Home/Directory/az 400

az 400 Practice Questions

Page 1 of 1 (25 total questions)

Your organization uses Azure Pipelines for CI/CD. You have a pipeline that takes 45 minutes to run and requires compiling large C++ binaries. You are currently using Microsoft-hosted agents, but the build times are unacceptable. You want to reduce build times by utilizing incremental builds and cached dependencies. Which type of agent pool should you configure?
View Question & Answer ➔
You are managing an Azure Repos Git repository. Developers frequently commit directly to the `main` branch, bypassing code reviews and breaking the build. You need to ensure that all changes to `main` are reviewed by at least two people and pass a successful automated build before being merged. What should you configure?
View Question & Answer ➔
Your development team uses npm packages hosted on public registries. Security policies now require that all external dependencies are scanned and cached internally to prevent build failures if the public registry goes down or a package is deleted. Which feature of Azure Artifacts should you implement?
View Question & Answer ➔
You are configuring a deployment pipeline in Azure DevOps. The deployment requires a database connection string and an API key. These secrets must not be stored in plaintext in the YAML pipeline file or the repository. What is the most secure and natively integrated way to handle these secrets?
View Question & Answer ➔
You are deploying a new version of a critical web application to Azure App Service. You want to route 10% of your production traffic to the new version to monitor for errors before rolling it out to 100% of users. If errors spike, you want to immediately revert. Which deployment strategy is this?
View Question & Answer ➔
You are using Azure Resource Manager (ARM) templates to deploy infrastructure. Your pipeline fails occasionally because developers introduce changes that inadvertently delete existing resources. You need to preview exactly what an ARM template deployment will create, modify, or delete before actually applying it. Which feature should you use?
View Question & Answer ➔
Your organization is migrating its source code to GitHub Enterprise but will continue using Azure Boards for work item tracking. You need to ensure that when a developer creates a pull request in GitHub, it automatically links to the corresponding user story in Azure Boards. What should you configure?
View Question & Answer ➔
Your application is instrumented with Azure Application Insights. You want to be proactively notified if the application experiences a sudden, anomalous spike in HTTP 500 errors or performance degradation, without having to configure explicit static threshold alerts for every metric. Which feature provides this?
View Question & Answer ➔
You are building a Docker image in Azure Pipelines. You want to ensure the image is automatically pushed to Azure Container Registry (ACR), and you want ACR to automatically build and patch the image whenever the base OS image (e.g., Ubuntu) is updated in the public Docker Hub registry. Which feature achieves this?
View Question & Answer ➔
Your code is hosted in GitHub. A developer accidentally commits an Azure Storage Account access key directly into the repository. You need a system that immediately detects this exposed key and alerts the security team. Which feature should you enable?
View Question & Answer ➔
You are using Azure Pipelines environments to deploy to production. Before the deployment proceeds to the production environment, you need an external IT Service Management (ITSM) tool (like ServiceNow) to approve the change request ticket automatically. How do you implement this in Azure Pipelines?
View Question & Answer ➔
Your CI/CD pipeline runs a suite of automated unit tests using NUnit. You want to visualize the test results (pass/fail rates, duration) directly in the Azure DevOps pipeline summary dashboard. Which task must you include in your YAML pipeline after the test execution?
View Question & Answer ➔
Your team uses Terraform to deploy Azure infrastructure via Azure Pipelines. Multiple developers might trigger the pipeline simultaneously, which could lead to race conditions and corrupt the Terraform `.tfstate` file. What is the recommended way to prevent this?
View Question & Answer ➔
You are connecting Azure Pipelines to your Azure subscription to deploy resources. To improve security and eliminate the need to manage and rotate client secrets for service principals, which authentication method should you use for your Azure Resource Manager service connection?
View Question & Answer ➔
You are implementing DevSecOps practices. You need to scan your open-source dependencies (npm, NuGet) for known security vulnerabilities and licensing compliance issues during the CI build process. Which third-party tool natively integrates with Azure DevOps to provide this capability?
View Question & Answer ➔
You have a microservices application. You want to release a new feature in production but keep it hidden from users until marketing announces it. If the feature causes performance issues, you want to disable it instantly without redeploying the code. Which Azure service should you use?
View Question & Answer ➔
Your team uses Azure Boards. You are working on a massive project that spans multiple teams over several months. You need to visually track dependencies between epics and features, and forecast delivery timelines across multiple sprints. Which Azure Boards feature should you use?
View Question & Answer ➔
Your team is adopting a continuous integration model where developers commit to the main branch multiple times a day. Long-lived feature branches are banned. Features that are incomplete are hidden behind toggles. Which branching strategy are you implementing?
View Question & Answer ➔
Your organization has 50 different microservices, each with its own Azure Pipeline YAML file. All pipelines share the exact same 15-step security scanning and build process. You need to centralize this logic so that updating a security step applies to all microservices instantly without editing 50 files. What should you use?
View Question & Answer ➔
You are migrating from Azure Repos to GitHub. Your application relies heavily on third-party libraries. You want a tool that automatically creates Pull Requests to update these dependencies whenever a security patch or new version is released. Which GitHub feature should you use?
View Question & Answer ➔
You are writing a Bicep file to deploy an Azure SQL Database. You need to ensure that the administrator password provided during deployment is not exposed in deployment logs or output files. Which Bicep decorator should you use on the parameter?
View Question & Answer ➔
Your web application is globally distributed. You need to continuously test the application's responsiveness from multiple geographic locations. If the application takes more than 5 seconds to respond from any location, you want an alert generated. Which Azure Monitor feature provides this capability?
View Question & Answer ➔
You are using Azure DevOps Classic Release Pipelines. You want to deploy to the Production stage only after ensuring that there are no active High-severity bugs logged against the current release in Azure Boards. Which feature automates this check?
View Question & Answer ➔
You are modernizing an application to run in Azure Kubernetes Service (AKS). Developers use Windows 10 laptops. They want to write code, test it in a local container, and debug it as if it were running natively on their machines, without having to build and push the container image to ACR for every code change. Which tool should they use?
View Question & Answer ➔
You are using Azure Pipelines and want to run Static Application Security Testing (SAST) on your code. You configure the SonarQube tasks in your pipeline. In which exact order must the SonarQube tasks be placed for a .NET application?
View Question & Answer ➔

Page 1 of 1

az 400 Practice Questions

You are configuring a deployment pipeline in Azure DevOps. The deployment requires a database connection string and an API key. These secrets must not be stored in plaintext in the YAML pipeline file or the repository. What is the most secure and natively integrated way to handle these secrets?

You are deploying a new version of a critical web application to Azure App Service. You want to route 10% of your production traffic to the new version to monitor for errors before rolling it out to 100% of users. If errors spike, you want to immediately revert. Which deployment strategy is this?

Your code is hosted in GitHub. A developer accidentally commits an Azure Storage Account access key directly into the repository. You need a system that immediately detects this exposed key and alerts the security team. Which feature should you enable?

Your CI/CD pipeline runs a suite of automated unit tests using NUnit. You want to visualize the test results (pass/fail rates, duration) directly in the Azure DevOps pipeline summary dashboard. Which task must you include in your YAML pipeline after the test execution?

Your team uses Terraform to deploy Azure infrastructure via Azure Pipelines. Multiple developers might trigger the pipeline simultaneously, which could lead to race conditions and corrupt the Terraform `.tfstate` file. What is the recommended way to prevent this?

You are connecting Azure Pipelines to your Azure subscription to deploy resources. To improve security and eliminate the need to manage and rotate client secrets for service principals, which authentication method should you use for your Azure Resource Manager service connection?

You are implementing DevSecOps practices. You need to scan your open-source dependencies (npm, NuGet) for known security vulnerabilities and licensing compliance issues during the CI build process. Which third-party tool natively integrates with Azure DevOps to provide this capability?

You have a microservices application. You want to release a new feature in production but keep it hidden from users until marketing announces it. If the feature causes performance issues, you want to disable it instantly without redeploying the code. Which Azure service should you use?

Your team uses Azure Boards. You are working on a massive project that spans multiple teams over several months. You need to visually track dependencies between epics and features, and forecast delivery timelines across multiple sprints. Which Azure Boards feature should you use?

Your team is adopting a continuous integration model where developers commit to the main branch multiple times a day. Long-lived feature branches are banned. Features that are incomplete are hidden behind toggles. Which branching strategy are you implementing?

You are migrating from Azure Repos to GitHub. Your application relies heavily on third-party libraries. You want a tool that automatically creates Pull Requests to update these dependencies whenever a security patch or new version is released. Which GitHub feature should you use?

You are writing a Bicep file to deploy an Azure SQL Database. You need to ensure that the administrator password provided during deployment is not exposed in deployment logs or output files. Which Bicep decorator should you use on the parameter?

You are using Azure DevOps Classic Release Pipelines. You want to deploy to the Production stage only after ensuring that there are no active High-severity bugs logged against the current release in Azure Boards. Which feature automates this check?

You are using Azure Pipelines and want to run Static Application Security Testing (SAST) on your code. You configure the SonarQube tasks in your pipeline. In which exact order must the SonarQube tasks be placed for a .NET application?