Microsoft Azure DevOps Engineer AZ 400

Preface

Microsoft Azure DevOps Engineer AZ 400: Microsoft Azure DevOps Engineer is a meticulously structured guide designed to equip professionals with the expertise required to implement DevOps practices using Microsoft Azure. As organizations increasingly adopt DevOps methodologies to enhance software development and operational efficiency, the role of an Azure DevOps Engineer has become essential in modern IT environments. This book provides a comprehensive framework to master key DevOps principles, including continuous integration and continuous delivery (CI/CD), infrastructure as code (IaC), source control management, security, compliance, and monitoring. Aligned with the objectives of the AZ-400 certification, the content systematically builds foundational knowledge before progressing to advanced concepts, ensuring that readers acquire both theoretical understanding and hands-on proficiency in designing and implementing DevOps strategies.

Beyond serving as an exam preparation resource, Microsoft Certification AZ-400: Microsoft Azure DevOps Engineer is an invaluable reference for professionals seeking to refine their skills in automating software development pipelines and managing cloud infrastructure efficiently. Each chapter integrates practical exercises, real-world case studies, and expert insights to reinforce learning and facilitate knowledge retention. Additionally, self-assessment tools, online test papers, and video tutorials provide an immersive learning experience, bridging the gap between theoretical concepts and real-world application. Whether you are an experienced DevOps professional aiming to validate your expertise or an IT specialist looking to transition into DevOps engineering, this book offers a structured and in-depth approach to mastering Azure DevOps practices, paving the way for career advancement in this dynamic and evolving field.

Table of Contents

Preface

Chapter 1: Practice Questions & Answers Part 1

Chapter 2: Practice Questions & Answers Part 2

Chapter 3: Viva Voce Questions

Chapter 1: Practice Questions & Answers Part 1

QUESTION1

-

How should you confrere the release retention policy for the investment planning depletions suite? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

A. Mastered

B. Not Mastered

Answer: A

QUESTION2

-

What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite?

A. a trigger

B. a pre deployment approval

C. a post-deployment approval

D. a deployment gate

Answer: D

QUESTION3

-

Your company creates a new Azure DevOps team. D18912E1457D5D1DDCBD40AB3BF70D5D You plan to use Azure DevOps for sprint planning.

You need to visualize the flow of your work by using an agile methodology. Which Azure DevOps component should you use?

A. Kanban boards

B. sprint planning

C. delivery plans

D. portfolio backlogs

Answer: A

QUESTION4

-

You have an Azure DevOps organization named Contoso that contains a project named Project 1. You provision an Azure key vault name Keyvault1. You need to reference Keyvault1 secrets in a build pipeline of Project1. What should you do first?

A. Create an XAML build service.

B. Create a variable group in Project1.

C. Add a secure file to Project1.

D. Configure the security policy of Contoso.

Answer: B

QUESTION5

-

You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity.

The solution must use the principle of least privilege.

To complete this task, sign in to the Microsoft Azure portal.

A. Mastered

B. Not Mastered

Answer: A

QUESTION6

-

You are planning projects for three customers. Each customer’s preferred process for work items is shown in the following table.

The customers all plan to use Azure DevOps for work item management.

Which work item process should you use for each customer? To answer, drag the appropriate work item process to the correct customers. Each work item process may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

A. Mastered

B. Not Mastered

Answer: A

QUESTION7

-

After you answer a QUESTION in this section, you will NOT be able to return to it. As a result, these QUESTIONs will not appear in the review screen.

You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling.

You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1.

You need to ensure that an email alert is generated whenever VMSS1 scales in or out. Solution: From Azure Monitor, create an action group. Does this meet the goal?

A. Yes

B. No

Answer: B

QUESTION8

-

You use WhiteSource Bolt to scan a Node.js application.

The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment.

You need to ensure that WhiteSource Bolt only scans production dependencies.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Run npm install and specify the --production flag.

B. Modify the WhiteSource Bolt policy and set the action for the licenses used by the development tools to Reassign.

C. Modify the devDependencies section of the project’s Package.json file.

D. Configure WhiteSource Bolt to scan the node_modules directory only.

Answer: AC

QUESTION 9

-

You are developing an iOS application by using Azure DevOps.

You need to test the application manually on 10 devices without releasing the application to the public. Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Create a Microsoft Intune device compliance policy.

B. Deploy a certificate from an internal certification authority (CA) to each device.

C. Register the application in the iTunes store.

D. Onboard the devices into Microsoft Intune.

E. Distribute a new release of the application.

F. Register the IDs of the devices in the Apple Developer portal.

Answer: BF

QUESTION 10

-

You have the following Azure policy.

If : (

allef: {

{

field: type".

equals: Microsoft. Storage/storage Accounts

},

{

Field : Microsoft.storage/storageAccounts/SupportsHttpsTrafficonly,

notEquals: true

}

}

},

Then: {

Effect:deny

}

You assign the policy to the Tenant root group. What is the effect of the policy?

A. prevents all http traffic to existing Azure Storage accounts

B. ensures that all traffic to new Azure Storage accounts is encrypted

C. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet

D. ensures that all data for new Azure Storage accounts is encrypted at rest

Answer: B

QUESTION 11

-

You need to configure an Azure web app named az400-9940427-main to contain an environmental variable named MAX_ITEMS. The environmental variable must have a value of 50.

To complete this task, sign in to the Microsoft Azure portal.

A. Mastered

B. Not Mastered

Answer: A

QUESTION 12

-

You are defining release strategies for two applications as shown in