Correct Answer: Store the state file in an Azure Blob Storage container with a state lock mechanism
When working in a team or CI/CD environment, Terraform state should be stored remotely in a shared location that supports locking. Azure Blob Storage serves as a remote backend for...
Correct Answer
Store the state file in an Azure Blob Storage container with a state lock mechanism
Why This Answer Is Correct
When working in a team or CI/CD environment, Terraform state should be stored remotely in a shared location that supports locking. Azure Blob Storage serves as a remote backend for Terraform and automatically supports state locking using blob leases. This prevents concurrent runs from corrupting the state file.
This question evaluates your knowledge of Infrastructure as Code — a core concept tested in Microsoft Certified: DevOps Engineer Expert (AZ-400). Understanding Infrastructure as Code is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are using Azure Resource Manager (ARM) templates to deploy infrastructure. Your pipeline fails occasionally because developers introduce changes that inadvertently delete existing resources. You need to preview exactly what an ARM template deployment will create, modify, or delete before actually applying it. Which feature should you use?
You are writing a Bicep file to deploy an Azure SQL Database. You need to ensure that the administrator password provided during deployment is not exposed in deployment logs or output files. Which Bicep decorator should you use on the parameter?