The latest Microsoft AZ-400 Designing and Implementing Microsoft DevOps Solutions certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-400 Designing and Implementing Microsoft DevOps Solutions exam and earn Microsoft AZ-400 Designing and Implementing Microsoft DevOps Solutions certification.
Exam Question 81
You plan to use a NuGet package in a project in Azure DevOps. The NuGet package is in a feed that requires authentication.
You need to ensure that the project can restore the NuGet package automatically.
What should the project use to automate the authentication?
A. an Azure Automation account
B. an Azure Artifacts Credential Provider
C. an Azure Active Directory (Azure AD) account that has multi-factor authentication (MFA) enabled
D. an Azure Active Directory (Azure AD) service principal
Correct Answer:
B. an Azure Artifacts Credential Provider
Answer Description:
The Azure Artifacts Credential Provider automates the acquisition of credentials needed to restore NuGet packages as part of your .NET development workflow. It integrates with MSBuild, dotnet, and NuGet(.exe) and works on Windows, Mac, and Linux. Any time you want to use packages from an Azure Artifacts feed, the
Credential Provider will automatically acquire and securely store a token on behalf of the NuGet client you’re using.
References:
GitHub > Azure Artifacts Credential Provider
Exam Question 82
You create a Microsoft ASP.NET Core application.
You plan to use Azure Key Vault to provide secrets to the application as configuration data.
You need to create a Key Vault access policy to assign secret permissions to the application. The solution must use the principle of least privilege.
Which secret permissions should you use?
A. List only
B. Get only
C. Get and List
Correct Answer:
B. Get only
Answer Description:
Application data plane permissions:
Keys: sign
Secrets: get
References:
Microsoft Docs > Secure access to a key vault
Exam Question 83
You are designing an Azure DevOps strategy for your company’s development team.
You suspect that the team’s productivity is low due to accumulate technical debt.
You need to recommend a metric to assess the amount of the team’s technical debt.
What should you recommend?
A. the number of code modules in an application
B. the number of unit test failures
C. the percentage of unit test failures
D. the percentage of overall time spent on rework
Correct Answer:
D. the percentage of overall time spent on rework
Answer Description:
Technical Debt is the estimated cost to fix code elements issues.
Technical Debt Ratio: Ratio between the cost to develop the software and the cost to fix it. The Technical Debt Ratio formula is:
- Remediation cost / Development cost
- Which can be restated as:
- Remediation cost / (Cost to develop 1 line of code * Number of lines of code)
References:
Cloud and DevOps > People, Process, Product – DevOps – SonarQube Tool Assessment- 1
Exam Question 84
You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.
You need to ensure that all the open source libraries comply with your company’s licensing standards.
Which service should you use?
A. NuGet
B. Maven
C. Black Duck
D. Helm
Correct Answer:
C. Black Duck
Answer Description:
Secure and Manage Open Source Software
Black Duck helps organizations identify and mitigate open source security, license compliance and code-quality risks across application and container portfolios.
Black Duck Hub and its plugin for Team Foundation Server (TFS) allows you to automatically find and fix open source security vulnerabilities during the build process, so you can proactively manage risk. The integration allows you to receive alerts and fail builds when any Black Duck Hub policy violations are met.
Note: WhiteSource would also be a good answer, but it is not an option here.
References:
Visual Studio Marketplace > Black Duck Hub
Exam Question 85
Your company has a project in Azure DevOps for a new application. The application will be deployed to several Azure virtual machines that run Windows Server 2016.
You need to recommend a deployment strategy for the virtual machines. The strategy must meet the following requirements:
- Ensure that the virtual machines maintain a consistent configuration.
- Minimize administrative effort to configure the virtual machines.
What should you include in the recommendation?
A. Azure Resource Manager templates and the PowerShell Desired State Configuration (DSC) extension for Windows
B. Deployment YAML and Azure pipeline deployment groups
C. Azure Resource Manager templates and the Custom Script Extension for Windows
D. Deployment YAML and Azure pipeline stage templates
Correct Answer:
C. Azure Resource Manager templates and the Custom Script Extension for Windows
Answer Description:
The Custom Script Extension downloads and executes scripts on Azure virtual machines. This extension is useful for post deployment configuration, software installation, or any other configuration or management tasks. Scripts can be downloaded from Azure storage or GitHub, or provided to the Azure portal at extension run time. The Custom Script Extension integrates with Azure Resource Manager templates, and can be run using the Azure CLI, PowerShell, Azure portal, or the Azure Virtual Machine REST API.
Incorrect Answers: B: YAML doesn’t work with Azure pipeline deployment groups.
References:
Microsoft Docs > Custom Script Extension for Windows
Exam Question 86
You are developing an iOS application by using Azure DevOps.
You need to test the application manually on 10 devices without releasing the application to the public.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Create a Microsoft Intune device compliance policy.
B. Deploy a certificate from an internal certification authority (CA) to each device.
C. Register the application in the iTunes store.
D. Onboard the devices into Microsoft Intune.
E. Distribute a new release of the application.
F. Register the IDs of the devices in the Apple Developer portal.
Correct Answer:
B. Deploy a certificate from an internal certification authority (CA) to each device.
F. Register the IDs of the devices in the Apple Developer portal.
Answer Description:
B: Follow these steps to register the devices:
- Select the Register devices button.
- A dialog prompts for your username and password used in the Apple Developer portal.
- Once you sign in with your Apple username and password, App Center adds the unprovisioned devices to both your Apple developer account and the releases provisioning profile.
- Optionally you can upload a .p12 file to re-sign the app and distribute it to the newly added devices. Read more on how to generate a .p12 file.
F: Registering a device means making it part of the list of devices on the Apple Developer portal that can then be included in a provisioning profile.
Incorrect Answers: C: Only register the application in the iTunes store when it is ready for public release.
References:
Microsoft Docs > Device registration and app re-signing
Exam Question 87
You have a multi-tier application that has an Azure Web Apps front end and an Azure SQL Database back end.
You need to recommend a solution to capture and store telemetry datThe solution must meet the following requirements:
- Support using ad-hoc queries to identify baselines.
- Trigger alerts when metrics in the baseline are exceeded.
- Store application and database metrics in a central location.
What should you include in the recommendation?
A. Azure Event Hubs
B. Azure SQL Database Intelligent Insights
C. Azure Application Insights
D. Azure Log Analytics
Correct Answer:
D. Azure Log Analytics
Answer Description:
Azure Platform as a Service (PaaS) resources, like Azure SQL and Web Sites (Web Apps), can emit performance metrics data natively to Log Analytics.
The Premium plan will retain up to 12 months of data, giving you an excellent baseline ability.
There are two options available in the Azure portal for analyzing data stored in Log analytics and for creating queries for ad hoc analysis.
Incorrect Answers: B: Intelligent Insights analyzes database performance by comparing the database workload from the last hour with the past seven-day baseline workloaHowever, we need handle application metrics as well.
References:
Microsoft Docs > Collect Azure platform logs in Log Analytics workspace in Azure Monitor
Exam Question 88
Your company has a project in Azure DevOps for a new web application.
The company uses ServiceNow for change management.
You need to ensure that a change request is processed before any components can be deployed to the production environment.
What are two ways to integrate ServiceNow into the Azure DevOps release pipeline? Each correct answer presents a complete solution.
A. Define a deployment control that invokes the ServiceNow REST API.
B. Define a pre-deployment gate before the deployment to the Prod stage.
C. Define a deployment control that invokes the ServiceNow SOAP API.
D. Define a post-deployment gate after the deployment to the QA stage.
Correct Answer:
B. Define a pre-deployment gate before the deployment to the Prod stage.
D. Define a post-deployment gate after the deployment to the QA stage.
Answer Description:
An example of a release pipeline that can be modeled through a release pipeline in shown below:
In this example, a release of a website is created by collecting specific versions of two builds (artifacts), each from a different build pipeline. The release is first deployed to a Dev stage and then forked to two QA stages in parallel. If the deployment succeeds in both the QA stages, the release is deployed to Prod ring 1 and then to Prod ring 2. Each production ring represents multiple instances of the same website deployed at various locations around the globe.
References:
Microsoft Docs > Release pipelines
Exam Question 89
Your company has a project in Azure DevOps for a new web application.
You need to ensure that when code is checked in, a build runs automatically.
Solution: From the Triggers tab of the build pipeline, you select Enable continuous integration.
Does this meet the goal?
A. Yes
B. No
Correct Answer:
A. Yes
Answer Description:
In Visual Designer you enable continuous integration (CI) by:
- Select the Triggers tab.
- Enable Continuous integration.
A continuous integration trigger on a build pipeline indicates that the system should automatically queue a new build whenever a code change is committed.
References:
Microsoft Docs > Create your first pipeline
Exam Question 90
You are automating the build process for a Java-based application by using Azure DevOps.
You need to add code coverage testing and publish the outcomes to the pipeline.
What should you use?
A. Cobertura
B. Bullseye Coverage
C. MSTest
D. Coverlet
Correct Answer:
D. Coverlet
Answer Description:
Use Publish Code Coverage Results task in a build pipeline to publish code coverage results to Azure Pipelines or TFS, which were produced by a build in Cobertura or JaCoCo format.
References:
Microsoft Docs > Publish Code Coverage Results task