ExamGecko
Home Home / Microsoft / AZ-400

Microsoft AZ-400 Practice Test - Questions Answers, Page 20

Question list
Search
Search

List of questions

Search

Related questions











Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You manage a project in Azure DevOps.

You need to prevent the configuration of the project from changing over time.

Solution: Perform a Subscription Health scan when packages are created.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

Instead implement Continuous Assurance for the project.

Note: The Subscription Security health check features in AzSK contains a set of scripts that examines a subscription and flags off security issues, misconfigurations or obsolete artifacts/settings which can put your subscription at higher risk.

Reference: https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

Your company uses the following resources:

Windows Server 2019 container images hosted in an Azure Container Registry.

Azure virtual machines that run the latest version of Ubuntu

An Azure Log Analytics workspace

Azure Active Directory (Azure AD)

An Azure key vault

For which two resources can you receive vulnerability assessments in Azure Security Center? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.
the Azure Log Analytics workspace
A.
the Azure Log Analytics workspace
Answers
B.
the Azure key vault
B.
the Azure key vault
Answers
C.
the Azure virtual machines that run the latest version of Ubuntu
C.
the Azure virtual machines that run the latest version of Ubuntu
Answers
D.
Azure Active Directory (Azure AD)
D.
Azure Active Directory (Azure AD)
Answers
E.
The Windows Server 2019 container images hosted in the Azure Container Registry.
E.
The Windows Server 2019 container images hosted in the Azure Container Registry.
Answers
Suggested answer: C, E

Explanation:


You use Azure Pipelines to manage build pipelines, GitHub to store source code, and Dependabot to manage dependencies. You have an app named App1.

Dependabot detects a dependency in App1 that requires an update.

What should you do first to apply the update?

A.
Create a pull request.
A.
Create a pull request.
Answers
B.
Approve the pull request.
B.
Approve the pull request.
Answers
C.
Create a branch.
C.
Create a branch.
Answers
D.
Perform a commit.
D.
Perform a commit.
Answers
Suggested answer: B

Explanation:

DependaBot is a useful tool to regularly check for dependency updates. By helping to keep your project up to date, DependaBot can reduce technical debt and immediately apply security vulnerabilities when patches are released. How does DependaBot work?

1. DependaBot regularly checks dependencies for updates

2. If an update is found, DependaBot creates a new branch with this upgrade and Pull Request for approval

3. You review the new Pull Request, ensure the tests passed, review the code, and decide if you can merge the change

Reference:

https://samlearnsazure.blog/2019/12/20/github-using-dependabot/

Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You manage a project in Azure DevOps.

You need to prevent the configuration of the project from changing over time.

Solution: Add a code coverage step to the build pipelines.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

Instead implement Continuous Assurance for the project.

Reference: https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You manage a project in Azure DevOps.

You need to prevent the configuration of the project from changing over time.

Solution: Implement Continuous Integration for the project.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

Instead implement Continuous Assurance for the project.

Reference:

https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You manage a project in Azure DevOps.

You need to prevent the configuration of the project from changing over time.

Solution: Implement Continuous Assurance for the project.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: A

Explanation:

The basic idea behind Continuous Assurance (CA) is to setup the ability to check for "drift" from what is considered a secure snapshot of a system. Support for Continuous Assurance lets us treat security truly as a 'state' as opposed to a 'point in time' achievement. This is particularly important in today's context when 'continuous change' has become a norm. There can be two types of drift:

Drift involving 'baseline' configuration: This involves settings that have a fixed number of possible states (often pre-defined/statically determined ones). For instance, a SQL DB can have TDE encryption turned ON or OFF...or a Storage Account may have auditing turned ON however the log retention period may be less than 365 days.

Drift involving 'stateful' configuration: There are settings which cannot be constrained within a finite set of well-known states. For instance, the IP addresses configured to have access to a SQL DB can be any (arbitrary) set of IP addresses. In such scenarios, usually human judgment is initially required to determine whether a particular configuration should be considered 'secure' or not. However, once that is done, it is important to ensure that there is no "stateful drift" from the attested configuration. (E.g., if, in a troubleshooting session, someone adds the IP address of a developer machine to the list, the Continuous Assurance feature should be able to identify the drift and generate notifications/ alerts or even trigger 'auto-remediation' depending on the severity of the change).

Reference: https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

You are designing a configuration management solution to support five apps hosted on Azure App Service. Each app is available in the following three environments: development, test, and production.

You need to recommend a configuration management solution that meets the following requirements:

Supports feature flags

Tracks configuration changes from the past 30 days

Stores hierarchically structured configuration values

Controls access to the configurations by using role-based access control (RBAC) permissions

Stores shared values as key/value pairs that can be used by all the apps

Which Azure service should you recommend as the configuration management solution?

A.
Azure Cosmos DB
A.
Azure Cosmos DB
Answers
B.
Azure App Service
B.
Azure App Service
Answers
C.
Azure App Configuration
C.
Azure App Configuration
Answers
D.
Azure Key Vault
D.
Azure Key Vault
Answers
Suggested answer: A

Explanation:


You have a containerized solution that runs in Azure Container Instances. The solution contains a frontend container named App1 and a backend container named DB1. DB1 loads a large amount of data during startup. You need to verify that DB1 can handle incoming requests before users can submit requests to App1.

What should you configure?

A.
a liveness probe
A.
a liveness probe
Answers
B.
a performance log
B.
a performance log
Answers
C.
a readiness probe
C.
a readiness probe
Answers
D.
an Azure Load Balancer health probe
D.
an Azure Load Balancer health probe
Answers
Suggested answer: C

Explanation:

For containerized applications that serve traffic, you might want to verify that your container is ready to handle incoming requests. Azure Container Instances supports readiness probes to include configurations so that your container can't be accessed under certain conditions.

Incorrect Answers:

A: Containerized applications may run for extended periods of time, resulting in broken states that may need to be repaired by restarting the container. Azure Container Instances supports liveness probes so that you can configure your containers within your container group to restart if critical functionality is not working.

Reference:

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-readiness-probe

You are designing a strategy to monitor the baseline metrics of Azure virtual machines that run Windows Server. You need to collect detailed data about the processes running in the guest operating system.

Which two agents should you deploy? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.
the Telegraf agent
A.
the Telegraf agent
Answers
B.
the Azure Log Analytics agent
B.
the Azure Log Analytics agent
Answers
C.
the Azure Network Watcher Agent for Windows
C.
the Azure Network Watcher Agent for Windows
Answers
D.
the Dependency agent
D.
the Dependency agent
Answers
Suggested answer: B, D

Explanation:

The following table provide a quick comparison of the Azure Monitor agents for Windows.

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

DRAG DROP

You are planning projects for three customers. Each customer’s preferred process for work items is shown in the following table.

The customers all plan to use Azure DevOps for work item management.

Which work item process should you use for each customer? To answer, drag the appropriate work item processé to the correct customers. Each work item process may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.


Question 200
Correct answer: Question 200

Explanation:

Box 1: Scrum

Choose Scrum when your team practices Scrum. This process works great if you want to track product backlog items (PBIs) and bugs on the Kanban board, or break PBIs and bugs down into tasks on the taskboard.

Box 2: Agile

Choose Agile when your team uses Agile planning methods, including Scrum, and tracks development and test activities separately. This process works great if you want to track user stories and (optionally) bugs on the Kanban board, or track bugs and tasks on the taskboard.

Box 3: CMMI

Choose CMMI when your team follows more formal project methods that require a framework for process improvement and an auditable record of decisions. With this process, you can track requirements, change requests, risks, and reviews.

Incorrect Answers:

XP:

The work tracking objects contained within the default DevOps processes and DevOps process templates are Basic, Agile, CMMI, and Scrum XP (Extreme Programming) and DevOps are different things. They don't contradict with each other, they can be used together, but they have different base concepts inside them.

References:

https://docs.microsoft.com/en-us/azure/devops/boards/work-items/guidance/choose-process?view=azure-devops

Total 482 questions
Go to page: of 49