You have a build pipeline in Azure Pipelines that uses different jobs to compile an application for 10 different architectures.The build pipeline takes approximately one day to complete.You need to reduce the time it takes to execute the build pipelineWhich two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point

Increase the number of parallel jobs.

Move to a blue/green deployment pattern.

Reduce the size of the repository.

Increase the number of parallel jobs.

I need more hosted build resources. What can I do?

The Azure Pipelines pool provides all Azure DevOps organizations

Host your own agents on infrastructure that you manage.

You plan to use a NuGet package in a project in Azure DevOps. The NuGet package is in a feed that requires authentication. You need to ensure that the project can restore the NuGet package automatically.What should the project use to automate the authentication?

an Azure Artifacts Credential Provider

an Azure Active Directory (Azure AD) account that has multi-factor authentication (MFA) enabled

an Azure Active Directory (Azure AD) service principal

You use Azure Pipelines to manage project builds and deployments.You plan to use Azure Pipelines for Microsoft Teams to notify the legal team when a new build is ready for release. You need to configure the Organization Settings in Azure DevOps to support Azure Pipelines for Microsoft Teams. What should you turn on?

Third-party application access via OAuth

Azure Active Directory Conditional Access Policy Validation

Alternate authentication credentials

You have an existing project in Azure DevOps.You plan to integrate GitHub as the repository for the project.You need to ensure that Azure Pipelines runs under the Azure Pipelines identity.Which authentication mechanism should you use?

Azure Active Directory (Azure AD)

You are building a Microsoft ASP.NET application that requires authentication.You need to authenticate users by using Azure Active Directory (Azure AD).What should you do first?

Create an app registration in Azure AD

Assign an enterprise application to users and groups

Create an app registration in Azure AD

Configure the application to use a SAML endpoint

Create a new OAuth token from the application

Create a membership database in an Azure SQL database

You have an Azure DevOps organization named Contoso.You need to recommend an authentication mechanism that meets the following requirements:Supports authentication from GitMinimizes the need to provide credentials during authenticationWhat should you recommend?

personal access tokens (PATs) in Azure DevOps

Alternate credentials in Azure DevOps

user accounts in Azure Active Directory (Azure AD)

managed identities in Azure Active Directory (Azure AD)

You have an application that consists of several Azure App Service web apps and Azure functions.You need to assess the security of the web apps and the functions.Which Azure feature can you use to provide a recommendation for the security of the application?

Compute & apps in Azure Security Center

Security & Compliance in Azure Log Analytics

Resource health in Azure Service Health

Smart Detection in Azure Application Insights

Compute & apps in Azure Security Center

Your company has a project in Azure DevOps for a new web application.The company identifies security as one of the highest priorities.You need to recommend a solution to minimize the likelihood that infrastructure credentials will be leaked. What should you recommend?

Add a PowerShell task to the pipeline and run Set-AzureKeyVaultSecret.

Add a Run Inline Azure PowerShell task to the pipeline.

Add a PowerShell task to the pipeline and run Set-AzureKeyVaultSecret.

Add an Azure Key Vault task to the pipeline.

Add Azure Key Vault references to Azure Resource Manger templates.

You have a branch policy in a project in Azure DevOps. The policy requires that code always builds successfully. You need to ensure that a specific user can always merge changes to the master branch, even if the code fails to compile. The solution must use the principle of least privilege. What should you do?

From the Security settings of the branch, modify the access control for the user.

Add the user to the Build Administrators group.

Add the user to the Project Administrators group.

From the Security settings of the repository, modify the access control for the user.

From the Security settings of the branch, modify the access control for the user.

You have an Azure Resource Manager template that deploys a multi-tier application.You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application. What should you use?

an Azure Resource Manager parameter file

You are deploying a server application that will run on a Server Core installation of Windows Server 2019. You create an Azure key vault and a secret.You need to use the key vault to secure API secrets for third-party integrations.Which three actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Modify the application to access the key vault.

Configure a Key Vault access policy.

Deploy a virtual machine that uses a system-assigned managed identity.

Configure RBAC for the key vault.

Modify the application to access the key vault.

Configure a Key Vault access policy.

Deploy an Azure Desired State Configuration (DSC) extension.

Deploy a virtual machine that uses a system-assigned managed identity.

You have an Azure DevOps organization named Contoso that contains a project named Project1.You provision an Azure key vault named Keyvault1.You need to reference Keyvault1 secrets in a build pipeline of Project1.What should you do first?

Create a variable group in Project1.

Configure the security policy of Contoso.

Your company uses Azure DevOps.Only users who have accounts in Azure Active Directory can access the Azure DevOps environment.You need to ensure that only devices that are connected to the on-premises network can access the Azure DevOps environment. What should you do?

In Azure Active Directory, configure conditional access.

Assign the Stakeholder access level to all users.

In Azure Active Directory, configure risky sign-ins.

In Azure DevOps, configure Security in Project Settings.

In Azure Active Directory, configure conditional access.

You have the following Azure policy. You assign the policy to the Tenant root group.What is the effect of the policy?

ensures that all traffic to new Azure Storage accounts is encrypted

prevents all HTTP traffic to existing Azure Storage accounts

ensures that all traffic to new Azure Storage accounts is encrypted

prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet

ensures that all data for new Azure Storage accounts is encrypted at rest

You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1. You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines. What should you do?

Create a variable group in Project1.

Modify the security settings of the pipelines.

Configure the security policy of Contoso.

You use WhiteSource Bolt to scan a Node.js application.The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment. You need to ensure that WhiteSource Bolt only scans production dependencies.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Run npm install and specify the --production flag.

Modify the devDependencies section of the project's Package.json file.

Run npm install and specify the --production flag.

Modify the WhiteSource Bolt policy and set the action for the licenses used by the development tools to Reassign.

Modify the devDependencies section of the project's Package.json file.

Configure WhiteSource Bolt to scan the node_modules directory only.

You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication.What should you do first?

Create a conditional access policy in Azure AD.

Create an Azure Active Directory B2C (Azure AD B2C) tenant.

Modify the Security settings of the GitHub organization.

You have an Azure DevOps project named Project1 and an Azure subscription named Sub1.You need to prevent releases from being deployed unless the releases comply with the Azure Policy rules assigned to Sub1. What should you do in the release pipeline of Project1?

Modify the Deployment queue settings.

Configure a deployment trigger.

Microsoft AZ-400 Practice Test 4 - Free Online Exam Prep & Questions

Question 1 / 40

DRAG DROP

You have an Azure subscription that contains a resources group named RG1. RG1 contains the following resources:

Four Azure virtual machines that run Windows Server and have Internet Information Services (IIS) installed. SQL Server on an Azure virtual machine.

An Azure Load Balancer.

You need to deploy an application to the virtual machines in RG1 by using Azure Pipelines.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-400 Practice Test 4

Question

Microsoft AZ-400 Practice Tests

Practice Tests