Latest Verified & Correct Microsoft AZ-400 Questions & Answers Daily Updated
100% Pass Guaranteed Download Microsoft Azure Exam PDF Q&A
Microsoft AZ-400 exam is designed for professionals looking to deepen their understanding of DevOps principles and practices. AZ-400 exam is an essential step for those who wish to obtain the Microsoft Certified: DevOps Engineer Expert certification. AZ-400 exam measures the skills and knowledge required to design and implement DevOps solutions using Microsoft technologies and tools.
NEW QUESTION # 16
Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.
You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.
What should you use?
- A. Microsoft Visual SourceSafe
- B. OWASP ZAP
- C. Code Style
- D. SourceGea
- E. Jenkins
- F. Black Duck
Answer: F
Explanation:
Secure and Manage Open Source Software
Black Duck helps organizations identify and mitigate open source security, license compliance and code-quality risks across application and container portfolios.
Black Duck Hub and its plugin for Team Foundation Server (TFS) allows you to automatically find and fix open source security vulnerabilities during the build process, so you can proactively manage risk. The integration allows you to receive alerts and fail builds when any Black Duck Hub policy violations are met.
Note: WhiteSource would also be a good answer, but it is not an option here.
References:
https://marketplace.visualstudio.com/items?itemName=black-duck-software.hub-tfs Implement Application Infrastructure Question Set 1
NEW QUESTION # 17
You need to recommend project metrics for dashboards in Azure DevOps.
Which chart widgets should you recommend for each metric? To answer, drag the appropriate chart widgets to the correct metrics. Each chart widget may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Box 1: Lead time
Lead time measures the total time elapsed from the creation of work items to their completion.
Box 2: Cycle time
Cycle time measures the time it takes for your team to complete work items once they begin actively working on them.
Box 3: Burn down
Burn down charts focus on remaining work within a specific time period.
Reference:
https://docs.microsoft.com/en-us/azure/devops/report/dashboards/velocity-guidance?view=vsts
https://docs.microsoft.com/en-us/azure/devops/report/dashboards/cycle-time-and-lead-time?view=vsts
https://docs.microsoft.com/en-us/azure/devops/report/dashboards/configure-burndown-burnup-widgets?view=vs
NEW QUESTION # 18
You have several apps that use an Azure SQL Database named db1.
You need to ensure that queries to db1 are tuned by Azure over time. The solution must only apply to db1.
To complete this task, sign in to the Microsoft Azure portal.
Answer:
Explanation:
Seesolution below.
Explanation
1. To enable automatic tuning on a single database, navigate to the database in the Azure portal and select Automatic tuning.
2. Select the automatic tuning options you want to enable and select Apply.
Note: Individual automatic tuning settings can be separately configured for each database. You can manually configure an individual automatic tuning option, or specify that an option inherits its settings from the server.
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/automatic-tuning-enable
NEW QUESTION # 19
You have an Azure Resource Manager template that deploys a multi-tier application.
You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application.
What should you use?
- A. an Appsettings.json file
- B. a Web.config file
- C. an Azure Storage table
- D. an Azure Resource Manager parameter file
- E. Azure Key Vault
Answer: E
Explanation:
When you need to pass a secure value (like a password) as a parameter during deployment, you can retrieve the value from an Azure Key Vault. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID. The key vault can exist in a different subscription than the resource group you are deploying to.
References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault- parameter
NEW QUESTION # 20
You are defining release strategies for two applications as shown in the following table.
Which release strategy should you use for each application? To answer, drag the appropriate release strategies to the correct applications. Each release strategy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
App1: Canary deployment
With canary deployment, you deploy a new application code in a small part of the production infrastructure.
Once the application is signed off for release, only a few users are routed to it. This minimizes any impact.
With no errors reported, the new version can gradually roll out to the rest of the infrastructure.
App2: Rolling deployment:
In a rolling deployment, an application's new version gradually replaces the old one. The actual deployment happens over a period of time. During that time, new and old versions will coexist without affecting functionality or user experience. This process makes it easier to roll back any new component incompatible with the old components.
NEW QUESTION # 21
You need to configure Azure Automation for the computers in Pool7.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them m the correct order.
Answer:
Explanation:
1 - Create a Desired State Configuration (DSC) configuration file that has an extension of.ps1.
2 - Run the Import-....
3 - Run the start-...
NEW QUESTION # 22
You have the Azure DevOps pipeline shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
Answer:
Explanation:
Reference:
https://azuredevopslabs.com/labs/azuredevops/continuousintegration/
NEW QUESTION # 23 
You have an Azure Kubernetes Service (AKS) pod.
You need to configure a probe to perform the following actions:
Confirm that the pod is responding to service requests.
Check the status of the pod four times a minute.
Initiate a shutdown if the pod is unresponsive.
How should you complete the YAML configuration file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Box 1: readinessProbe:
For containerized applications that serve traffic, you might want to verify that your container is ready to handle incoming requests. Azure Container Instances supports readiness probes to include configurations so that your container can't be accessed under certain conditions.
Reference:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-readiness-probe
NEW QUESTION # 24
You need to recommend project metrics for dashboards in Azure DevOps.
Which chart widgets should you recommend for each metric? To answer, drag the appropriate chart widgets to the correct metrics. Each chart widget may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: Lead time
Lead time measures the total time elapsed from the creation of work items to their completion.
Box 2: Cycle time
Cycle time measures the time it takes for your team to complete work items once they begin actively working on them.
Box 3: Burndown
Burndown charts focus on remaining work within a specific time period.
NEW QUESTION # 25
You plane to store signed images in an Azure Container Registry instance named az4009940427acr1.
You need to modify the SKU for az4009940427acr1 to support the planned images. The solution must minimize costs.
To complete this task, sign in to the Microsoft Azure portal.
Answer:
Explanation:
See solution below.
Explanation
1. Open Microsoft Azure Portal, and select the Azure Container Registry instance named az4009940427acr1.
2. Under Policies, select Content Trust > Enabled > Save.
References:
https://docs.microsoft.com/en-us/azure/container-registry/container-registry-content-trust
NEW QUESTION # 26
Your company uses a Git source-code repository.
You plan to implement GitFlow as a workflow strategy.
You need to identify which branch types are used for production code and preproduction code in the strategy.
Which branch type should you identify for each code type? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Master
The Master branch contains production code. All development code is merged into master in sometime.
Box 2: Develop
The Develop branch contains pre-production code. When the features are finished then they are merged into develop.
Reference:
https://medium.com/@patrickporto/4-branching-workflows-for-git-30d0aaee7bf
NEW QUESTION # 27
You are monitoring the health and performance of an Azure web app by using Azure Application Insights.
You need to ensure that an alert is sent when the web app has a sudden rise in performance issues and failures.
What should you use?
- A. custom events
- B. usage analysis
- C. Application Insights Profiler
- D. Smart Detection
- E. Continuous export
Answer: D
NEW QUESTION # 28
You are creating a YAML-based Azure pipeline to deploy an Azure Data factory instance that has the following requirements;
* If a Data Factory instance exists already, the instance must be overwritten.
* No other resources in a resource group named Fabrikam must be affected.
How should youcomplete the code? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 29
You plan to create an image that will contain a .NET Core application.
You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)
You need to ensure that the image is as small as possible when the image is built.
Which line should you modify in the file?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 30
You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an
Azure subscription named Sub1, and an Azure key vault named vault1.
You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of
Project1. The solution must prevent the values from being stored in the pipelines.
What should you do?
- A. Add a secure file to Project1.
- B. Modify the security settings of the pipelines.
- C. Configure the security policy of Contoso.
- D. Create a variable group in Project1.
Answer: D
Explanation:
Use a variable group to store values that you want to control and make available across multiple pipelines.
References:
https://docs.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups
NEW QUESTION # 31
Your company has a project in Azure DevOps.
You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates.
The templates will reference secrets stored in Azure Key Vault.
You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege.
What should you include in the recommendation? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: RBAC
Management plane access control uses RBAC.
The management plane consists of operations that affect the key vault itself, such as:
* Creating or deleting a key vault.
* Getting a list of vaults in a subscription.
* Retrieving Key Vault properties (such as SKU and tags).
* Setting Key Vault access policies that control user and application access to keys and secrets.
Box 2: RBAC
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-tutorial-use-key-vault
NEW QUESTION # 32
You need to ensure that an Azure web app named az400-9940427-main supports rolling upgrades. The solution must ensure that only 10 percent of users who connect to az400-9940427-main use update versions of the app.
The solution must minimize administrative effort.
To complete this task, sign in to the Microsoft Azure portal.
Answer:
Explanation:
See solution below.
Explanation
Set up staging environments in Azure App Service
1. Open Microsoft Azure Portal
2. Log into your Azure account, select your app's resource page, in the left pane, select Deployment slots > Add Slot.
3. In the Add a slot dialog box, give the slot a name, and select whether to clone an app configuration from another deployment slot. Select Add to continue.
4. After the slot is added, select Close to close the dialog box. The new slot is now shown on the Deployment slots page. By default, Traffic % is set to 0 for the new slot, with all customer traffic routed to the production slot.
5. Select the new deployment slot to open that slot's resource page.
6. Change TRAFFIC % to 10
References:
https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots
NEW QUESTION # 33
You plan to create an image that will contain a .NET Core application.
You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)
You need to ensure that the image is as small as possible when the image is built.
Which line should you modify in the file?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
References:
https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
NEW QUESTION # 34
You need to configure the alert for VM1. The solution must meet the technical requirements.
Which two settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 35
You are planning projects for three customers. Each customer's preferred process for work items is shown in the following table.
The customers all plan to use Azure DevOps for work item management.
Which work item process should you use for each customer? To answer, drag the appropriate work item process to the correct customers. Each work item process may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/devops/boards/work-items/guidance/choose-process?view=azure-devops
NEW QUESTION # 36
......
Overview about MICROSOFT AZ-400 Exam
Overview about MICROSOFT AZ-400 Exam Format: Multiple choice, multiple answers
- Number of Questions: 40-60
- Passing Score: 70-80%
- Registration Fee: 165 USD
- Length of Examination: 120 minutes
AZ-400 PDF Dumps Are Helpful To produce Your Dreams Correct QA's: https://www.testbraindump.com/AZ-400-exam-prep.html
AZ-400 Practice Test Dumps with 100% Passing Guarantee: https://drive.google.com/open?id=1RfZ697MbsXIkU3vhawjIMOSqwSctV97q
