Latest AZ-400 Pass Guaranteed Exam Dumps with Accurate & Updated Questions
AZ-400 Exam Brain Dumps - Study Notes and Theory
Microsoft AZ-400 certification exam is a highly sought-after certification for those looking to advance their career in the field of DevOps. AZ-400 exam is designed for professionals who have experience in designing and implementing DevOps solutions using Microsoft Azure technologies. Designing and Implementing Microsoft DevOps Solutions certification is intended to validate a candidate's skills and knowledge in various areas of DevOps, including continuous integration and delivery, infrastructure as code, monitoring and feedback loops, and security and compliance.
The AZ-400 exam covers a wide range of topics related to DevOps, including continuous integration and delivery, infrastructure as code, application deployment, monitoring and feedback loops, and more. AZ-400 exam is designed to test the candidate's ability to design and implement end-to-end DevOps solutions that are scalable, reliable, and efficient.
NEW QUESTION # 49
You have a web app hosted on Azure App Service. The web app stores data in an Azure SQL database.
You need to generate an alert when there are 10,000 simultaneous connections to the database. The solution must minimize deve4opment effort.
Which option should you select in the Diagnostics settings of the database?
- A. Stream to an event hub
- B. Archive to m storage account
- C. Send to Log Analytics
Answer: C
Explanation:
Explanation
ENABLE DIAGNOSTICS TO LOG ANALYTICS
This configuration is done PER DATABASE
1.Click on Diagnostics Settings and then Turn On Diagnostics
2. Select to Send to Log Analytics and select the Log Analytics workspace. For this sample I will selected only Errors
Reference:
https://techcommunity.microsoft.com/t5/azure-database-support-blog/azure-sql-db-and-log-analytics-better-toget
NEW QUESTION # 50
You are implementing a package management solution for a Node.js application by using Azure Artifacts.
You need to configure the development environment to connect to the package repository. The solution must minimize the likelihood that credentials will be leaked.
Which file should you use to configure each connection? To answer, drag the appropriate files to the correct connections. Each file may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
All Azure Artifacts feeds require authentication, so you'll need to store credentials for the feed before you can install or publish packages. npm uses .npmrc configuration files to store feed URLs and credentials. Azure DevOps Services recommends using two .npmrc files.
Feed registry information: The .npmrc file in the project
One .npmrc should live at the root of your git repo adjacent to your project's package.json. It should contain a
"registry" line for your feed and it should not contain credentials since it will be checked into git.
Credentials: The .npmrc file in the user's home folder
On your development machine, you will also have a .npmrc in $home for Linux or Mac systems or
$env.HOME for win systems. This .npmrc should contain credentials for all of the registries that you need to connect to. The NPM client will look at your project's .npmrc, discover the registry, and fetch matching credentials from $home/.npmrc or $env.HOME/.npmrc.
References:
https://docs.microsoft.com/en-us/azure/devops/artifacts/npm/npmrc?view=azure-devops&tabs=windows
NEW QUESTION # 51
You have an Azure subscription that contains two resource groups named Contoso RG and Contoso Dev, an Azure data factory named Contoso Data Factory, and a release pipeline in Azure Pipelines named Pipeline1.
You plan to deploy Contoso Data Factory to ContosoRG by using Pipeline1.
You add the Azure Resource Manager (ARM) template deployment task shown the following exhibit.
Answer:
Explanation:
NEW QUESTION # 52
You have an Azure subscription that uses Azure Monitor and contains a Log Analytics workspace.
You have an encryption key.
You need to configure Azure Monitor to use the key to encrypt log data
Answer:
Explanation:
Explanation
NEW QUESTION # 53
You are configuring an Azure DevOps deployment pipeline. The deployed application will authenticate to a web service by using a secret stored in an Azure key vault.
You need to use the secret in the deployment pipeline.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Create a service principal in Microsoft aZure Active Directory (Azure AD), part of Microsoft Entra.
2 - Configure and access policy in the key vault.
3 - Add an Azure Resource Manager service connection to the pipeline.
NEW QUESTION # 54
You have an Azure Kubernetes Service (AKS) pod.
You need to configure a probe to perform the following actions:
Confirm that the pod is responding to service requests.
Check the status of the pod four times a minute.
Initiate a shutdown if the pod is unresponsive.
How should you complete the YAML configuration file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-readiness-probe
NEW QUESTION # 55
You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.
You need to ensure that the project can be scanned for known security vulnerabilities in the open source libraries.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: A Build task
Trigger a build
You have a Java code provisioned by the Azure DevOps demo generator. You will use WhiteSource Bolt extension to check the vulnerable components present in this code.
* Go to Builds section under Pipelines tab, select the build definition WhiteSourceBolt and click on Queue to trigger a build.
* To view the build in progress status, click on ellipsis and select View build results.
Box 2: WhiteSource Bolt
WhiteSource is the leader in continuous open source software security and compliance management.
WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source repositories.
References:
https://www.azuredevopslabs.com/labs/vstsextend/whitesource/
NEW QUESTION # 56
Your company plans to deploy an application to the following endpoints:
* Ten virtual machines hosted in Azure.
* Ten virtual machines hosted in an on-premises data center environment All the virtual machines have the- Azure Pipelines agent.
You need to implement a release strategy for deploying the application to the endpoints.
What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate components to the correct endpoint.
Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or soon to view content NOTE: Each correct selection n worth one point.
Answer:
Explanation:
Explanation
Box 1: A deployment group
When authoring an Azure Pipelines or TFS Release pipeline, you can specify the deployment targets for a job using a deployment group.
If the target machines are Azure VMs, you can quickly and easily prepare them by installing the Azure Pipelines Agent Azure VM extension on each of the VMs, or by using the Azure Resource Group Deployment task in your release pipeline to create a deployment group dynamically.
Box 2: A deployment group
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups
NEW QUESTION # 57
You have an Azure subscription that contains an Azure key vault named Vault1. an Azure pipeline named Pipeline1, and an Azure SQL database named DB1.
Pipeline1 is used to deploy an app that will authenticate to DB1 by using a password.
You need to store the password in Vault1. The solution must ensure that the password can be accessed by Pipeline1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 58
You are configuring Azure Pipelines for three projects in Azure DevOps as shown in the following table.
Which version control system should you recommend for each project? To answer, drag the appropriate version control systems to the correct projects. Each version control system may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Project1:Git in Azure Repos
Project2: Github Enterprise
GitHub Enterprise is the on-premises version of GitHub.com. GitHub Enterprise includes the same great set of features as GitHub.com but packaged for running on your organization's local network. All repository data is stored on machines that you control, and access is integrated with your organization's authentication system (LDAP, SAML, or CAS).
Project3: Bitbucket cloud
One downside, however, is that Bitubucket does not include support for SVN but this can be easily amended migrating the SVN repos to Git with tools such as SVN Mirror for Bitbucket .
Note: SVN is a centralized version control system.
Incorrect Answers:
Bitbucket:
Bitbucket comes as a distributed version control system based on Git.
Note: A source control system, also called a version control system, allows developers to collaborate on code and track changes. Source control is an essential tool for multi-developer projects.
Our systems support two types of source control: Git (distributed) and Team Foundation Version Control (TFVC). TFVC is a centralized, client-server system. In both Git and TFVC, you can check in files and organize files in folders, branches, and repositories.
References:
https://www.azuredevopslabs.com/labs/azuredevops/yaml/
https://enterprise.github.com/faq
NEW QUESTION # 59
You need to configure access to Azure DevOps agent pools to meet the following requirements:
Use a project agent pool when authoring build or release pipelines.
View the agent pool and agents of the organization.
Use the principle of least privilege.
Which role memberships are required for the Azure DevOps organization and the project? To answer, drag the appropriate role memberships to the correct targets. Each role membership may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/pools-queues
NEW QUESTION # 60
How should you configure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 61
You plan to share packages that you wrote, tested, validated, and deployed by using Azure Artifacts.
You need to release multiple builds of each package by using a single feed. The solution must limit the release of packages that are in development.
What should you use?
- A. views
- B. upstream sources
- C. global symbols
- D. local symbols
Answer: B
Explanation:
Explanation
Upstream sources enable you to manage all of your product's dependencies in a single feed. We recommend publishing all of the packages for a given product to that product's feed, and managing that product's dependencies from remote feeds in the same feed, via upstream sources. This setup has a few benefits:
* Simplicity: your NuGet.config, .npmrc, or settings.xml contains exactly one feed (your feed).
* Determinism: your feed resolves package requests in order, so rebuilding the same codebase at the same commit or changeset uses the same set of packages
* Provenance: your feed knows the provenance of packages it saved via upstream sources, so you can verify that you're using the original package, not a custom or malicious copy published to your feed
* Peace of mind: packages used via upstream sources are guaranteed to be saved in the feed on first use; if the upstream source is disabled/removed, or the remote feed goes down or deletes a package you depend on, you can continue to develop and build References: https://docs.microsoft.com/en-us/azure/devops/artifacts/concepts/upstream-sources?view=vsts
NEW QUESTION # 62
You need to implement the code flow strategy for Project2 in Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange in the correct order.
Answer:
Explanation:
Explanation
Step 1: Create a repository
A Git repository, or repo, is a folder that you've told Git to help you track file changes in. You can have any number of repos on your computer, each stored in their own folder.
Step 2: Create a branch
Branch policies help teams protect their important branches of development. Policies enforce your team's code quality and change management standards.
Step 3: Add a build validation policy
When a build validation policy is enabled, a new build is queued when a new pull request is created or when changes are pushed to an existing pull request targeting this branch. The build policy then evaluates the results of the build to determine whether the pull request can be completed.
Scenario:
Implement a code flow strategy for Project2 that will:
Enable Team2 to submit pull requests for Project2.
Enable Team2 to work independently on changes to a copy of Project2.
Ensure that any intermediary changes performed by Team2 on a copy of Project2 will be subject to the same restrictions as the ones defined in the build policy of Project2.
References: https://docs.microsoft.com/en-us/azure/devops/repos/git/manage-your-branches
Topic 3, Woodgrove bank
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the button to return to the question.
Overview
General Overview
Woodgrove Bank is a financial services company that has a main office in the United Kingdom.
Technical Requirements and Planned Changes
Planned Changes
Woodgrove Bank plans to implement the following project management changes:
* Implement Azure DevOps for project tracking.
* Centralize source code control in private GitHub repositories.
* Implement Azure Pipelines for build pipelines and release pipelines.
Woodgrove Bank plans to implement the following changes to the identity environment:
* Deploy an Azure AD tenant named woodgrovebank.com.
* Sync the Active Directory domain to Azure AD.
* Configure App1 to use a service principal.
* Integrate GitHub with Azure AD.
Woodgrove Bank plans to implement the following changes to the core apps:
* Migrate App1 to ASP.NET Core.
* Integrate Azure Pipelines and the third-party build tool used to develop App2.
Woodgrove Bank plans to implement the following changes to the DevOps environment:
* Deploy App1 to Azure App Service.
* Implement source control for the DB1 schema.
* Migrate all the source code from TFS1 to GitHub.
* Deploy App2 to an Azure virtual machine named VM1.
* Merge the POC branch into the GitHub default branch.
* Implement an Azure DevOps dashboard for stakeholders to monitor development progress.
Technical Requirements
Woodgrove Bank identifies the following technical requirements:
* The initial databases for new environments must contain both schema and reference data.
* An Azure Monitor alert for VM1 must be configured to meet the following requirements:
* Be triggered when average CPU usage exceeds 80 percent for 15 minutes.
* Calculate CPU usage averages once every minute.
* The commit history of the POC branch must replace the history of the default branch.
* The Azure DevOps dashboard must display the metrics shown in the following table.
* Access to Azure DevOps must be restricted to specific IP addresses.
* Page load times for App1 must be captured and monitored.
* Administrative effort must be minimized.
NEW QUESTION # 63
Your company uses Azure DevOps for Get source control.
You have a project in Azure DevOps named Contoso App that contains the following repositories:
* https://dev.azure.com/contoso/contoso-app/core-api
* https://dev.azure.com/contoso/contoso-app/core-spa
* https://dev.azure.com/contoso/contoso-app/core-db
You need to ensure that developers receive Slack notifications when there are pull requests created for Contoso App.
What should you run in Slack? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: subscribe
To start monitoring all Get repositories in a project, use the following slash command inside a channel:
/azrepos subscribe [project ur1]
Box 2: https://dev.azure.com/contoso/contoso-app
You can also monitor a specific repository using the following command:
/azrepos subscribe [repository ur1]
The repository URL can be to any page within your repository that has your repository name.
For example, for Get repositories, use:
/azrepos subscribe https://dev.azure.com/myorg/myproject/_git/myrepository Reference:
https://docs.microsoft.com/en-us/azure/devops/repos/integrations/repos-slack
NEW QUESTION # 64
During a code review, you discover many quality issues. Many modules contain unused variables and empty catch Modes. You need to recommend a solution to improve the quality o' the code. What should you recommend?
- A. In an Xcode build task, select Use xcpretty from Advanced
- B. In a Gradle build task, select Run Checkstyle.
- C. In a Maven build task, select Run PMD.
- D. In a Grunt build task, select Enabled from Control Options.
Answer: C
Explanation:
PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth.
There is an Apache Maven PMD Plugin which allows you to automatically run the PMD code analysis tool on your project's source code and generate a site report with its results.
References:
https://pmd.github.io/
NEW QUESTION # 65
You are using PowerShell to administer Azure Log Analytics workspaces.
You need to list the available workspaces and their properties.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-access
NEW QUESTION # 66
You plan to create an image that will contain a .NET Core application.
You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)
You need to ensure that the image is as small as possible when the image is built.
Which line should you modify in the file?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
https://github.com/dotnet/dotnet-docker/blob/master/samples/dotnetapp/README.md
NEW QUESTION # 67
You are deploying a server application that will run on a Server Core installation of Windows Server 2019.
You create an Azure key vault and a secret.
You need to use the key vault to secure API secrets for third-party integrations.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Configure a Key Vault access policy.
- B. Modify the application to access the key vault.
- C. Configure RBAC for the key vault.
- D. Deploy an Azure Desired State Configuration (DSC) extension.
- E. Deploy a virtual machine that uses a system-assigned managed identity.
Answer: A,B,E
Explanation:
BE: An app deployed to Azure can take advantage of Managed identities for Azure resources, which allows the app to authenticate with Azure Key Vault using Azure AD authentication without credentials (Application ID and Password/Client Secret) stored in the app.
* Select Add Access Policy.
* Open Secret permissions and provide the app with Get and List permissions.
* Select Select principal and select the registered app by name. Select the Select button.
* Select OK.
* Select Save.
* Deploy the app.
References:
https://docs.microsoft.com/en-us/aspnet/core/security/key-vault-configuration
NEW QUESTION # 68
You have an Azure subscription.
You need to create a storage account by using a Bicep file.
How should you complete the file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 69
You have a private distribution group that contains provisioned and unprovisioned devices.
You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.
What should you do?
- A. Generate a new .p12 file for each device.
- B. Create an active subscription in App Center Test.
- C. Add the device owner to the collaborators group.
- D. Select Register devices and sign my app.
Answer: D
Explanation:
The following diagram displays the entire app re-signing flow in App Center.
Reference:
https://docs.microsoft.com/hu-hu/appcenter/distribution/auto-provisioning
NEW QUESTION # 70
You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication. What should you do first?
- A. Create a conditional access policy in Azure AD.
- B. Modify the Security settings of the GitHub organization.
- C. Create an Azure Active Directory B2C (Azure AD B2C) tenant.
- D. Register GitHub in Azure AD.
Answer: D
NEW QUESTION # 71
You need to implement the code flow strategy for Project2 in Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 72
Your company has a project in Azure DevOps named Project1.
All the developers at the company have Windows 10 devices.
You need to create a Get repository for Project1. The solution must meet the following requirements:
* Support large binary files.
* Store binary files outside of the repository.
* Use a standard Get workflow to maintain the metadata of the binary files by using commits to the repository.
Answer:
Explanation:
Explanation
NEW QUESTION # 73
How should you configure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Scenario: By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days.
Box 1: Set the default retention policy to 30 days
The Global default retention policy sets the default retention values for all the build pipelines. Authors of build pipelines can override these values.
Box 2: Set the stage retention policy to 60 days
You may want to retain more releases that have been deployed to specific stages.
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/policies/retention
NEW QUESTION # 74
......
Objective of Microsoft AZ-400 Certification
Certification is the basic need of the candidates. It is a means to achieve an objective in the field. Employers always require certified candidates. List of companies which require certified candidates are many. Rewarding people is done according to the certifications they have. Skills and knowledge are necessary for the job. Focus on the objectives of the exam. Jobs are awarded to the people who have skills and knowledge. Feel the importance of the exam through the answers. The answers are designed to make the exam easy for the candidates. Microsoft AZ-400 exam guides are quite useful. Job interviews are quite easy with the help of these exams. Microsoft AZ-400 exam dumps is designed to boost the confidence of the candidates. Industry always requires certified candidates. Crypto analysis is an important career option. Offering people is quite an easy task. Extremely difficult to get the job in the company. Relevance of jobs in the company is quite important. Moment of getting a job is very important.
Paying attention to the exam questions is extremely essential. Handle the questions properly. Materials must be read and comprehended. Worry about the preparation is necessary to get a job with the company. Credit goes to the people who are certified. Process to get a job in the company is very simple. Tech giants have stakes in the company.
Pass Microsoft AZ-400 Test Practice Test Questions Exam Dumps: https://www.torrentexam.com/AZ-400-exam-latest-torrent.html
The Best Microsoft Azure Study Guide for the AZ-400 Exam: https://drive.google.com/open?id=1E38EsrPXE4V1TTYDNSKCLjVMu5hAFflh
