ERASED TEST, YOU MAY BE INTERESTED ON AZ 400-Azure DevOps
|
---|
TAKE THE TEST

Title of test:
AZ 400-Azure DevOps Description: 100 pyetje-P1 Author: 100 pyetje Other tests from this author Creation Date: 13/03/2025 Category: Others Number of questions: 100 |
Share the Test:



New Comment
No comments about this test.
Content:
You are con guring project metrics for dashboards in Azure DevOps.
You need to con gure a chart widget that measures the elapsed time to complete work items once they become active.
Which of the following is the widget you should use? Cumulative Flow Diagram Burnup Cycle time Burndown. You need to consider the underlined segment to establish whether it is accurate. The Burnup widget measures the elapsed time from creation of work items to their completion. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option. No adjustment required. Lead time Test results trend Burndown. You are making use of Azure DevOps manage build pipelines, and also deploy pipelines. The development team is quite large, and is regularly added to. You have been informed that the management of users and licenses must be automated when it can be. Which of the following is a task that can't be automated? Group membership changes License assignment Assigning entitlements License procurement. You have been tasked with strengthening the security of your team's development process. You need to suggest a security tool type for the Continuous Integration (CI) phase of the development process. Which of the following is the option you would suggest? Penetration testing Static code analysis Threat modeling Dynamic code analysis. Your company is currently making use of Team Foundation Server 2013 (TFS 2013), but intend to migrate to Azure DevOps. You have been tasked with supplying a migration approach that allows for the preservation of Team Foundation Version Control changesets dates,as well as the changes dates of work items revisions. The approach should also allow for the migration of all TFS artifacts, while keeping migration effort to a minimum.You have suggested upgrading TFS to the most recent RTW release.Which of the following should also be suggested? Installing the TFS kava SDK Using the TFS Database Import Service to perform the upgrade Upgrading PowerShell Core to the latest version. Using the TFS Integration Platform to perform the upgrade. DRAG DROP You have an on-premises Bitbucket Server with a rewall con gured to block inbound Internet tra c. The server is used for Git-based source control.You intend to manage the build and release processes using Azure DevOps. This plan requires you to integrate Azure DevOps and Bitbucket.Which of the following will allow for this integration? Answer by dragging the correct options from the list to the answer area.Select and Place. A self-hosted agent A Microsoft-hosted agent An External Git service connection Service hooks. You are currently developing a project for a client that will be managing work items via Azure DevOps.You want to make sure that the work item process you use for the client allows for requirements, change requests, risks, and reviews to be tracked.Which of the following is the option you would choose? Basic Agile Scrum CMMI. You need to consider the underlined segment to establish whether it is accurate. To compile an Internet Information Services (IIS) web application that runs docker, you should use a Default build agent pool. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option. No adjustment required. Hosted Windows Container Hosted Hosted macOS. Your company has an Azure DevOps environment that can only be accessed by Azure Active Directory users.You are instructed to make sure that the Azure DevOps environment can only be accessed from devices connected to the company's on-premises network.Which of the following actions should you take? Assign the devices to a security group Create a GPO Configure Security in Project Settings from Azure DevOps Configure conditional access in Azure Active Directory. You are making use of Azure DevOps to con gure Azure Pipelines for project, named PROJ-01. You are preparing to use a version control system that allows for source code to be stored on a managed Windows server located on the company network.Which of the following is the version control system you should use? Github Enterprise Bitbucket cloud Github Professional Git in Azure Repos. You need to consider the underlined segment to establish whether it is accurate.When moving to Azure DevOps, JIRA must be replaced with the build pipelines Azure DevOps service.Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option No adjustment required repos release pipelines boards. You scan a Node.js application using WhiteSource Bolt. The scan nds numerous libraries with invalid licenses, but are only used during development. You have to make sure that only production dependencies are scanned by WhiteSource Bolt. Which of the following is a command you should run? npm edit npm publish npm install npm update. You are currently de ning a release strategy for an app, named APP-01. The strategy should allow you to keep the time it takes to deploy new releases of the app to a minimum. The strategy should also allow you to rollback in the shortest time required.Which of the following is the release strategy you should use? Red/Black deployment Rolling deployment ג €Big Bang ג € deployment Canary deployment. Your company hosts a web application in Azure, and makes use of Azure Pipelines for managing the build and release of the application. When stakeholders report that system performance has been adversely affected by the most recent releases, you con gure alerts in Azure Monitor.You are informed that new releases must satisfy speci ed performance baseline conditions in the staging environment before they can be deployed to production.You need to make sure that releases not satisfying the performance baseline are prevented from being deployed.Which of the following actions should you take? You should make use of a branch control check You should make use of an alert trigger You should make use of a gate You should make use of an approval check. You need to consider the underlined segment to establish whether it is accurate. To deploy an application to a number of Azure virtual machines, you should create a universal group. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option. No adjustment required security deployment resource. DRAG DROP You are preparing to deploy an Azure resource group via Terraform.To achieve your goal, you have to install the necessary frameworks. Which of the following are the frameworks you should use? Answer by dragging the correct options from the list to the answer area. YEOMAN VAULT Terratest Tiller. You intend to make use of Azure Artifacts to share packages that you wrote, tested, validated, and deployed. You want to use a solitary feed to release several builds of each package. You have to make sure that the release of packages that are in development is restricted.Which of the following actions should you take? You should make use of static code analysis You should make use of views You should make use of dynamic code analysis You should make use of upstream sources. You need to consider the underlined segment to establish whether it is accurate. To nd when common open source libraries are added to the code base, you should add Jenkins to the build pipeline. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option No adjustment required SourceGear Vault WhiteSource OWASP ZAP. Your company has an Azure DevOps project, which includes a build pipeline that makes use of roughly fty open source libraries. You have been tasked with making sure that you are able to scan project for common security weaknesses in the open source libraries. Which of the following actions should you take? You should create a build task and use the WhiteSource Bolt service You should create a deployment task and use the WhiteSource Bolt service You should create a build task and use the Chef service You should create a deployment task and use the Chef service. You need to consider the underlined segment to establish whether it is accurate. Black Duck can be used to make sure that all the open source libraries conform to your company's licensing criteria. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option. No adjustment required Maven Bamboo CMAKE. You have created an Azure DevOps project for a new application that will be deployed to a number of Windows Server 2016 Azure virtual machines.You are preparing a deployment solution that allows for the virtual machines to maintain a uniform con guration, and also keep administrative effort with regards to con guring the virtual machines to a minimum.Which of the following should be part of your solution? (Choose two.) Azure Resource Manager templates The PowerShell Desired State Con guration (DSC) extension for Windows Azure pipeline deployment groups The Custom Script Extension for Windows Azure pipeline stage templates. Your company has an application that contains a number of Azure App Service web apps and Azure functions. You would like to view recommendations with regards to the security of the web apps and functions. You plan to navigate to Compute and Apps to achieve your goal.Which of the following should you access to make use of Compute and Apps? Azure Log Analytics Azure Event Hubs Azure Advisor Azure Security Center. You need to consider the underlined segment to establish whether it is accurate. Your company has a multi-tier application that has its front end hosted in Azure App Service. To pinpoint the average load times of the application pages, you should make use of Azure Event Hubs. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option No adjustment required Azure Application Insights Azure Log Analytics Azure Advisor. DRAG DROP You have recently created a web application for your company. You have been tasked with making sure that a summary of the exceptions that transpire in the application is automatically sent to Microsoft Teams on a daily basis.Which of the following Azure services should you use? Answer by dragging the correct options from the list to the answer area.Select and Place: Azure DevOps Azure Logic Apps Azure Pipelines Azure Application Insights. You are in the process of building a mobile app aimed at Android and iOS devices. All work items and release cycles are managed via Azure DevOps. You want to make sure that crash reports for issue analysis is collected, and that beta releases are distributed to your testers. Also, you want to ensure that user feedback on the functionality of new apps is received.Which of the following must be part of your solution? The Microsoft Test & Feedback extension OWASP ZAP TFS Integration Platform Code Style. DRAG DROP You need to recommend project metrics for dashboards in Azure DevOps. Which chart widgets should you recommend for each metric? To answer, drag the appropriate chart widgets to the correct metrics. Each chart widget may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Burndown Cycle Time Lead Time Velocity. HOTSPOT You plan to create alerts that will be triggered based on the page load performance of a home page. You have the Application Insights log query shown in the following exhibit To create an alert based on the page load experience of most users,the alerting level must be based on: percentile_duration_50 To create an alert based on the page load experience of most users,the alerting level must be based on: percentile_duration_90 To create an alert based on the page load experience of most users,the alerting level must be based on: percentile_duration_95 To create an alert based on the page load experience of most users,the alerting level must be based on: threshold To only create an alert when authentication error occurs on the server the query must be filtered on: item Type To only create an alert when authentication error occurs on the server the query must be filtered on: resultCode To only create an alert when authentication error occurs on the server the query must be filtered on: source To only create an alert when authentication error occurs on the server the query must be filtered on: success. You manage an Azure web app that supports an e-commerce website. You need to increase the logging level when the web app exceeds normal usage patterns. The solution must minimize administrative overhead.Which two resources should you include in the solution? Each correct answer presents part of the solution. an Azure Automation runbook an Azure Monitor alert that has a dynamic threshold an Azure Monitor alert that has a static threshold the Azure Monitor autoscale settings an Azure Monitor alert that uses an action group that has an email action. HOTSPOT You have an Azure Kubernetes Service (AKS) pod. You need to con gure a probe to perform the following actions: Con rm that the pod is responding to service requests. Check the status of the pod four times a minute. Initiate a shutdown if the pod is unresponsive. How should you complete the YAML configuration file? livenessProbe readinessProbe ShutdownProbe startupProbe initialDelaySeconds: 15 periodSeconds: 15 timeoutSeconds: 15. You have a Microsoft ASP.NET Core web app in Azure that is accessed worldwide. You need to run a URL ping test once every five minutes and create an alert when the web app is unavailable from specific Azure regions. The solution must minimize development time. What should you do? Create an Azure Monitor Availability metric and alert Create an Azure Application Insights availability test and alert Write an Azure function and deploy the function to the speci c regions Create an Azure Service Health alert for the speci c regions. You have a multi-tier application. The front end of the application is hosted in Azure App Service. You need to identify the average load times of the application pages.What should you use? Azure Application Insights The activity log of the App Service The diagnostics logs of the App Service Azure Advisor. Your company uses ServiceNow for incident management. You develop an application that runs on Azure. The company needs to generate a ticket in ServiceNow when the application fails to authenticate. Which Azure Log Analytics solution should you use? Application Insights Connector Automation & Control IT Service Management Connector (ITSM) Insight & Analytics. HOTSPOT Your company is building a new web application. You plan to collect feedback from pilot users on the features being delivered. All the pilot users have a corporate computer that has Google Chrome and the Microsoft Test & Feedback extension installed. The pilot users will test the application by using Chrome.You need to identify which access levels are required to ensure that developers can request and gather feedback from the pilot users. The solution must use the principle of least privilege. Which access levels in Azure DevOps should you identify? Developers: Basic Developers: Stakeholder Pilot users: Basic Pilot users: Stakeholder. You use Azure SQL Database Intelligent Insights and Azure Application Insights for monitoring. You need to write ad-hoc queries against the monitoring data. Which query language should you use? Kusto Query Language (KQL) PL/pgSQL PL/SQL Transact-SQL. Your company creates a web application. You need to recommend a solution that automatically sends to Microsoft Teams a daily summary of the exceptions that occur in the application.Which two Azure services should you recommend? Azure Logic Apps Azure Pipelines Microsoft Visual Studio App Center Azure DevOps Project Azure Application Insights. DRAG DROP Your company wants to use Azure Application Insights to understand how user behaviors affect an application. Which Application Insights tool should you use to analyze each behavior? To answer, drag the appropriate tools to the correct behaviors. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Impact User Flows Users. Your company is building a mobile app that targets Android and iOS devices. Your team uses Azure DevOps to manage all work items and release cycles. You need to recommend a solution to perform the following tasks: ✑ Collect crash reports for issue analysis. ✑ Distribute beta releases to your testers. ✑ Get user feedback on the functionality of new apps. What should you include in the recommendation? The Microsoft Test & Feedback extension Microsoft Visual Studio App Center integration Azure Application Insights widgets Jenkins integration. You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure virtual machine scale set named VMSS1. VMSS1 hosts a web application named WebApp1. WebApp1 uses stateful sessions. The WebApp1 installation is managed by using the Custom Script extension. The script resides in an Azure Storage account named sa1. You plan to make a minor change to a UI element of WebApp1 and to gather user feedback about the change. You need to implement limited user testing for the new version of WebApp1 on VMSS1. Which three actions should you perform? Modify the load balancer settings of VMSS1 Redeploy VMSS1 Upload a custom script le to sa1 Modify the Custom Script extension settings of VMSS1 Update the configuration of a virtual machine in VMSS1. DRAG DROP You have several Azure virtual machines that run Windows Server 2019. You need to identify the distinct event IDs of each virtual machine as shown in the following table. How should you complete the Azure Monitor query? To answer, drag the appropriate values to the correct locations. Each value may be used once,more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. count() makelist(EventID) makeset(EventID) mv-expand project render summarize. HOTSPOT You have an Azure web app named Webapp1. You need to use an Azure Monitor query to create a report that details the top 10 pages of Webapp1 that failed. How should you complete the query? exceptions pageViews requests traces duration==0 itemType=="availabilityResult" resultCode=="200" success==false. You are monitoring the health and performance of an Azure web app by using Azure Application Insights. You need to ensure that an alert is sent when the web app has a sudden rise in performance issues and failures. What should you use? Custom events Application Insights Profiler Usage analysis Smart Detection Continuous export. You have a private GitHub repository. You need to display the commit status of the repository on Azure Boards. What should you do first? Configure multi-factor authentication (MFA) for your GitHub account Add the Azure Pipelines app to the GitHub repository Add the Azure Boards app to the repository Create a GitHub action in GitHub. You are integrating Azure Pipelines and Microsoft Teams. You install the Azure Pipelines app in Microsoft Teams. You have an Azure DevOps organization named Contoso that contains a project name Project1. You subscribe to Project1 in Microsoft Teams. You need to ensure that you only receive events about failed builds in Microsoft Teams. What should you do first? From Microsoft Teams, run @azure pipelines subscribe https://dev.azure.com/Contoso/Project1 From Azure Pipelines, add a Publish Build Artifacts task to Project1 From Microsoft Teams, run @azure pipelines subscriptions. From Azure Pipelines, enable continuous integration for Project1. You have an Azure DevOps organization named Contoso. You need to receive Microsoft Teams noti cations when work items are updated. What should you do? From Azure DevOps, con gure a service hook subscription From Microsoft Teams, configure a connector From the Microsoft Teams admin center, con gure external access From Microsoft Teams, add a channel From Azure DevOps, install an extension. You create an alert rule in Azure Monitor as shown in the following exhibit. Which action will trigger an alert? a failed attempt to delete the ASP-9bb7 resource a change to a role assignment for the ASP-9bb7 resource a successful attempt to delete the ASP-9bb7 resource a failed attempt to scale up the ASP-9bb7 resource. You have a web app hosted on Azure App Service. The web app stores data in an Azure SQL database. You need to generate an alert when there are 10,000 simultaneous connections to the database. The solution must minimize development effort.Which option should you select in the Diagnostics settings of the database? Send to Log Analytics Stream to an event hub Archive to a storage account. HOTSPOT You use Azure DevOps to manage the build and deployment of an app named App1. You have a release pipeline that deploys a virtual machine named VM1. You plan to monitor the release pipeline by using Azure Monitor. You need to create an alert to monitor the performance of VM1. The alert must be triggered when the average CPU usage exceeds 70 percent for five minutes. The alert must calculate the average once every minute. How should you con gure the alert rule? To answer, select the appropriate options in the answer area. Aggregation granularity (Period): 1 minute Aggregation granularity (Period): 5 minutes Threshold value: Static Threshold value: Dynamic Operator: Greater than Operator: Greater than or equal to Operator: Less than or equal to Operator: Less than. You have an Azure virtual machine that is monitored by using Azure Monitor. The virtual machine has the Azure Log Analytics agent installed. You plan to deploy the Service Map solution from the Azure Marketplace. What should you deploy to the virtual machine to support the Service Map solution? the Dependency agent the Telegraf agent the Windows Azure diagnostics extension (WAD) the Azure monitor agent. HOTSPOT You have a project in Azure DevOps that contains a Continuous Integration/Continuous Deployment (CI/CD) pipeline. You need to enable detailed logging by de ning a pipeline variable. How should you con gure the variable? Name: Debug Name: Log Name: System.Debug Name: System.Log Value: 1 Value: detailed Value: true. You build an iOS app. You receive crash reports from Crashlytics. You need to capture the following data: Crash-free users Custom events Breadcrumbs What should you do? Configure the xcworkspace le in the project Add the GoogleAnalytics pod to the app Configure the Crashlytics pod in the app Import the Firebase module to UIApplicationDelegate. You have multiple teams that work on multiple projects in Azure DevOps. You need to plan and manage the consumers and producers for each project. The solution must provide an overview of all the projects. What should you do? Add a Predecessor or Successor link to the feature or user story for the items of each project Add a Parent or Child link to the feature or user story for the items of each project Install the Dependency Tracker extension and create dependencies for each project Create a custom query to show the consumers and producers and add a widget to a dashboard. HOTSPOT You have an Azure web app named webapp1 that uses the .NET Core runtime stack. You have an Azure Application Insights resource named AppInsights1 that collects telemetry data generated by webapp1 You plan to deploy webapp1 by using an Azure DevOps pipeline You need to modify the sampling rate of the telemetry data processed by AppInsights1 without having to redeploy webapp1 after each modification.What should you do? From the code repository of webapp1: Disable adaptive sampling From the code repository of webapp1: Enable fixed-rate sampling From the code repository of webapp1: Modify ApplicationInsights.config From AppInsights1: Configure Continuous export From AppInsights1: Configure the Smart Detection settings From AppInsights1: Modify the Usage and estimated costs settings. Your company has multiple microservices-based apps that use the following tracing libraries: OpenTelemetry • OpenCensus • OpenTracing • Honeycomb • Jaeger The company purchases an Azure subscription and implements Application Insights in Azure Monitor. You plan to centralize distributed tracing for the apps You need to identify which libraries can integrate directly with Application Insights. Which two libraries should you identify? Honeycomb OpenTracing Jaeger OpenTelemetry OpenCensus. You have an Azure web app named webapp1 that uses the .NET Core runtime stack. You have an Azure Application Insights resource named AppInsights1. Webapp1 sends telemetry data to AppInsights1. You need to ensure that webapp1 sends the telemetry data at a fixed sampling rate. What should you do? From the code repository of webapp1, modify the ApplicationInsights.config file From the code repository of webapp1, modify the Startup.cs file. From AppInsights1, modify the Usage and estimated costs settings From AppInsights1, configure the Continuous export settings. DRAG DROP You have an app named App1. You have a Log Analytics workspace named Workspace1 that contains two tables named Events and Logs. App1 manages events in multiple locations and writes logs to Workspace1.You need to query Workspace1 for all log entries related to Asia that occurred during the last two days.In which order should you arrange the query statements? To answer, move all statements from the list of statements to the answer area andarrange them in the correct order. | where continent == 'Asia' | join ( Events Logs | where timestamp > ago (2d) ) on RequestID. DRAG DROP You have a web app named App1 that uses Application Insights in Azure Monitor.You need to compare the hourly CPU usage of App1 from the last 24 hours. The solution must include a graph that has a threshold line at 75 percent.How should you complete the query? bin(TimeGenerated, 1d) bin(TimeGenerated, 1h) extend project render. You use Azure Pipelines to build and deploy an app named App1 You plan to monitor App1 by using Application Insights You create an Application Insights instance named AI1. You need to configure App1 to use AI1 Which file should you modify? appsettings.json launchSettings.json startup.cs project.json. DRAG DROP You have a project in Azure DevOps You need to configure a dashboard. The solution must include the following metrics: • Bottlenecks in the software development process • A burndown chart for the work in a single iteration • How long it takes to close a work item after the item was started Which type of widget should you use for each metric? To answer, drag the appropriate widget types to the correct metrics. Each widget type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Burndown chart Cumulative flow diagram (CFD) Cycle Time Lead Time Sprint burndown Velocity. You have an Azure subscription that contains multiple Azure services. You need to send an SMS alert when scheduled maintenance is planned for the Azure services. Which two actions should you perform? Enable Azure Security Center Create and configure an Azure Monitor alert rule Create an Azure Service Health alert Create and configure an action group. You configure Azure Application Insights and the shared service plan tier for a web app. You enable Smart Detection. You confirm that standard metrics are visible in the logs, but when you test a failure, you do not receive a Smart Detection notification. What prevents the Smart Detection notification from being sent? You must enable the Snapshot Debugger for the web app Smart Detection uses the first 24 hours to establish the normal behavior of the web app The web app is configured to use the shared service plan tier You must restart the web app before Smart Detection is enabled. You are planning projects for three customers. Each customer's preferred process for work items is shown in the following table The customers all plan to use Azure DevOps for work item management. Which work item process should you use for each customer? Agile CMMI Scrum XP. You have an Azure DevOps organization named Contoso and an Azure subscription. You use Azure DevOps to build a containerized app named App1 and deploy App1 to an Azure container instance named ACI1. You need to restart ACI1 when App1 stops responding. What should you do? Add a liveness probe to the YAML configuration of App1 Add a readiness probe to the YAML configuration of App1 Use Connection Monitor in Azure Network Watcher Use IP flow verify in Azure Network Watcher. You have a multi-tier application that has an Azure Web Apps front end and an Azure SQL Database back end. You need to recommend a solution to capture and store telemetry data. The solution must meet the following requirements: ✑ Support using ad-hoc queries to identify baselines. ✑ Trigger alerts when metrics in the baseline are exceeded. ✑ Store application and database metrics in a central location. What should you include in the recommendation? Azure Event Hubs Azure SQL Database Intelligent Insights Azure Application Insights Azure Log Analytics. You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling. You use Azure DevOps to build a web app named App1 and deploy App1 to VMSS1. App1 is used heavily and has usage patterns that vary on a weekly basis.You need to recommend a solution to detect an abnormal rise in the rate of failed requests to App1. The solution must minimize administrative effort.What should you include in the recommendation? the Smart Detection feature in Azure Application Insights the Failures feature in Azure Application Insights an Azure Service Health alert an Azure Monitor alert that uses an Azure Log Analytics query. You are automating the testing process for your company. You need to automate UI testing of a web application. Which framework should you use? JaCoco Selenium Xamarin.UITest Microsoft.CodeAnalysis. You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 and an Azure Standard Load Balancer named LB1. LB1 distributes incoming requests across VMSS1 instances. You use Azure DevOps to build a web app named App1 and deploy App1 to VMSS1. App1 is accessible via HTTPS only and configured to require mutual authentication by using a client certificate. You need to recommend a solution for implementing a health check of App1. The solution must meet the following requirements: ✑ Identify whether individual instances of VMSS1 are eligible for an upgrade operation. ✑ Minimize administrative effort. What should you include in the recommendation? an Azure Load Balancer health probe Azure Monitor autoscale the Custom Script Extension the Application Health extension. You have a build pipeline in Azure Pipelines that occasionally fails. You discover that a test measuring the response time of an API endpoint causes the failures. You need to prevent the build pipeline from failing due to the test. Which two actions should you perform? Set Flaky test detection to Off Clear Flaky tests included in test pass percentage Enable Test Impact Analysis (TIA) Manually mark the test as flaky Enable test slicing. Your company hosts a web application in Azure. The company uses Azure Pipelines for the build and release management of the application.Stakeholders report that the past few releases have negatively affected system performance. You configure alerts in Azure Monitor.You need to ensure that new releases are only deployed to production if the releases meet defined performance baseline criteria in the staging environment first.What should you use to prevent the deployment of releases that fall to meet the performance baseline? an Azure Scheduler job a trigger a gate an Azure function. Your company uses the following resources: ✑ Windows Server 2019 container images hosted in an Azure Container Registry. ✑ Azure virtual machines that run the latest version of Ubuntu ✑ An Azure Log Analytics workspace ✑ Azure Active Directory (Azure AD) ✑ An Azure key vault For which two resources can you receive vulnerability assessments in Azure Security Center? the Azure Log Analytics workspace the Azure key vault the Azure virtual machines that run the latest version of Ubuntu Azure Active Directory (Azure AD) The Windows Server 2019 container images hosted in the Azure Container Registry. You use Azure Pipelines to manage build pipelines, GitHub to store source code, and Dependabot to manage dependencies. You have an app named App1. Dependabot detects a dependency in App1 that requires an update. What should you do first to apply the update? Create a pull request Approve the pull request Create a branch Perform a commit. You are designing a configuration management solution to support five apps hosted on Azure App Service. Each app is available in the following three environments: development, test, and production. You need to recommend a configuration management solution that meets the following requirements: ✑ Supports feature flags ✑ Tracks configuration changes from the past 30 days ✑ Stores hierarchically structured configuration values ✑ Controls access to the configurations by using role-based access control (RBAC) permissions ✑ Stores shared values as key/value pairs that can be used by all the apps Which Azure service should you recommend as the configuration management solution? Azure Cosmos DB Azure App Service Azure App Configuration Azure Key Vault. You have a containerized solution that runs in Azure Container Instances. The solution contains a frontend container named App1 and a backend container named DB1. DB1 loads a large amount of data during startup. You need to verify that DB1 can handle incoming requests before users can submit requests to App1. What should you configure? a liveness probe a performance log a readiness probe an Azure Load Balancer health probe. You are designing a strategy to monitor the baseline metrics of Azure virtual machines that run Windows Server. You need to collect detailed data about the processes running in the guest operating system. Which two agents should you deploy? the Telegraf agent the Azure Log Analytics agent the Azure Network Watcher Agent for Windows the Dependency agent. DRAG DROP - You use Azure Pipelines to automate Continuous Integration/Continuous Deployment (CI/CD) for an Azure web app named WebApp1. You configure an Azure Monitor alert that is triggered when WebApp1 generates an error. You need to configure the alert to forward details of the error to a third-party system. The solution must minimize administrative effort. Which three actions should you perform in sequence? Select the Recurrence trigger Create an Azure event hub Create an Azure logic app Select the HTTP request trigger Update the action group in Azure Monitor Select the Sliding Windows trigger. DRAG DROP - You are using the Dependency Tracker extension in a project in Azure DevOps. You generate a risk graph for the project. What should you use in the risk graph to identify the number of dependencies and the risk level of the project? Link color Link length Link width Node color. HOTSPOT You have an Azure subscription that contains the resources shown in the following table. You plan to create a linked service in DF1. The linked service will connect to SQL1 by using Microsoft SQL Server authentication. The password for the SQL Server login will be stored - in KV1.You need to configure DF1 to retrieve the password when the data factory connects to SQL1. The solution must use the principle of least privilege.How should you configure DF1? Permission type: Key Permission type: Secret Permission type: Certificate Access method: Access policy Access method: Service endpoint policy Access method: Role-based access control (RBAC). You have several Azure Active Directory (Azure AD) accounts. You need to ensure that users use multi-factor authentication (MFA) to access Azure apps from untrusted networks. What should you configure in Azure AD? access reviews managed identities entitlement management conditional access. You plan to provision a self-hosted Linux agent. Which authentication mechanism should you use to register the self-hosted agent? personal access token (PAT) SSH key Alternate credentials certificate. You are building a Microsoft ASP.NET application that requires authentication. You need to authenticate users by using Azure Active Directory (Azure AD). What should you do first? Assign an enterprise application to users and groups Create an app registration in Azure AD Configure the application to use a SAML endpoint Create a new OAuth token from the application Create a membership database in an Azure SQL database. You have an Azure DevOps organization named Contoso. You need to recommend an authentication mechanism that meets the following requirements: ✑ Supports authentication from Git ✑ Minimizes the need to provide credentials during authentication What should you recommend? personal access tokens (PATs) in Azure DevOps Alternate credentials in Azure DevOps user accounts in Azure Active Directory (Azure AD) managed identities in Azure Active Directory (Azure AD). You have an application that consists of several Azure App Service web apps and Azure functions. You need to assess the security of the web apps and the functions. Which Azure feature can you use to provide a recommendation for the security of the application? Security & Compliance in Azure Log Analytics Resource health in Azure Service Health Smart Detection in Azure Application Insights Compute & apps in Azure Security Center. DRAG DROP - You need to configure access to Azure DevOps agent pools to meet the following requirements: ✑ Use a project agent pool when authoring build or release pipelines. ✑ View the agent pool and agents of the organization. ✑ Use the principle of least privilege. Which role memberships are required for the Azure DevOps organization and the project? Administrator Reader Service Account User. You have a branch policy in a project in Azure DevOps. The policy requires that code always builds successfully. You need to ensure that a specific user can always merge changes to the master branch, even if the code fails to compile. The solution must use the principle of least privilege.What should you do? Add the user to the Build Administrators group Add the user to the Project Administrators group From the Security settings of the repository, modify the access control for the user From the Security settings of the branch, modify the access control for the user. You have an Azure Resource Manager template that deploys a multi-tier application. You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application.What should you use? Azure Key Vault a Web.config file an Appsettings.json file an Azure Storage table an Azure Resource Manager parameter file. You are deploying a server application that will run on a Server Core installation of Windows Server 2019. You create an Azure key vault and a secret. You need to use the key vault to secure API secrets for third-party integrations. Which three actions should you perform? Configure RBAC for the key vault Modify the application to access the key vault Configure a Key Vault access policy Deploy an Azure Desired State Configuration (DSC) extension Deploy a virtual machine that uses a system-assigned managed identity. HOTSPOT Your company is creating a suite of three mobile applications. You need to control access to the application builds. The solution must be managed at the organization level. What should you use? Groups to control the build access: Active Directory groups Groups to control the build access: Azure Active Directory groups Groups to control the build access: Microsoft Visual Studio App Center distribution groups Group Type: Private Group Type: Public Group Type: Shared. You have an Azure DevOps organization named Contoso that contains a project named Project1. You provision an Azure key vault named Keyvault1. You need to reference Keyvault1 secrets in a build pipeline of Project1. What should you do first? Add a secure file to Project1 Create an XAML build service Create a variable group in Project1 Configure the security policy of Contoso. You have the following Azure policy You assign the policy to the Tenant root group. What is the effect of the policy? prevents all HTTP traffic to existing Azure Storage accounts ensures that all traffic to new Azure Storage accounts is encrypted prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet ensures that all data for new Azure Storage accounts is encrypted at rest. You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1.You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines.What should you do? Create a variable group in Project1 Add a secure file to Project1 Modify the security settings of the pipelines Configure the security policy of Contoso. DRAG DROP - You have a private project in Azure DevOps and two users named User1 and User2. You need to add User1 and User2 to groups to meet the following requirements: ✑ User1 must be able to create a code wiki. ✑ User2 must be able to edit wiki pages. ✑ The solution must use the principle of least privilege. To which group should you add each user? Build Administrators Contributors Project Administrators Project Valid Users Stakeholders. You use WhiteSource Bolt to scan a Node.js application. The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment.You need to ensure that WhiteSource Bolt only scans production dependencies. Which two actions should you perform? Run npm install and specify the --production flag Modify the WhiteSource Bolt policy and set the action for the licenses used by the development tools to Reassign Modify the devDependencies section of the project's Package.json file Configure WhiteSource Bolt to scan the node_modules directory only. HOTSPOT - Your company has an Azure subscription. The company requires that all resource groups in the subscription have a tag named organization set to a value of Contoso. You need to implement a policy to meet the tagging requirement. How should you complete the policy? "MicrosoftResources/deployments" "MicrosoftResources/subscriptions" "MicrosoftResources/subscriptions/resourceGroups" "Append" "Deny" "Deploy|fNotExists". You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication. What should you do first? Create a conditional access policy in Azure AD Register GitHub in Azure AD Create an Azure Active Directory B2C (Azure AD B2C) tenant Modify the Security settings of the GitHub organization. You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. You need to prevent releases from being deployed unless the releases comply with the Azure Policy rules assigned to Sub1. What should you do in the release pipeline of Project1? Add a deployment gate Modify the Deployment queue settings Configure a deployment trigger Create a pipeline variable. You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries. You need to ensure that all the open source libraries comply with your company's licensing standards. Which service should you use? Ansible Maven WhiteSource Bolt Helm. You are designing the security validation strategy for a project in Azure DevOps. You need to identify package dependencies that have known security issues and can be resolved by an update. What should you use? Octopus Deploy Jenkins Gradle SonarQube. You administer an Azure DevOps project that includes package feeds. You need to ensure that developers can unlist and deprecate packages. The solution must use the principle of least privilege. Which access level should you grant to the developers? Collaborator Contributor Owner. Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You run the Register-AzureRmAutomationDscNode command in your company's environment. You need to make sure that your company's test servers remain correctly configured, regardless of configuration drift. Solution: You set the -ConfigurationMode parameter to ApplyOnly. Does the solution meet the goal? Yes No. Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You run the Register-AzureRmAutomationDscNode command in your company's environment. You need to make sure that your company's test servers remain correctly configured, regardless of configuration drift. Solution: You set the -ConfigurationMode parameter to ApplyAndMonitor. Does the solution meet the goal? Yes No. Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You run the Register-AzureRmAutomationDscNode command in your company's environment. You need to make sure that your company's test servers remain correctly configured, regardless of configuration drift. Solution: You set the -ConfigurationMode parameter to ApplyAndAutocorrect. Does the solution meet the goal? Yes No. |
Report abuse