You need to implement Project6.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them m the correct order.
You are using GitHub asa source code repository.
You create a client-side Git hook on the commit-msg event. The hook requires that each commit message contain a custom work item tag.
You need to make a commit that does not have a work item tag.
Which git commit parameter shouldyou use?
Task 1
Navigate to aex.dev.azure.com and specify the following credentials:
• UserUser1-48901628@cxamUsers.com
• Password: aFpJ2j-6M!
Use the default setting to sign up for Azure DevOps and create an Azure DevOps organization. Once the organization is created. create a private project named Project1.
You need to ensure that the maximum file size for all the Azure DevOps repositories of Project1 is 2 MB.
You need to configure a virtual machine named VM1 to securely access stored secrets in an Azure Key Vault named az400-11566895-kv.
To complete this task, sign in to the Microsoft Azure portal.
You add the virtual machines as managed nodes in Azure Automation State Configuration.
You need to configure the computer in Group7.
What should you do?
In Azure DevOps, you create Project3.
You need to meet the requirements of the project.
What should you do first?
How should you configure the filters for the Project5 trigger? To answer, select the appropriate option in the answer area.
NOTE: Each correct selectionis worth one point.
You need to recommend a procedure to implement the build agent for Project1.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions tothe answer area and arrange them in the correct order.
You need to implement the code flow strategy for Project2 in Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list ofactions to the answer area and arrange them in the correct order.
You plan to deploy a new database environment. The solution must meet the technical requirements. You need to prepare the database for the deployment. How should you formatthe export?
You are configuring the Azure DevOps dashboard. The solution must meet the technical requirements.
Which widget should you use for each metric? To answer, drag the appropriate widgets to the correct metrics. Each widgetmay be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE:Each correct selection is worth one point.
You need to configure Azure Pipelines to control App2 builds.
Which authentication method should you use?
You need to perform the GitHub code migration. The solution must support the planned changes for the DevOps environment.
What should you use?
You need to replace the existing DevOps tools to support the planned changes.
What should you use? To answer, drag the appropriate tools to the correct targets. Each tool may be usedonce, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE:Each correct selection is worth one point.
You need to meet the technical requirements for controlling access to Azure DevOps.
What should you use?
You need to configure authentication for App1. The solution must support the planned changes.
Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
How should you confrere the release retention policy for the investment planning depletions suite? To answer, select the appropriate options in the answer area.
NOTE: Eachcorrect selection is worth one point.
HOTSPOT
You are using PowerShell to administer Azure Log Analytics workspaces.
You need to list the available workspaces and their properties.
How should you complete the command? To answer, select the appropriate optionsin the answer area.
NOTE: Each correct selection is worth one point.
Where should the build and release agents for the investment planning application suite run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You need to the merge the POC branch into the main branch. The solution must meet the technical requirements.
Which command should you run?
You need to configure the alert for VM1.The solution must meet the technical requirements.
Which two settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE:Each correct selection is worth one point.
You need to meet the technical requirements for monitoring App1.
What should you use?
HOTSPOT
You have an Azure virtual machine named VM1 that runs Linux.
You plan to deploy the Desired State Configuration (DSC) extension to VM1.
You need to grant the Log Analytics agent the appropriate directory permissions.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth onepoint.
ION NO: 7
You have Azure Pipelines and GitHub integrated as a source code repository.
The build pipeline has continuous integration enabled.
You plan to trigger an automated build whenever code changes are committed to the repository.
You need to ensure that the system will wait until a build completes before queuing another build.
What should you implement?
You have a project in Azure DevOps.
You plan to deploy a self-hosted agent by using an unattended configuration script.
Which two values should you define in the configuration script? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth onepoint.
To resolve the current technical issue, what should you do to theRegister-AzureRmAutomationDscNodecommand?
Which branching strategy should you recommend for the investment planning applications suite?
What should you use to implementthe code quality restriction on the release pipeline for the investment planning applications suite?
Which package feed access levels should be assigned to the Developers and Team Leaders groups for the investment planning applications suite? To answer, drag the appropriate access levels to the correct groups. Each access level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE:Each correct selection is worth one point.
You need to configure a cloud service to store the secrets required by the mobile applications to call the share.
What should you include in thesolution? To answer, select the appropriate options m the answer area, NOTE: Each correct selection is worth one point.
How should youconfigure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection a worth one point.
Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:
The build must access an on-premises dependency management system.
The build outputs must be stored as Server artifacts in Azure DevOps.
The source code must be stored in a Git repository in Azure DevOps.
Solution: Configure the build pipeline to use a Microsoft-hosted agent pool running the Windows Server 2019 with Visual Studio 2019 image. Include the Java Tool Installer task in the build pipeline.
Does this meet the goal?
You are designing the development process for your company.
You need to recommend a solution for continuous inspection of the company’s code base to locate common code patterns that are known to be problematic.
What should you include in the recommendation?
You have an Azure subscription that contains multiple Azure pipelines.
You need to deploy a monitoring solution for the pi*lines. The solution must meet the following requirements:
Parse logs from multiple sources.
identify the root cause of issues.
What advanced feature of a monitoring tool should include in the solution?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unit solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear if the review screen.
You use an Azure Pipelines pipeline to build and release web apps.
You need to configure the pipeline to meet the following requirements:
• Only run when there is a change in the/webapp folder.
• Only run when a pr is created.
Solution: You configure the pipeline definition by using the following elements.
Does this meet the goal?
You manage source code control and versioning by using GitHub.
You need to ensure that a PowerShell script is executed automatically before rebase operations are performed.
What should you use?
You are creating a NuGet package.
You plan to distribute the package to your development team privately.
You needto share the package and test that the package can be consumed.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You use Get for source control.
You need to optimize theperformance of a repository. The solution must meet the following requirements:
Permanently remove all items referenced only in the ref log.
Remove history that is NOT in any current branch.
How should you complete the command? To answer, select theappropriate options in the answer area.
You have an Azure subscription that uses Azure Automation State Configuration to manage the configuration of virtual machines.
You need to identify which nodes are noncompliant.
How should you complete the query? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
You plan to provision a self-hosted Linux agent
Which authentication mechanism should you use to register the self-hosted agent?
You are integrating an Azure Boards project and a GitHub repository.
You need to authenticate Azure Boards to GitHub.
Which two authentication methods can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection isworth one point.
You need to execute inline testing of an Azure DevOps pipeline that uses a Docker deploymentmodel. The solution must prevent the results from being published to the pipeline.
What should you use for the inline testing?
You build a Node.js app named App1 by using GitHub.
You need to test App1. The solution must ensure that App1 meets the following requirements.
• Works correctly with versions 10,12, and 14 of Node.js
• Works correctly with Ubuntu versions 22.04and 20-04
• Minimizes the runtime of the test stage
What should you use?
After you answer a question in this section, you will NOT be able to return to it As a result, these questions will not appear in the review screen.
You use Azure Pipelines to build and test a React js application
You have a pipeline that has a single job.
You discover thatinstalling JavaScript packages from npm lakes approximately five minutes each time you run the pipeline.
You need to recommend a solution to reduce the pipeline execution time.
Solution: You recommend enabling pipeline caching.
Does this meet the goal?
As part of your application build process, you need to deploy a group of resources to Azure by using an Azure Resource Manager template located on GitHub.
Which three action should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You are defining release strategies for two applications as shown in the following table.
Which releasestrategy should you use for each application? To answer, drag the appropriate release strategies to the correct applications. Each release strategy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scrollto view content.
NOTE:Each correct selection is worth one point.
Your company uses Service Now for incident management.
You develop an application that runs on Azure.
The company needs to generate a ticket in Service Now when the application fails to authenticate.
Which Azure Log Analytics solution should you use?
You have an Azure web app named Webapp1.
You need to use an Azure Monitor query to create a report that details the top 10 pages of Webapp1 that failed.
How should youcomplete the query? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen
Your company has a project in Azure DevOps for a new web application.
You need to ensure that when code is checked in, a build runs automatically.
Solution: From the Continuous deployment trigger settings of the release pipeline, you enable thePull request triggersetting.
Does the meet the goal?
You have an Azure DevOps organization named Contoso that contains a project named Project 1.
You provision an Azure key vault name Keyvault1.
You need to reference Keyvault1 secrets in a build pipeline of Project1.
What should you do first?
You have a project m Azure DevOps that has a release pipeline.
You need to integrate work item tracking and an Agile project management system to meet the following requirements:
• Ensure that developers can track whether their commits are deployed to production.
• Report the deployment status.
• Minimize integration effort.
Which system should you use?
Your company has a release pipeline in an Azure DevOps project.
You plan to deploy to an Azure Kubernetes Services (AKS) cluster by using the Helm package and deploy task.
You need to install a service in the AKS namespace for the planned deployment.
Which service should you install?
You are creating a YAML-based Azure pipeline to deploy an Azure Data factory instance that has the following requirements;
• If a Data Factory instance exists already, the instance must be overwritten.
• No other resources in a resource group named Fabrikam must be affected.
How should you complete the code? To answer, select theappropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You are implementing a newproject in Azure DevOps.
You need to assess the performance of the protect. The solution must identity the following metrics:
•How long it takes to complete a work item
* The percentage of defects found in production
Which DevOps KPI should you review for each metric? To answer drag the appropriate KPIs to the correct metric. Each KPI may be used once, more than once, or not at all. You may need to drag the spirt bar between panes or scroll to view content.
NOTEEach correct selection is worthone point.
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have an on-premises web server named Server1.
You need to ensure that you can build .NET apps and deploy the apps to Server1 by using Azure Pipelines.
Solution: You deploy Managed DevOps Pools and select the Ubuntu Server 22.04 LTS - x64 Gen 2 image.
Does this meet the goal?
You have GitHub repository named repo1 that stores the code of named App1.
You need deploy workflow for repo1 by using GitHub Actions. The solution must meet the following requirements:
Scan on pushes to the main branch.
Scan on pull requests to the main branch.
Scan on pull requests to any branch that has a prefix of releases/.
Scan all the files in subdirectories of the scan directory.
Exclude scanning of markdown files
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that m.ght meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you win NOT be able to return to it. As a result, these questions win not appear in the review screen.
You integrate a cloud- hosted Jenkins server and a newAzure DevOps deployment
You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos.
Solution: You create a service hook subscription that uses the code pushed event.
Does this meet the goal?
You are developing an iOS application by using Azure DevOps.
You need to test the application manually on 10 devices without releasing the application to the public.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE:Each correct selection is worth one point.
You have a project in Azure DevOps.
You create the following YAML template named Template1.yml.
steps:
- script: 9pm install
- script: yarn install
- script: 9pm run compile
You create the following pipeline named File1.yml.
parameters:
users steps:
- task: MyTask@1
- script: echo Done
You need to ensure that Template1.yaml runs before File1.yml.
How should you update File1.yml?
You use GitHub Enterprise for source control repositories. The repositories store C# code. You need to enable CodeQL scanning for the repositories. What should you do?
You have an Azure subscription that contains an Azure load testing instance named Test1 and an Azure App Service web app named App1.
You implement a CI/CD pipeline named Pipeline1 that uses Test1. Pipeline1 uses the following alt-config-pipeline1.yam1 file.
For each of the following statements, select Yes if thestatement is true, otherwise select No.
You have an Azure subscription that contains a user named User1.
You have an Azure Resource Manager (ARM) template named Template 1.
You plan to perform the following actions:
• Deploy an Azure key vault named KV1.
• Deploy Azure resources by using Template1 to retrieve secrets from KV1
You need to ensure that User1 can deploy Template1 The solution must follow the principle of least privilege.
Which permission should you grant to User1, and which parameter should be specified when you create KV1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You use Azure Pipelines to build and test code projects.
You notice an increase in cycle times.
You need to identify whether agent pool exhaustionis causing the issue.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Note: This question part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the staled goals. Some question sets might have more than one correct solution, whale others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.
You integrate a cloud-hosted Jenkins server and a new Azure DevOps depsoyment.
You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos.
Solution: You add a trigger to the build pipeline.
Does this meetthe goal?
Task 10
For Project1, you need to ensure that artifacts, symbols, and attachments are retained for 60 days.
O: 43SIMULATION
Your company plans to implement a new compliance strategy that will require all Azure web apps to be backed up every five hours.
You need to back up an Azure web app named az400-11566895-main every five hours to an Azure Storage accountin your resource group.
To complete this task, sign in to the Microsoft Azure portal.
Task 8
You need to ensure that the https://contoso.com/statushook webhookis called every time a repository named az40038443478acr 1 receives a new version of an image named dotnetapp
You need to ensure that an Azure web app named az400-9940427-main supports rolling upgrades. The solution must ensure that only 10 percent of users who connect to az400-9940427-main use update versions of the app.
The solution must minimize administrative effort.
To complete this task, sign in to the Microsoft Azure portal.
You need to configure an Azure web app named az400-9940427-main to contain an environmental variable named “MAX_ITEMS”. The environmental variable must have a value of 50.
To complete this task, sign in to the Microsoft Azure portal.
You plane to store signed images in anAzure Container Registry instance named az4009940427acr1.
You need to modify the SKU for az4009940427acr1 to support the planned images. The solution must minimize costs.
To complete this task, sign in to the Microsoft Azure portal.
Task 4
Initialize the default main branch, if it does not exist already.
In the Userl-42147509 Azure DevOps project, you need to implement an approval process for the default main branch.
The process must use the four-eyes principle and have at least one approval on every iteration.
Task 3
You need to create a new team dashboard named Dashboard1 for the default project team of Project1. The dashboard must display the members of the team
You need to create a notification if the peak averageresponse time of an Azure web app named az400-9940427-main is more than five seconds when evaluated during a five-minute period. The notification must trigger the “https://contoso.com/notify” webhook.
To complete this task, sign in to the Microsoft Azureportal.
You need to prepare a network security group (NSG) named az400-9940427-nsg1 to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet.
To complete this task, sign in to the Microsoft Azure portal.
Task 3
Initialize the default main branch, if it floes not already exist.
You need to protect the main branch of the Project l repository to ensure that all changes are processed by using a pull request that has traceability to a work item.
Task 6
For Project 1. you need to create a service connection that can be used to deploy resources to the RGHod489Q1628 resource group.
The service connection must use the ManagedJd1 identity and workload identity federation.
You have several apps that use an Azure SQLDatabase named db1.
You need to ensure that queries to db1 are tuned by Azure over time. The solution must only apply to db1.
To complete this task, sign in to the Microsoft Azure portal.
Task 7
You need to prepare a network security group (NSG) named az400 38443478 nsgl to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet
Task 6
You have an Azure function hosted in an App Service plan named az400-38443478-funct
You need to configure az400 38443478-funcl lo update the functions automatically whenever new code is committedto the main branch of https://githubcom/Azure-Samples/functions-quickstart.
NOTE: Access to GitHub is blocked in the exam environment. Access to GitHub is NOT required to complete the task successfully.
Task 10
You need to create a variable group named varGroup1 that will contain the following variables and default values:
• username: Userl-48901628
• password: aFpJ2j+6M!
The PASSWORD variable must be secret.
You need to create and configure an Azure Storage account named az400lod11566895stor in a resource group named RG1lod11566895 to store the boot diagnostics for a virtual machine named VM1.
To complete this task, sign in to the Microsoft Azure portal.
You need to create a virtual machine template in an Azure DevTestLabs environment named az400-9940427-dtl1. The template must be based on Windows Server 2016 Datacenter. Virtual machines created from the template must include the selenium tool and the Google Chrome browser.
To complete this task, sign in to the Microsoft Azure portal.
Task 11
You need to create a new artifact feed named artifact_feed.
Only 10 versions of the packages must be retained, and downloaded packages must be retained for 90 days.
Task 2
You need to log all audit events for the Azure DevOps organization in the Log Analytics! Logs Analytics workspace.
You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity.
Thesolution must use the principle of least privilege.
To complete this task, sign in to the Microsoft Azure portal.
You manage a website that uses an Azure SQL Database named db1 in a resource group named RG1lod11566895.
You need tomodify the SQL database to protect against SQL injection.
To complete this task, sign in to the Microsoft Azure portal.
Task 4
For Project1, you need to create a self-hosted agent pod named Pool1.
All the pipelines in Project1 must have access to Pool1.
Task 12
You need to create a personal access token (PAT) named Token! that has only the following capabilities
• Read write, andmanage code
• Read and execute builds
• Read releases
Token1 must expire in 60 days.
You have a web app that connects to an Azure SQL Database named db1.
You need to configure db1 to send Query Store runtime statistics to Azure Log Analytics.
To complete this task, sign in to the Microsoft Azure portal.
Task 11
You need to write a KQL query that will count the number of inbound requests for each source IP address, for any connection made during the last three months of 2021.
Open Azure Data Explorer by using the following link:
https//dataexploter azure.com/clusters/help/databases/Securiitylogs
The requests are contained in a table named InboundBrowsing in the Securitylogs connection.
The query must return two columns named NumberOfRequests and SourcelP.
Export the query result to C:\Samples
Task 7
Initialize the default main branch, if it does not exist already
In the User 1-42147509 organization, you need to install the Microsoft Security DevOps extension.
Next, create a new starter pipeline named starter1 that will use the following starter code.
Ensure that starter! includes a task that executes the extension and uses the following input*:
• Command: run
• Policy aruredevops
• Publish: true
Save the pipeline to anew branch named starter
You need to ensure that the https://contoso.com/statushook webhook is called every time a repository named az40010480345acr1 receives a new version of an image named dotnetapp.
To complete this task, sign in to the Microsoft Azure portal.
Task 5
For Project1, you need to create a project wiki named Wiki1 that uses the Mermaid syntax to render a diagram A sample of the desired output is stored in C:\Resources\TCPHandshake.png.
Task 3
You need to ensure that an Azure Web App named az400-38443478-matn supports rolling upgrades The solution must ensure that only 10 percent of users who connect to az400-38443478 main use updated versions of the app. The solution must minimize administrative effort.
You need to create a notification if the peak average response time of an Azure web app named az400-9940427-main is more than five seconds when evaluated during a five-minute period. The notification must trigger the “https://contoso.com/notify” webhook.
To complete this task, sign in to the Microsoft Azure portal.
Microsoft Azure | AZ-400 Exam Topics | AZ-400 Questions answers | AZ-400 Test Prep | Microsoft Azure DevOps Solutions Exam Questions PDF | AZ-400 Online Exam | AZ-400 Practice Test | AZ-400 PDF | AZ-400 Test Questions | AZ-400 Study Material | AZ-400 Exam Preparation | AZ-400 Valid Dumps | AZ-400 Real Questions | Microsoft Azure AZ-400 Exam Questions
TESTED 16 Jun 2025
