AZ-400 Exam Questions Get Updated [2021] with Correct Answers
Practice AZ-400 Questions With Certification guide Q&A from Training Expert Exams-boost
Major Exam Topics
To get the required score and obtain the expert-level certification, you need to master the certain topics, each having the particular percentage of the whole content. The domains include the following:
- Manage Source Control (10-15%);
- Develop an Instrumentation Strategy (5-10%);
- Implement a Release Management and Continuous Delivery Strategy (10-15%);
- Design a Security and Compliance Plan (10-15%);
- Facilitate Communication and Collaboration (10-15%);
- Implement Continuous Integration (20-25%).
- Develop a Site Reliability Engineering Strategy (5-10%);
It is important to know all the subtopics and vital details related to these areas so that you will be able to master them. Therefore, let’s look at this information.
Domain 1: This objective includes three main subtopics that are covering the least amount of the whole exam content. Thus, you should know how to design an actionable alerting strategy, a failure prediction strategy, and implement a health check. This means that it is important to know how to identify metrics and recommend them on which to base alerts, analyze combinations of metrics, as well as design the mechanisms of communication to notify the users of degraded systems. A potential candidate has to understand the behavior of a system, know how to analyze it, measure baseline metrics, and know which tools to use to prevent the system from failure. Analyzing system dependencies is also an important task to deal with.
Domain 2: This area proves that you are capable of designing authentication and authorization strategies, sensitive information management strategies, security and compliance, as well as governance enforcement mechanisms. These four subjects include the skills in organizing teams with the use of Azure AD groups, evaluating vault solutions, as well as assessing and reporting risks. Your knowledge also requires the ability to implement container scanning and Azure policies.
Domain 3: This topic covers the generation of DevOps process documentation, automation of communication with team members, and your ability to communicate with the business stakeholders about the deployment and release information. This means that you have to know how to integrate GitHub as repository with Azure Boards and notify the stakeholders about key metrics, alerts, and severity using Teams, Slack, SMS, or Email. One’s skills in documenting artifacts and external dependencies are also important.
Domain 4: This subject includes the students’ ability to develop logging and telemetry, implement them, and integrate monitoring and logging solutions. Thus, you need to know all about the integration of crash analytics such as Crashlytics or App Center Crashes and creation of the feedback loop from platform monitoring tools, including Event Grid, Azure Platform Logs, and Azure Diagnostics VM extensions. Your knowledge base should include your understanding of key metrics, such as Teams/Slack, network, webhooks, disk, SMS and Email, memory, and CPU, as well as your ability to define them, measure, and implement alerts on them.
Domain 5: The main subtopics of this area include the development of a modern source control strategy, implementation of branching strategies for the source code, integration of source control with tools, and configuration of repositories.
Domain 6: This section covers the learners’ skills in implementing an orchestration automation solution, planning a deployment environment strategy, and developing deployment scripts and templates. Load balancer, App Center, ARM, Azure Stack, Terraform, PowerShell DSC, GitHub Actions, IoT, CLI, multiregion, Azure Pipelines, DR, sovereign Cloud, Jenkins, Azure IoT Edge, CircleCI, mobile, and CDN are the technologies that you should know all about.
Domain 7: The last topic has the highest percentage of the exam content, which means that you will face with more questions from this section than others. It covers a wide area of subjects that include the maintenance of a build strategy, its implementation, as well as design of a package management strategy, build automation, and a process for standardizing builds across the organization.
Microsoft DevOps Engineer Exam Certification Details:
| Duration | 150 mins |
| Passing Score | 700 / 1000 |
| Schedule Exam | Pearson VUE |
| Sample Questions | Microsoft DevOps Engineer Sample Questions |
| Exam Code | AZ-400 |
| Number of Questions | 40-60 |
| Exam Price | $165 (USD) |
| Books / Training | AZ-400T00-A: Designing and Implementing Microsoft DevOps solutions |
| Exam Name | Microsoft Certified - DevOps Engineer Expert |
NEW QUESTION 40
You need to recommend project metrics for dashboards in Azure DevOps.
Which chart widgets should you recommend for each metric? To answer, drag the appropriate chart widgets to the correct metrics. Each chart widget may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Graphical user interface, text, application, chat or text message Description automatically generated
Box 1: Lead time
Lead time measures the total time elapsed from the creation of work items to their completion.
Box 2: Cycle time
Cycle time measures the time it takes for your team to complete work items once they begin actively working on them.
Box 3: Burndown
Burndown charts focus on remaining work within a specific time period.
Reference:
https://docs.microsoft.com/en-us/azure/devops/report/dashboards/velocity-guidance?view=vsts
https://docs.microsoft.com/en-us/azure/devops/report/dashboards/cycle-time-and-lead-time?view=vsts
https://docs.microsoft.com/en-us/azure/devops/report/dashboards/configure-burndown-burnup-widgets?view=vs
NEW QUESTION 41
You have a GitHub repository.
You create a new repository in Azure DevOps.
You need to recommend a procedure to clone the repository from GitHub to Azure DevOps.
What should you recommend?
- A. Create a service connection for GitHub.
- B. From Import a Git repository, click Import.
- C. Create a personal access token in Azure DevOps.
- D. Create a webhook.
- E. Create a pull request.
Answer: B
Explanation:
You can import an existing Git repo from GitHub, Bitbucket, GitLab, or other location into a new or empty existing repo in your project in Azure DevOps.
Import into a new repo
1. Select Repos, Files.
2. From the repo drop-down, select Import repository.
3. If the source repo is publicly available, just enter the clone URL of the source repository and a name for your new Git repository.
References:
https://docs.microsoft.com/en-us/azure/devops/repos/git/import-git-repository?view=azure-devops
NEW QUESTION 42
What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite?
- A. a post-deployment approval
- B. a deployment gate
- C. a pre-deployment approval
- D. a trigger
Answer: C
Explanation:
Explanation/Reference:
Explanation:
When a release is created from a release pipeline that defines approvals, the deployment stops at each point where approval is required until the specified approver grants approval or rejects the release (or re- assigns the approval to another user).
Scenario: Code quality and release quality are critical. During release, deployments must not proceed between stages if any active bugs are logged against the release.
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/approvals/approvals
NEW QUESTION 43
You plan to deploy a template named D:\Deploy.json to a resource group named Deploy-lod9940427.
You need to modify the template to meet the following requirements, and then to deploy the template:
* The address space must be reduced to support only 256 total IP addresses.
* The subnet address space must be reduced to support only 64 total IP addresses.
To complete this task, sign in to the Microsoft Azure portal.
Answer:
Explanation:
See solution below.
Explanation
1. Sign in to the portal,
2. Choose template Deploy-lod9940427
3. Select Edit template, and then paste your JSON template code into the code window.
4. Change the ASddressPrefixes to 10.0.0.0/24 in order to support only 256 total IP addresses.
addressSpace":{"addressPrefixes": ["10.0.0.0/24"]},
5. Change the firstSubnet addressprefix to 10.0.0.0/26 to support only 64 total IP addresses.
"subnets":[
{
"name":"firstSubnet",
"properties":{
"addressPrefix":"10.0.0.0/24"
}
6. Select Save.
7. Select Edit parameters, provide values for the parameters that are shown, and then select OK.
8 Select Subscription. Choose the subscription you want to use, and then select OK.
9. Select Resource group. Choose an existing resource group or create a new one, and then select OK.
10. Select Create. A new tile on the dashboard tracks the progress of your template deployment.
References:
https://docs.microsoft.com/en-us/azure-stack/user/azure-stack-deploy-template-portal?view=azs-1908
https://docs.microsoft.com/en-us/azure/architecture/building-blocks/extending-templates/update-resource
NEW QUESTION 44
Which package feed access levels should be assigned to the Developers and Team Leaders groups for the investment planning applications suite? To answer, drag the appropriate access levels to the correct groups.
Each access level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: Reader
Members of a group named Developers must be able to install packages.
Feeds have four levels of access: Owners, Contributors, Collaborators, and Readers. Owners can add any type of identity-individuals, teams, and groups-to any access level.
Box 2: Owner
Members of a group named Team Leaders must be able to create new packages and edit the permissions of package feeds.
NEW QUESTION 45
You need to configure a cloud service to store the secrets required by the mobile applications to call the share.
What should you include in the solution? To answer, select the appropriate options m the answer atea, NOTE:
Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Every request made against a storage service must be authorized, unless the request is for a blob or container resource that has been made available for public or signed access. One option for authorizing a request is by using Shared Key.
Scenario: The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.
The investment planning applications suite will include one multi-tier web application and two iOS mobile application. One mobile application will be used by employees; the other will be used by customers.
References: https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key
NEW QUESTION 46
Your company wants to use Azure Application Insights to understand how user behaviors affect an application.
Which application Insights tool should you use to analyze each behavior? To answer, drag the appropriate tools to the correct behaviors. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: User Flows
The User Flows tool visualizes how users navigate between the pages and features of your site. It's great for answering questions like:
How do users navigate away from a page on your site?
What do users click on a page on your site?
Where are the places that users churn most from your site?
Are there places where users repeat the same action over and over?
Box 2: Users
Box 3: Impact
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-flows
NEW QUESTION 47
You plan to use a NuGet package in a project in Azure DevOps. The NuGet package is in a feed that requires authentication.
You need to ensure that the project can restore the NuGet package automatically.
What should the project use to automate the authentication?
- A. an Azure Active Directory (Azure AD) service principal
- B. an Azure Active Directory (Azure AD) account that has multi-factor authentication (MFA) enabled
- C. an Azure Automation account
- D. an Azure Artifacts Credential Provider
Answer: D
Explanation:
The Azure Artifacts Credential Provider automates the acquisition of credentials needed to restore NuGet
packages as part of your .NET development workflow. It integrates with MSBuild, dotnet, and NuGet(.exe) and works on Windows, Mac, and Linux. Any time you want to use packages from an Azure Artifacts feed, the Credential Provider will automatically acquire and securely store a token on behalf of the NuGet client you're using.
Reference:
https://github.com/Microsoft/artifacts-credprovider
NEW QUESTION 48
Your company has a project in Azure DevOps for a new web application.
The company uses Service Now for change management.
You need to ensure that a change request is processed before any components can be deployed to the production environment.
What are two ways to integrate into the Azure DevOps release pipeline? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Define a deployment control that invokes the ServiceNow REST API.
- B. Define a deployment control that invokes the Service Now SOAP API.
- C. Define a pre deployment gate before the deployment to the Prod stage.
- D. Define a post deployment gate after the deployment to the QA stage.
Answer: B,D
Explanation:
Explanation
https://docs.microsoft.com/en-us/azure/devops/pipelines/release/approvals/servicenow?view=azure-devops
NEW QUESTION 49
You are configuring Azure Pipelines for three projects in Azure DevOps as shown in the following table.
Which version control system should you recommend for each project? To answer, drag the appropriate version control systems to the correct projects. Each version control system may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://www.azuredevopslabs.com/labs/azuredevops/yaml/
https://enterprise.github.com/faq
NEW QUESTION 50
You need to recommend a solution for deploying charts by using Helm and Title to Azure Kubemets Service (AKS) in an RBAC-enabled cluster.
Which three commands should you recommend be run m sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Kubectl create
2 - helm init
3 - helm install
References:
https://docs.microsoft.com/en-us/azure/aks/kubernetes-helm
https://docs.helm.sh/using_helm/#tiller-namespaces-and-rbac
NEW QUESTION 51
You are creating a NuGet package.
You plan to distribute the package to your development team privately.
You need to share the package and test that the package can be consumed.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Step 1: Configure a self-hosted agent.
The build will run on a Microsoft hosted agent.
Step 2: Create a new Azure Artifacts feed
Microsoft offers an official extension for publishing and managing your private NuGet feeds.
Step 3: Publish the package.
Publish, pack and push the built project to your NuGet feed.
Step 4: Connect to an Azure Artifacts feed.
With the package now available, you can point Visual Studio to the feed, and download the newly published package References:
https://medium.com/@dan.cokely/creating-nuget-packages-in-azure-devops-with-azure-pipelines-and-yaml-d6fa30f0f15e
NEW QUESTION 52
Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.
You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.
What should you use?
- A. WhiteSource Bolt
- B. Microsoft Visual SourceSafe
- C. SourceGear Vault
- D. Jenkins
Answer: A
Explanation:
WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server.
Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.
Reference:
https://www.azuredevopslabs.com/labs/vstsextend/whitesource/
NEW QUESTION 53
Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.
You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.
What should you use?
- A. WhiteSource
- B. Microsoft Visual SourceSafe
- C. OWASP ZAP
- D. PDM
Answer: A
Explanation:
WhiteSource is the leader in continuous open source software security and compliance management.
WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source repositories.
Azure DevOps integration with WhiteSource Bolt will enable you to:
1. Detect and remedy vulnerable open source components.
2. Generate comprehensive open source inventory reports per project or build.
3. Enforce open source license compliance, including dependencies' licenses.
4. Identify outdated open source libraries with recommendations to update.
Note: Black duck would also be a good answer, but it is not an option here.
References: https://www.azuredevopslabs.com/labs/vstsextend/WhiteSource/
NEW QUESTION 54
Your company plans to deploy an application to the following endpoints:
* Ten virtual machines hosted in Azure.
* Ten virtual machines hosted in an on-premises data center environment All the virtual machines have the- Azure Pipelines agent.
You need to implement a release strategy for deploying the application to the endpoints.
What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate components to the correct endpoint.
Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or soon to view content NOTE: Each correct selection n worth one point.
Answer:
Explanation:
Explanation
Box 1: A deployment group
When authoring an Azure Pipelines or TFS Release pipeline, you can specify the deployment targets for a job using a deployment group.
If the target machines are Azure VMs, you can quickly and easily prepare them by installing the Azure Pipelines Agent Azure VM extension on each of the VMs, or by using the Azure Resource Group Deployment task in your release pipeline to create a deployment group dynamically.
Box 2: A deployment group
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups
NEW QUESTION 55
You have a web app hosted on Azure App Service. The web app stores data in an Azure SQL database.
You need to generate an alert when there are 10,000 simultaneous connections to the database. The solution must minimize development effort.
Which option should you select in the Diagnostics settings of the database?
- A. Send to Log Analytics
- B. Archive to a storage account
- C. Stream to an event hub
Answer: A
Explanation:
ENABLE DIAGNOSTICS TO LOG ANALYTICS
This configuration is done PER DATABASE
1. Click on Diagnostics Settings and then Turn On Diagnostics
2. Select to Send to Log Analytics and select the Log Analytics workspace. For this sample I will selected only Errors
Reference:
https://techcommunity.microsoft.com/t5/azure-database-support-blog/azure-sql-db-and-log-analytics-better-together-part-1/ba-p/794833
NEW QUESTION 56
Your company is building a new web application.
You plan to collect feedback from pilot users on the features being delivered.
All the pilot users have a corporate computer that has Google Chrome and the Microsoft Test & Feedback extension installed. The pilot users will test the application by using Chrome.
You need to identify which access levels are required to ensure that developers can request and gather feedback from the pilot users. The solution must use the principle of least privilege.
Which access levels m Azure DevOps should you identify? To answer, select the appropriate options in the answer area NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: Basic
Assign Basic to users with a TFS CAL, with a Visual Studio Professional subscription, and to users for whom you are paying for Azure Boards & Repos in an organization.
Box 2: Stakeholder
Assign Stakeholders to users with no license or subscriptions who need access to a limited set of features.
Note:
You assign users or groups of users to one of the following access levels:
Basic: provides access to most features
VS Enterprise: provides access to premium features
Stakeholders: provides partial access, can be assigned to unlimited users for free References: https://docs.microsoft.com/en-us/azure/devops/organizations/security/access-levels?view=vsts
NEW QUESTION 57
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt.
You need to recommend changes to reduce the accumulated technical debt.
Solution: You recommend increasing the code duplication.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Instead reduce the code complexity.
Note: Technical debt is the accumulation of sub-optimal technical decisions made over the lifetime of an application. Eventually, it gets harder and harder to change things: it's the 'sand in the gears' that sees IT initiatives grind to a halt.
Reference:
https://dzone.com/articles/fight-through-the-pain-how-to-deal-with-technical
https://www.devopsgroup.com/blog/five-ways-devops-helps-with-technical-debt/
NEW QUESTION 58
You manage the Git repository for a large enterprise application.
You need to minimize the data size of the repository.
How should you complete the commands? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 59
You have an Azure Kubernetes Service (AKS) cluster.
You need to deploy an application to the cluster by using Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
You can set up a CI/CD pipeline to deploy your apps on a Kubernetes cluster with Azure DevOps by leveraging a Linux agent, Docker, and Helm.
Step 1: Create a service principle in Azure Active Directory (Azure AD) We need to assign 3 specific service principals with specific Azure Roles that need to interact with our ACR and our AKS.
Create a specific Service Principal for our Azure DevOps pipelines to be able to push and pull images and charts of our ACR.
Create a specific Service Principal for our Azure DevOps pipelines to be able to deploy our application in our AKS.
Step 2: Add a Helm package and deploy a task to the deployment pipeline This is the DevOps workflow with containers:
Step 3: Add a Docker Compose task to the deployment pipeline.
Dockerfile file is a script leveraged by Docker, composed of various commands (instructions) and arguments listed successively to automatically perform actions on a base image in order to create a new Docker image by packaging the app.
Reference:
https://cloudblogs.microsoft.com/opensource/2018/11/27/tutorial-azure-devops-setup-cicd-pipeline-kubernetes-d
NEW QUESTION 60
You create a Microsoft ASP.NET Core application.
You plan to use Azure Key Vault to provide secrets to the application as configuration data.
You need to create a Key Vault access policy to assign secret permissions to the application. The solution must use the principle of least privilege.
Which secret permissions should you use?
- A. List only
- B. Get only
- C. Get and List
Answer: B
Explanation:
Application data plane permissions:
* Keys: sign
* Secrets: get
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-secure-your-key-vault
NEW QUESTION 61
Your company has a project in Azure DevOps.
You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates.
The templates will reference secrets stored in Azure Key Vault.
You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege.
What should you include in the recommendation? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: A key Vault advanced access policy
Box 2: RBAC
Management plane access control uses RBAC.
The management plane consists of operations that affect the key vault itself, such as:
* Creating or deleting a key vault.
* Getting a list of vaults in a subscription.
* Retrieving Key Vault properties (such as SKU and tags).
* Setting Key Vault access policies that control user and application access to keys and secrets.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-tutorial-use-key-vault
NEW QUESTION 62
......
Important Prerequisites
As a future accredited DevOps Engineer, you need to know how to design and implement various strategies to improve the activities performed during the working process. These strategies include feedback, monitoring, delivery, testing, continuous integration, compliance security, source control, infrastructure, code, and collaboration. You should also have expertise in working with technologies, processes, and people to continuously deliver business value.
Prepare Top Microsoft AZ-400 Exam Audio Study Guide Practice Questions Edition: https://www.exams-boost.com/AZ-400-valid-materials.html
Free Microsoft AZ-400 Test Practice Test Questions Exam Dumps: https://drive.google.com/open?id=1JG6y--uOgK-79yvDcyHLHzAQOlXq7X3y