and pre-release versions of the packages are available for consumption.

  What should you do?

  A. Create two feed views named @prerelease and @release, Set @release as the default view. Configure a release pipeline that tags the packages as release after successful testing.

  B. Create a feed view named @prerelease. Configure a release pipeline that tags the packages as release after successful testing.

  C. Create two feed views named @prerelease and @default. Configure a release pipeline that promotes a package to the @default view after successful testing.

  D. Create two feed views named @prerelease and @release. Set @release as the default view. Configure a release pipeline that promotes a package to the @release view after successful testing.

  Correct Answer: D

  Explanation:

  Azure Artifacts: best practices

  Create and publish packages

  Follow these guidelines and best practices when creating or publishing your packages.

  * Promote your package to the correct view:

  When a package is ready for early adopters, select that package from within your feed and promote it to the @prerelease view. When the package is deemed of sufficient quality to be released, promote that package to the @release view.

  Reference: https://learn.microsoft.com/en-us/azure/devops/artifacts/concepts/best-practices

• Question 264:

  You have an Azure subscription that contains the resources shown in the following table.

  

  Project produces npm packages that are published to Feed1. Feed1 is consumed by multiple projects.

  You need to ensure that only tested packages are available for consumption. The solution must minimize development effort.

  What should you do?

  A. Create a feed view named @release and set @release as the default view. After the npm packages test successfully, configure a release pipeline that promotes a package to the @release view.

  B. Create a feed view named @release and set @release as the default view. After the npm packages test successfully, configure a release pipeline that tags the packages as release.

  C. Create a feed view named @default. After the npm packages test successfully, configure a release pipeline that tags the packages as release.

  D. Create a feed view named @default. After the npm packages test successfully, configure a release pipeline that promotes a package to the @default view.

  Correct Answer: A

  Default view

  All Artifacts feeds come with three views: @local, @prerelease, and @release. The latter two are suggested views that you can rename or delete as desired. @local is the default view that's commonly used in upstream sources.

  Promote packages

  With Azure Artifacts, you can promote packages to a specific to only share a subset of packages with your customers.

  Reference: https://learn.microsoft.com/en-us/azure/devops/artifacts/feeds/views

• Question 265:

  Your company has an Azure DevOps project that produces Node Package Manager (npm) packages. Multiple projects consume the packages.

  You need to minimize the amount of disk space used by older packages in Azure Artifacts.

  What should you modify?

  A. the retention settings of the project's release

  B. the retention settings of the project's pipeline

  C. the retention settings of the project's tests

  D. the retention settings of the company pipeline

  Correct Answer: B

  Explanation:

  Retention policies let you set how long to keep runs, releases, and tests stored in the system. To save storage space, you want to delete older runs, tests, and releases.

  The following retention policies are available in Azure DevOps in your Project settings:

  Pipeline - Set how long to keep artifacts, symbols, attachments, runs, and pull request runs.

  Release (classic) - Set whether to save builds and view the default and maximum retention settings.

  Test - Set how long to keep automated and manual test runs, results, and attachments.

  Reference: https://learn.microsoft.com/en-us/azure/devops/pipelines/policies/retention

• Question 266:

  You have an Azure subscription named Subscription1 that contains a custom Azure policy named Policy1. Policy1 is an audit policy that monitors naming convention compliance for the resources deployed to Subscription1.

  You have a pipeline named Pipeline1 in Azure Pipelines. Pipeline1 deploys Azure Resource Manager (ARM) resources to Subscription1.

  You need to ensure that the resources deployed by Pipeline1 comply with Policy1.

  What should you add to Pipeline1?

  A. a pre-deployment task that runs a security and compliance assessment

  B. a post-deployment task that runs a security and compliance assessment

  C. an ARM template deployment task to assign Policy1 to Subscription1

  D. an ARM template deployment task to deploy Policy1 to Subscription1

  Correct Answer: A

• Question 267:

  You have a GitHub repository that contains workflows. The workflows contain steps that execute predefined actions. Each action has one or more versions.

  You need to request the specific version of an action to execute.

  Which three attributes can you use to identify the version? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. the SHA-based hashes

  B. the tag

  C. the runner

  D. the branch

  E. the serial

  Correct Answer: ABD

• Question 268:

  You have an Azure subscription that contains multiple Azure pipelines.

  You need to deploy a monitoring solution for the pipelines. The solution must meet the following requirements:

  Parse logs from multiple sources.

  Identify the root cause of issues.

  What advanced feature of a monitoring tool should you include in the solution?

  A. analytics

  B. synthetic monitoring

  C. directed monitoring

  D. Alert Management

  Correct Answer: A

• Question 269:

  You manage a project by using Azure Board, and you manage the project code by using Azure Repos.

  You have a bug work item that has an ID of 123.

  You need to set the work item state to Resolved.

  What should you add to the commit message?

  A. #123 completes

  B. #123 Resolved

  C. Completed #123

  D. Fixes #123

  Correct Answer: D

  Explanation:

  Resolve work items on commit

  Close work items by mentioning keywords in commit messages. When you mention a work item in a commit that makes it to the default branch via one of the supported workflows, we will attempt to resolve that work item.

  Keywords

  The three supported keywords to trigger a resolution mention are fix, fixes, and fixed (case insensitive). Optionally, a colon can follow the keyword. Most forms of punctuation can precede or proceed the resolution mention, excluding another

  pound sign (#).

  Examples

  Fixes #123

  This fixed #123!

  Change behavior to fix: #123

  Fixes #123 and fixes #124

  Reference:

  https://learn.microsoft.com/en-us/azure/devops/repos/git/resolution-mentions

• Question 270:

  You have an Azure subscription that contains a storage account and 20 virtual machines.

  You plan to use LogRhythm for aggregation and analysis of the virtual machine logs.

  You need to configure AzLog to export the logs and push them to the storage account.

  In which format should you export the logs?

  A. JSON

  B. EVTX

  C. EVT

  D. binary

  Correct Answer: A

  Explanation:

  The LogRhythm Open Collector brings modern logs, usually in JSON format, from cloud log sources, flat file, or other formats, into the LogRhythm SIEM.

  Reference:

  https://docs.logrhythm.com/docs/OCbeats/logrhythm-open-collector