AZ-400 Exam Practice Questions PDF

Design a DevOps Strategy **QUESTION 1** You use Azure Artifacts to host NuGet packages that you create. You need to make one of the packages available to anonymous users outside your organization. The solution must minimize the number of publication points. What should you do? Change the feed UR...

Design a DevOps Strategy **QUESTION 1** You use Azure Artifacts to host NuGet packages that you create. You need to make one of the packages available to anonymous users outside your organization. The solution must minimize the number of publication points. What should you do? Change the feed URL of the package Create a new feed for the package Promote the package to a release view. Publish the package to a public NuGet repository. QUESTION 2 Your company plans to use an agile approach to software development. You need to recommend an application to provide communication between members of the development team who work in locations around the world. The applications must meet the following requirements: Provide the ability to isolate the members of different project teams into separate communication channels and to keep a history of the chats within those channels. Be available on Windows 10, Mac OS, iOS, and Android operating systems. Provide the ability to add external contractors and suppliers to projects. Integrate directly with Azure DevOps. What should you recommend? Microsoft Project Bamboo Microsoft Lync Microsoft Teams Correct Answer: **D** QUESTION 3 You manage build pipelines and deployment pipelines by using Azure DevOps. Your company has a team of 500 developers. New members are added continually to the team. You need to automate the management of users and licenses whenever possible. Which task must you perform manually? modifying group memberships adding users assigning entitlements procuring licenses Correct Answer: **D** QUESTION 4 You are developing a multi-tier application. The application will use Azure App Service web apps as the front end and an Azure SQL database as the back end. The application will use Azure functions to write some data to Azure Storage. You need to send the Azure DevOps team an email message when the front end fails to return a status code of 200. Which feature should you use? Service Map in Azure Log Analytics Availability tests in Azure Application Insights Profiler in Azure Application Insights Application Map in Azure Application Insights Correct Answer: **B** QUESTION 5 During a code review, you discover many quality issues. Many modules contain unused variables and empty catch blocks. You need to recommend a solution to improve the quality of the code. What should you recommend? In a Grunt build task, select Enabled from Control Options. In a Maven build task, select Run PMD. In a Xcode build task, select Use xcpretty from Advanced. In a Gradle build task, select Run Checkstyle. Correct Answer: **B** QUESTION 6 Your company has an on-premises Bitbucket Server that is used for Git-based source control. The server is protected by a firewall that blocks inbound Internet traffic. You plan to use Azure DevOps to manage the build and release processes. Which two components are required to integrate Azure DevOps and Bitbucket? Each Correct Answer presents part of the solution. NOTE: Each correct selection is worth one point. a deployment group a. Microsoft-hosted agent service hooks a self-hosted agent an External Git service connection Correct Answer: **DE** Switch to using [[self-hosted agents]](https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops) or [[scale-set agents.]](https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/scale-set-agents?view=azure-devops) These agents can be set up within your network and hence will have access to the Bitbucket server. These agents only require outbound connections to Azure Pipelines. There is no need to open a firewall for inbound connections. Make sure that the name of the server you specified when creating the service connection is resolvable from the self-hosted agents. QUESTION 7 Your company plans to use an agile approach to software development. You need to recommend an application to provide communication between members of the development team who work in locations around the world. The applications must meet the following requirements: Provide the ability to isolate the members of different project teams into separate communication channels and to keep a history of the chats within those channels. Be available on Windows 10, Mac OS, iOS, and Android operating systems. Provide the ability to add external contractors and suppliers to projects. Integrate directly with Azure DevOps. What should you recommend? Microsoft Project Bamboo Octopus Slack Correct Answer: **D** QUESTION 8 DRAG DROP You need to recommend project metrics for dashboards in Azure DevOps. Which chart widgets should you recommend for each metric? To answer, drag the appropriate chart widgets to the correct metrics. Each chart widget may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: Correct Answer:  QUESTION 9 DRAG DROP You need to increase the security of your team's development process. Which type of security tool should you recommend for each stage of the development process? To answer, drag the appropriate security tools to the correct stages. Each security tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place:  **QUESTION 10** HOTSPOT Your company uses Team Foundation Server 2013 (TFS 2013). You plan to migrate to Azure DevOps. You need to recommend a migration strategy that meets the following requirements: Preserves the dates of Team Foundation Version Control changesets Preserves the changes dates of work items revisions  Minimizes migration effort Migrates all TFS artifacts  What should you recommend? To answer, select the appropriate options in the answer area. Hot Area: QUESTION 11 DRAG DROP You are planning projects for three customers. Each customer's preferred process for work items is shown in the following table.  The customers all plan to use Azure DevOps for work item management. hich work item process should you use for each customer? To answer,^pocessé^drag^to^ the^correct^appropriate^customers^ work item. Each work item process may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: QUESTION 12 Your development team is building a new web solution by using the Microsoft Visual Studio integrated development environment (IDE). You need to make a custom package available to all the developers. The package must be managed centrally, and the latest version must be available for consumption in Visual Studio automatically. Which three actions should you perform? Each Correct Answer presents part of the solution. **NOTE:** Each correct selection is worth one point. Publish the package to a feed. Create a new feed in Azure Artifacts. Upload a package to a Git repository. Add the package URL to the Environment settings in Visual Studio. Add the package URL to the NuGet Package Manager settings in Visual Studio. Create a Git repository in Azure Repos. Correct Answer: **ABE** QUESTION 13 You have a GitHub repository. You create a new repository in Azure DevOps. You need to recommend a procedure to clone the repository from GitHub to Azure DevOps. What should you recommend? Create a pull request. Create a webhook. Create a service connection for GitHub. From Import a Git repository, click **Import**. Create a personal access token in Azure DevOps. Correct Answer: **D** QUESTION 14 Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues. You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base. What should you use? SourceGear Vault Jenkins Microsoft Visual SourceSafe WhiteSource Bolt Correct Answer: **D** QUESTION 15 You plan to use a NuGet package in a project in Azure DevOps. The NuGet package is in a feed that requires authentication. You need to ensure that the project can restore the NuGet package automatically. What should the project use to automate the authentication? an Azure Automation account an Azure Artifacts Credential Provider an Azure Active Directory (Azure AD) account that has multi-factor authentication (MFA) enabled n Azure Active Directory (Azure AD) service principal Correct Answer: **B** QUESTION 16 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt. You need to recommend changes to reduce the accumulated technical debt. Solution: You recommend increasing the code duplication. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 17 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt. You need to recommend changes to reduce the accumulated technical debt. Solution: You recommend increasing the test coverage. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 18 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt. You need to recommend changes to reduce the accumulated technical debt. Solution: You recommend reducing the code complexity. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 19 Your company has 60 developers who are assigned to four teams. Each team has 15 members. The company uses an agile development methodology. You need to structure the work of the development teams so that each team owns their respective work while working together to reach a common goal. Which parts of the taxonomy should you enable the team to perform autonomously? Features and Tasks Initiatives and Epics Epics and Features Stories and Tasks Correct Answer:**A** QUESTION 20 HOTSPOT Your company uses Git as a source code control system for a complex app named App1. You plan to add a new functionality to App1. You need to design a branching model for the new functionality. Which branch lifetime and branch time should you use in the branching model? To answer, select the appropriate options in the answer area. **NOTE:** Each correct selection is worth one point. Hot Area:  **Correct Answer:** QUESTION 21 You store source code in a Git repository in Azure repos. You use a third-party continuous integration (CI) tool to control builds. What will Azure DevOps use to authenticate with the tool? certificate authentication a personal access token (PAT) a Shared Access Signature (SAS) token NTLM authentication Correct Answer:**B** QUESTION 22 During a code review, you discover quality issues in a Java application. You need to recommend a solution to detect quality issues including unused variables and empty catch blocks. What should you recommend? In a Maven build task, select Run PMD. In an Xcode build task, select **Use xcpretty** from Advanced. In a Gulp build task, specify a custom condition expression. In a Grunt build task, select **Enabled** from Control Options. Correct Answer: **A** QUESTION 23 Your company creates a new Azure DevOps team. You plan to use Azure DevOps for sprint planning. You need to visualize the flow of your work by using an agile methodology. Which Azure DevOps component should you use? Kanban boards sprint planning delivery plans portfolio backlogs Correct Answer: **A** **QUESTION 1** **Case Study** **This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case.** However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question on this case study, click the **Next** button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an **All Information** tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the **Question** button to return to the question. Overview Litware, Inc. is an independent software vendor (ISV). Litware has a main office and five branch offices. Existing Environment Application Architecture The company's primary application is a single monolithic retirement fund management system based on ASP.NET web forms that use logic written in VB.NET. Some new sections of the application are written in C\#. Variations of the application are created for individual customers. Currently, there are more than 80 live code branches in the application's code base. Architectural Issues Litware focuses on writing new code for customers. No resources are provided to refactor or remove existing code. Changes to the code base take a long time, as dependencies are not obvious to individual developers. Merge operations of the code often take months and involve many developers. Code merging frequently introduces bugs that are difficult to locate and resolve. Customers report that ownership costs of the retirement fund management system increase continually. The need to merge unrelated code makes even minor code changes expensive. Customers report that bug reporting is overly complex. Requirements Planned changes Litware plans to develop a new suite of applications for investment planning. The investment planning applications will require only minor integration with the existing retirement fund management system. The investment planning applications suite will include one multi-tier web application and two iOS mobile applications. One mobile application will be used by employees; the other will be used by customers. Litware plans to move to a more agile development methodology. Shared code will be extracted into a series of packages. Litware has started an internal cloud transformation process and plans to use cloud-based services whenever suitable. Litware wants to become proactive in detecting failures, rather than always waiting for customer bug reports. Technical requirements The company's investment planning applications suite must meet the following requirements: New incoming connections through the firewall must be minimized. Members of a group named Developers must be able to install packages. The principle of least privilege must be used for all  permission assignments.A branching strategy that supports developing new functionality in isolation must be used. Members of a group named Team Leaders must be able to create new packages and edit the permissions of package feeds. Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.  By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days.  Code quality and release quality are critical. During release, deployments must not proceed between stages if any active bugs are logged against the release. The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.  The required operating system configuration for the test servers changes weekly. Azure Automation State Configuration must be used to ensure that the operating system on each test server is configured the same way when the servers are created and checked periodically. Current Technical Issue The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration fails to correct the configurations. Azure Automation State  Configuration nodes are registered by using the following command. **:** **QUESTION 2** To resolve the current technical issue, what should you do to the Register-AzureRmAutomationDscNode command? Change the value of the ConfigurationMode parameter. Replace the Register-AzureRmAutomationDscNode cmdlet with Register- AzureRmAutomationScheduledRunbook Add the AllowModuleOverwrite parameter. Add the DefaultProfile parameter. Correct Answer:**C** QUESTION 3 You need to configure a cloud service to store the secrets required by the mobile applications to call the share pricing service. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Hot Area: **Correct Answer:**  QUESTION 4 How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Hot Area: **Correct Answer:**  QUESTION 5 Which branching strategy should you recommend for the investment planning applications suite? release isolation main only development isolation feature isolation Correct Answer: **D** **QUESTION 1** **Case Study** **This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case.** However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question on this case study, click the **Next** button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an **All Information** tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the **Question** button to return to the question. Overview Contoso, Ltd. is a manufacturing company that has a main office in Chicago. Existing Environment Contoso plans to improve its IT development and operations processes by implementing Azure DevOps principles. Contoso has an Azure subscription and creates an Azure DevOps organization. The Azure DevOps organization includes: The Docker extension Adeployment pool named Pool7 that contains 10 Azure virtual machines^016^ that run Windows Server 2 he Azure subscription contains an Azure Automation account. Requirements Planned changes Contoso plans to create projects in Azure DevOps as shown in the following table. Technical requirements Contoso identifies the following technical requirements: Implement build agents for Project1. Whenever possible, use Azure resources. Avoid using deprecated technologies.  Implement a code flow strategy for Project2 that will: -Enable Team2 to submit pull requests for Project2. -Enable Team2 to work independently on changes to a copy of Project2. -Ensure that any intermediary changes performed by Team2 on a copy of Project2 will be subject to the same restrictions as the ones defined in the build policy of Project2. Whenever possible implement automation and minimize administrative effort. Implement Project3, Project5, Project6, and Project7 based on the planned changes  Implement Project4 and configure the project to push Docker images to Azure Container Registry.  **QUESTION 2** You add the virtual machines as managed nodes in Azure Automation State Configuration. You need to configure the managed computers in Group7. What should you do next? Modify the RefreshMode property of the Local Configuration Manager (LCM). Run the Register-AzureRmAutomationDscNode Azure Powershell cmdlet. Modify the ConfigurationMode property of the Local Configuration Manager (LCM) Install PowerShell Core. Correct Answer: **B** **QUESTION 3** You need to implement the code flow strategy for Project2 in Azure DevOps. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place: Select and Place: **Correct Answer:**  **QUESTION 4** You need to configure Azure Automation for the computer in Group7. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place: Select and Place: **Correct Answer:**  Implement DevOps Development Processes 03 **QUESTION 1** Your company builds a multi-tier web application. You use Azure DevOps and host the production application on Azure virtual machines. Your team prepares an Azure Resource Manager template of the virtual machine that you will use to test new features. You need to create a staging environment in Azure that meets the following requirements: Minimizes the cost of Azure hosting Provisions the virtual machines automatically Uses the custom Azure Resource Manager template to provision the virtual machines What should you do? In Azure Cloud Shell, run Azure CLI commands to create and delete the new virtual machines in a staging resource group. In Azure DevOps, configure new tasks in the release pipeline to deploy to Azure Cloud Services. From Azure Cloud Shell, run Azure PowerShell commands to create and delete the new virtual machines in a staging resource group. In Azure DevOps, configure new tasks in the release pipeline to create and delete the virtual machines in Azure DevTest Labs. Correct Answer: **D** QUESTION 2 You have a branch policy in a project in Azure DevOps. The policy requires^cssfully.^ that code always builds suc Add the user to the Build Administrators group. Add the user to the Project Administrators group. From the Security settings of the repository, modify the access control for the user. From the Security settings of the branch, modify the access control for the user. Correct Answer: **D** QUESTION 3 Your company uses a Git repository in Azure Repos to manage the source code of a web application. The master branch is protected from direct updates. Developers work on new features in the topic branches. Because of the high volume of requested features, it is difficult to follow the history of the changes to the master branch. You need to enforce a pull request merge strategy. The strategy must meet the following requirements: Consolidate commit histories. Merge the changes into a single commit. Which merge strategy should you use in the branch policy? squash merge fast-forward merge Git fetch no-fast-forward merge Correct Answer: **A** QUESTION 4 Your company uses cloud-hosted Jenkins for builds. You need to ensure that Jenkins can retrieve source code from Azure Repos. Which three actions should you perform? Each Correct Answer presents part of the solution. NOTE: Each correct selection is worth one point. Create a webhook in Jenkins. Add the Team Foundation Server (TFS) plug-in to Jenkins. Add a domain to your Jenkins account. Create a personal access token in your Azure DevOps account. Create a service hook in Azure DevOps. Correct Answer: **BDE** QUESTION 5 You have an Azure Resource Manager template that deploys a multi-tier application.You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application. What should you use? Azure Key Vault a Web.config file an Appsettings.json file an Azure Storage table an Azure Resource Manager parameter file Correct Answer: **A** QUESTION 6 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment. You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos. Solution: You create an email subscription to an Azure DevOps notification. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 7 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment. You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos. Solution: You create a service hook subscription that uses the code pushed event. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 8 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment. You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos. Solution: You add a trigger to the build pipeline. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 9 You are automating the build process for a Java-based application by using Azure DevOps. You need to add code coverage testing and publish the outcomes to the pipeline. What should you use? Cobertura Bullseye Coverage MSTest Coverlet NUnit Coverage.py Correct Answer: **A** QUESTION 10 DRAG DROP You need to recommend a solution for deploying charts by using Helm and Tiller to Azure Kubernetes Service (AKS) in an RBAC-enabled cluster. Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order. Select and Place: **Correct Answer:**  QUESTION 11 DRAG DROP Your company has a project in Azure DevOps. You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault. You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege. What should you include in the recommendation? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: **Correct Answer:**  QUESTION 12 DRAG DROP You need to configure access to Azure DevOps agent pools to meet the following requirements: Use a project agent pool when authoring build or release pipelines. View the agent pool and agents of the organization.  Use the principle of least privilege. Which role memberships are required for the Azure DevOps organization and the project? To answer, drag the appropriate role memberships to the correct targets. Each role membership may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place:  **Correct Answer:** QUESTION 13 DRAG DROP Your company has four projects. The version control requirements for each project are shown in the following table.  You plan to use Azure Repos for all the projects. Which version control system should you use for each project? To answer, drag the appropriate version control systems to the correct projects. Each version control system may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: **Correct Answer:**  QUESTION 14 HOTSPOT Your company is creating a suite of three mobile applications. You need to control access to the application builds. The solution must be managed at the organization level. What should you use? To answer, select the appropriate options in the answer area. **NOTE:** Each correct selection is worth one point. Hot Area: **Correct Answer:**  QUESTION 15 DRAG DROP You are configuring Azure DevOps build pipelines. You plan to use hosted build agents. Which build agent pool should you use to compile each application type? To answer, drag the appropriate build agent pools to the correct application types. Each build agent pool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: **Correct Answer:**  QUESTION 16 Your company uses Azure DevOps. Only users who have accounts in Azure Active Directory can access the Azure DevOps environment. You need to ensure that only devices that are connected to the on-premises network can access the Azure DevOps environment. Whath would you do? Assign the Stakeholder access level to all users. In Azure Active Directory, configure risky sign-ins. In Azure DevOps, configure Security in Project Settings. In Azure Active Directory, configure conditional access. Correct Answer: **D** QUESTION 17 You are automating the testing process for your company. You need to automate UI testing of a web application. Which framework should you use? JaCoco Selenium Xamarin.UITest Microsoft.CodeAnalysis Correct Answer: **B** QUESTION 18 You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1. You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines. What should you do? Create a variable group in Project1. Add a secure file to Project1. Modify the security settings of the pipelines. Configure the security policy of Contoso. Correct Answer: **A** QUESTION 19 DRAG DROP You are configuring Azure Pipelines for three projects in Azure DevOps as shown in the following table. may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place:  **Correct Answer:** **QUESTION 20** Your team uses an agile development approach. You need to recommend a branching strategy for the team's Git repository. The strategy must meet the following requirements. Provide the ability to work on multiple independent tasks in parallel. Ensure that checked-in code remains  in a releasable state always. Ensure that new features can be abandoned at any time. Encourage experimentation. Whatshould you recommend? a. single long-running branch without forking multiple long-running branches a single fork per team member a single long-running branch with multiple short-lived topic branches Correct Answer: **D** QUESTION 21 Your company has a project in Azure DevOps for a new web application. The company identifies security as one of the highest priorities. You need to recommend a solution to minimize the likelihood that infrastructure credentials will be leaked. What should you recommend? Add a Run Inline Azure PowerShell task to the pipeline. Add a PowerShell task to the pipeline and run Set-AzureKeyVaultSecret. Add a Azurre Key Vault task to the pipeline. Add Azure Key Vault references to Azure Resource Manger templates. Correct Answer: **D** QUESTION 22 DRAG DROP You provision an Azure Kubernetes Service (AKS) cluster that has RBAC enabled. You have a Helm chart for a client application. You need to configure Helm and Tiller on the cluster and install the chart. Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order. Select and Place:  **Correct Answer:** **/Reference:** QUESTION 23 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements: The builds must access an on-premises dependency management system. The build outputs must be stored as Server artifacts in Azure DevOps.  The source code must be stored in a Git repository in Azure DevOps.  Solution: Configure an Octopus Tentacle on an on-premises machine. Use the Package Application task in the build pipeline. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 24 **Note: This question is part of a series of questions that present^on^the^inthe^same^seriescontains^scenario^uniqu^. Each questi e solution that might meet the stated goals. Some question sets might have more than one correct** **solution, while others might not have a correct solution.** --------------------------------------------------------------- -- -- You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements: The builds must access an on-premises dependency management system. The build outputs must be stored as Server artifacts in Azure DevOps. The source code must be stored in a Git repository in Azure DevOps.  Solution: Install and configure a self-hosted build agent on an on-premises machine. Configure the build pipeline to use the Default agent pool. Include the Java Tool Installer task in the build pipeline. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 25 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements: The builds must access an on-premises dependency management system. The build outputs must be stored as Server artifacts in Azure DevOps.  The source code must be stored in a Git repository in Azure DevOps.  Solution: Configure the build pipeline to use a Hosted VS 2017 agent pool. Include the Java Tool Installer task in the build pipeline. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 26 You are designing the development process for your company. Microsoft Visual Studio test plans Gradle wrapper scripts SonarCloud analysis the JavaScript task runner Correct Answer: **C** QUESTION 27 SIMULATION You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity. The solution must use the principle of least privilege. QUESTION 28 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements: The builds must access an on-premises dependency management system. The build outputs must be stored as Server artifacts in Azure DevOps.  The source code must be stored in a Git repository in Azure DevOps. Solution: Configure the build pipeline to use a Hosted Ubuntu agent pool. Include the Java Tool Installer task in the build pipeline. Does this meet the goal? Yes No Correct Answer: **B** **/Reference:** : Instead use Octopus Tentacle. Reference: https://explore.emtecinc.com/blog/octopus-for-automated-deployment-in-devops-models QUESTION 29 DRAG DROP You are implementing an Azure DevOps strategy for mobile devices using App Center. You plan to use distribution groups to control access to releases. You need to create the distribution groups shown in the following table.  Which type of distribution group should you use for each group? To answer, drag the appropriate group types to the correct locations. Each group type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: **Correct Answer:**  QUESTION 30 SIMULATION You need to ensure that the https://contoso.com/statushook webhook is called every time a repository named az40010480345acr1 receives a new version of an image named dotnetapp. To complete this task, sign in to the Microsoft Azure portal. QUESTION 31 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment. You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos. Solution: You create a service hook subscription that uses the build completed event. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 32 HOTSPOT You need to create deployment files for an Azure Kubernetes Service (AKS) cluster. The deployments must meet the provisioning storage requirements shown in the following table. Which resource type should you use for each deployment? To answer, select the appropriate options in the answer area. **NOTE:** Each correct selection is worth one point. Hot Area:  **Correct Answer** QUESTION 33 You create a Microsoft ASP.NET Core application. You plan to use Azure Key Vault to provide secrets to the application as configuration data. You need to create a Key Vault access policy to assign secret permissions to the application. The solution must use the principle of least privilege. Which secret permissions should you use? List only Get only Get and List Correct Answer: **B** QUESTION 34 You are automating the build process for a Java-based application by using Azure DevOps. You need to add code coverage testing and publish the outcomes to the pipeline. What should you use? Bullseye Coverage JUnit JaCoCo NUnit Correct Answer: **C** QUESTION 35 SIMULATION Your company plans to implement a new compliance strategy that will require all Azure web apps to be backed up every five hours. You need to back up an Azure web app named az400-11566895-main every five hours to an Azure Storage account in your resource group. To complete this task, sign in to the Microsoft Azure portal. See solution below. Correct Answer: QUESTION 38 HOTSPOT You company uses Azure DevOps to deploy infrastructures to Azure. Pipelines are developed by using YAML. ou execute a pipeline and receive the results in the web portal for Azure Pipelines as shown in the following exhibit.  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. **NOTE:** Each correct selection is worth one point. Hot Area: **Correct Answer:**  **Reference:** Multi-stage builds are a new feature requiring Docker 17.05 or higher on the daemon and client. Multistage builds are useful to anyone who has struggled to optimize Dockerfiles while keeping them easy to read and maintain. InCorrect Answers: C. A swarm consists of multiple Docker hosts which run in swarm mode and act as managers (to manage membership and delegation) and workers (which run swarm services). References: https://docs.docker.com/develop/develop-images/ multistage-build/ QUESTION 7 You plan to create an image that will contain a.NET Core application. You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)  You need to ensure that the image is as small as possible when the image is built. Which line should you modify in the file? 1 3 4 7 Correct Answer: **C** QUESTION 8 You are developing an open source solution that uses a GitHub repository. You create a new public project in Azure DevOps. You plan to use Azure Pipelines for continuous build. The solution will use the GitHub Checks API. Which authentication type should you use? OpenID GitHub App a personal access token (PAT) SAML Correct Answer: **B** QUESTION 9 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically. Solution: From the Pre-deployment conditions settings of the release pipeline, you select After stage. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 10 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically. Solution: From the Pre-deployment conditions settings of the release pipeline, you select Batch changes while a build is in progress. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 11 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically. Solution: From the Triggers tab of the build pipeline, you select Enable continuous integration. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 12 You have a project in Azure DevOps. You have an Azure Resource Group deployment project in Microsoft Visual Studio that is checked in to the Azure DevOps project. You need to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The solution must minimize administrative effort. Which task type should you include in the solution? Azure Cloud Service Deployment Azure RM Web App Deployment Azure PowerShell Azure App Service Manage Correct Answer: **C** QUESTION 13 Your company is building a new solution in Java. The company currently uses a SonarQube server to analyze the code of.NET solutions. You need to analyze and monitor the code quality of the Java solution. Which task types should you add to the build pipeline? Chef Gradle Octopus xCODE Correct Answer: **B** SonarQube is a set of static analyzers that can be used to identify areas of improvement in your code. It allows you to analyze the technical debt in your project and keep track of it in the future. With Maven and Gradle build tasks, you can run SonarQube analysis with minimal setup in a new or existing Azure DevOps Services build task QUESTION 14 DRAG DROP You are developing a full Microsoft.NET Framework solution that includes unit tests. You need to configure SonarQube to perform a code quality validation of the C\# code as part of the build pipelines. Which four tasks should you perform in sequence? To answer, move the appropriate tasks from the list of tasks to the answer area and arrange them in the correct order. Select and Place: **Correct Answer:**  QUESTION 15 You have an Azure DevOps organization named Contoso and an Azure DevOps project named Project1. You plan to use Microsoft-hosted agents to build container images that will host full Microsoft.NET Framework apps in a YAML pipeline in Project1. What are two possiblechcorrectvirtualanswermachinepresentscompimages that you can use for the Microsoft-hosted agent pool? Ea lete solution. **NOTE:** Each correct selection is worth one point. A. vs2017-win2016 ubuntu-16.04 win1803 macOS-10.13 E. vs.2015-win2012r2 Correct Answer: A**B** QUESTION 16 HOTSPOT You currently use JIRA, Jenkins, and Octopus as part of your DevOps processes. You plan to use Azure DevOps to replace these tools. Which Azure DevOps service should you use to replace each tool? To answer, select the appropriate options in the answer area. **NOTE:** Each correct selection is worth one point. Hot Area:  **Correct Answer:** QUESTION 17 Your company has a project in Azure DevOps. You need to ensure that when there are multiple builds pending deployment, only the most recent build is deployed. What should you use? deployment conditions deployment queue settings release gates pull request triggers Correct Answer: **B** QUESTION 18 Your company develops a client banking application that processes a large volume of data. Code quality is an ongoing issue for the company. Recently, the code quality has deteriorated because of an increase in time pressure on the development team. You need to implement static code analysis. During which phase should you use static code analysis? integration testing staging production release build Correct Answer: **D** QUESTION 19 Your company is building a new solution in Java. The company currently uses a SonarQube server to analyze the code of.NET solutions. You need to analyze and monitor the code quality of the Java solution. Which task types should you add to the build pipeline? Grunt Chef Maven Gulp Correct Answer: **C** QUESTION 20 DRAG DROP Your company has a project in Azure DevOps. You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault. You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege. What should you include in the recommendation? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place:  **Correct Answer:** QUESTION 22 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically. Solution: From the Triggers tab of the build pipeline, you select **Batch changes while a build is in** **progress**. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 23 HOTSPOT You need to deploy Azure Kubernetes Service (AKS) to host an application. The solution must meet the following requirements: Containers must only be published internally. AKS clusters must be able to create and manage containers in Azure.  What should you use for each requirement? To answer, select the appropriate^.^ options in the answer are **NOTE:** Each correct selection is worth one point. Hot Area: **Correct Answer:**  QUESTION 24 You are designing an Azure DevOps strategy for your company's development team. You suspect that the team's productivity is low due to accumulate technical debt. You need to recommend a metric to assess the amount of the team's technical debt. What should you recommend? the number of code modules in an application the number of unit test failures the percentage of unit test failures the percentage of overall time spent on rework Correct Answer: **D** QUESTION 25 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** Your company has a project in Azure DevOps for a new web application. You need to ensure that when code is checked in, a build runs automatically. Solution: From the Continuous deployment trigger settings of the release pipeline, you enable the Pull request trigger setting. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 26 You use WhiteSource Bolt to scan a Node.js application. The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment. You need to ensure that WhiteSource Bolt only scans production dependencies. Which two actions should you perform? Each Correct Answer presents part of the solution. **NOTE**: Each correct selection is worth one point. Run npm install and specify the \--production flag. Modify the WhiteSource Bolt policy and set the action for the licenses used by the development tools to **Reassign**. Modify the devDependencies section of the project's Package.json file. Configure WhiteSource Bolt to scan the node\_modules directory only. Correct Answer: **AC** QUESTION 27 SIMULATION You plan to deploy a runbook that will create Azure AD user accounts. You need to ensure that runbooks can run the Azure PowerShell cmdlets for Azure Active Directory. To complete this task, sign in to the Microsoft Azure portal. A. QUESTION 28 DRAG DROP You are creating a container for an ASP.NET Core app. You need to create a Dockerfile file to build the image. The solution must ensure that the size of the image is minimized. How should you configure the file? To answer, drag the appropriate values to the correct targets. Each value must be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE**: Each correct selection is worth one point. Select and Place: **Correct Answer:**  QUESTION 29 HOTSPOT You plan to create alerts that will be triggered based on the page load performance of a home page. You have the Application Insights log query shown in the following exhibit.  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. **NOTE:** Each correct selection is worth one point. Hot Area: **Correct Answer:**  QUESTION 30 DRAG DROP You are configuring the settings of a new Git repository in Azure Repos. You need to ensure that pull requests in a branch meet the following criteria before they are merged: Committed code must compile successfully. Pull requests must have a Quality Gate status of Passed in SonarCloud. Which policy type should you configure for each requirement? To answer, drag the appropriate policy types to the correct requirements. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: **Correct Answer:**  QUESTION 31 You use a Git repository in Azure Repos to manage the source code of a web application. Developers commit changes directly to the master branch. You need to implement a change management procedure that meets the following requirements: The master branch must be protected, and new changes must be built in the feature branches first.  Changes must be reviewed and approved by at least one release manager before each merge. Changes must be brought into the master branch by using pull requests. What should you configure in Azure Repos? branch policies of the master branch Services in Project Settings Deployment pools in Project Settings branch security of the master branch Correct Answer: **A** QUESTION 32 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company's development process: Licensing violations Prohibited libraries  Solution: You implement continuous integration. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 33 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company's development process: Licensing violations Prohibited libraries Solution: You implement pre-deployment gates. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 34 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company's development process: Licensing violations  Prohibited libraries Solution: You implement automated security testing. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 35 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** Your company uses Azure DevOps to manage the build and release processes for applications. You use a Git repository for applications source control. You need to implement a pull request strategy that reduces the history volume in the master branch. Solution: You implement a pull request strategy that uses fast-forward merges. Does this meet the goal? Yes No Correct Answer: B QUESTION 36 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** Your company uses Azure DevOps to manage the build and release processes for applications. You use a Git repository for applications source control. You need to implement a pull request strategy that reduces the history volume in the master branch. Solution: You implement a pull request strategy that uses squash merges. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 37 **Note: This question is part of a series of questions that present^on^the^inthe^same^seriescontains^scenario^uniqu^. Each questi e solution that might meet the stated goals. Some question sets might have more than one correct** **solution, while others might not have a correct solution.** --------------------------------------------------------------- -- -- Your company uses Azure DevOps to manage the build and release processes for applications. You use a Git repository for applications source control. You need to implement a pull request strategy that reduces the history volume in the master branch. Solution: You implement a pull request strategy that uses an explicit merge. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 38 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** Your company uses Azure DevOps to manage the build and release processes for applications. You use a Git repository for applications source control. You need to implement a pull request strategy that reduces the history volume in the master branch. Solution: You implement a pull request strategy that uses a three-way merge. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 39 You are developing an application. The application source has multiple branches. You make several changes to a branch used for experimentation. You need to update the main branch to capture the changes made to the experimentation branch and override the history of the Git repository. Which Git option should you use? Rebase Fetch Merge Push Correct Answer: **A** Implement Continuous Delivery 01 **QUESTION 1** **Case Study** This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question on this case study, click the **Next** button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an **All Information** tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the **Question** button to return to the question. Application Architecture The company's primary application is a single monolithic retirement fund management system based on ASP.NET web forms that use logic written in VB.NET. Some new sections of the application are written in C\#. Variations of the application are created for individual customers. Currently, there are more than 80 live code branches in the application's code base. The application was developed by using Microsoft Visual Studio. Source code is stored in Team Foundation Server (TFS) in the main office. The branch offices access the source code by using TFS proxy servers. Architectural Issues Litware focuses on writing new code for customers. No resources are provided to refactor or remove existing code. Changes to the code base take a long time, as dependenciesyintroducesbugsarethatnotare obviousdifficult to individual developers. Merge operations of the code often take months and involve many developers. Code  merging frequentl to locate and resolve. complex. Planned changes Litware plans to develop a new suite of applications for investment planning. The investment planning applications will require only minor integration with the existing retirement fund management system. The investment planning applications suite will include one multi-tier web application and two iOS mobile application. One mobile application will be used by employees; the other will be used by customers. Litware plans to move to a more agile development methodology. Shared code will be extracted into a series of packages. Litware has started an internal cloud transformation process and plans to use cloud-based services whenever suitable. Litware wants to become proactive in detecting failures, rather than always waiting for customer bug reports. Technical requirements The company's investment planning applications suite must meet the following requirements: New incoming connections through the firewall must be minimized. Members of a group named Developers must be able to install packages. The principle of least privilege must be used for all permission assignments.  Abranching strategy that supports developing new functionality in isolation must be used. Members of a group named Team Leaders must be able to create new packages and edit the permissions of package feeds. Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.  By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days. Code quality and release quality are critical. During release, deployments must not proceed between stages if any active bugs are logged against the release.  The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS. The required operating system configuration for the test servers changes weekly. Azure Automation State Configuration must be used to ensure that the operating system on each test server is configured the same way when the servers are created and checked periodically. Current Technical Issue  The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration fails to correct the configurations. Azure Automation State Configuration nodes are registered by using the following command. What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite? a. pre-deployment approval a deployment gate a post-deployment approval a trigger Correct Answer: **A** **/Reference:** When a release is created from a release pipeline that defines approvals, the deployment stops at each point where approval is required until the specified approver grants approvaletweenstagesorifanyrejectsactivebugsthea release (or re-assigns the approval to another user). Scenario: Code quality and release quality are critical. During release, deployments must not proceed b us/azure/devops/pipelines/release/approvals/approvals QUESTION 2 What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite? a. pre-deployment approval a deployment gate a post-deployment approval a trigger Correct Answer: **A** QUESTION 3 HOTSPOT Case Study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question on this case study, click the **Next** button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an **All Information** tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the **Question** button to return to the question. Application Architecture The company's primary application is a single monolithic retirement fund management system based on ASP.NET web forms that use logic written in VB.NET. Some new sections of the application are written in C\#. Variations of the application are created for individual customers. Currently, there are more than 80 live code branches in the application's code base. The application was developed by using Microsoft Visual Studio. Source code is stored in Team Foundation Server (TFS) in the main office. The branch offices access the source code by using TFS proxy servers. Architectural Issues Litware focuses on writing new code for customers. No resources are provided to refactor or remove existing code. Changes to the code base take a long time, as dependencies are not obvious to individual developers. Merge operations of the code often take months and involve many developers. Code merging frequently introduces bugs that are difficult to locate and resolve. Customers report that ownership costs of the retirement fund management system increase continually. The need to merge unrelated code makes even minor code changes expensive. Customers report that bug reporting is overly complex. Planned changes Litware plans to develop a new suite of applications for investment planning. The investment planning applications will require only minor integration with the existing retirementapplicationfund.Onemanagementobileapplicati system. investment planning applications suite will include one multi-tier web application and two iOS mobil The on will be used by employees; the other will be used by customers. Litware plans to move to a more agile development methodology. Shared code will be extracted into a s Litware has started an internal cloud transformation process and plans to use cloud-based services whenever suitable. Litware wants to become proactive in detecting failures, rather than always waiting for customer bug reports. Technical requirements The company's investment planning applications suite must meet the following requirements: New incoming connections through the firewall must be minimized. Members of a group named Developers must be able to install packages. The principle of least privilege must be used for all permission assignments.  Abranching strategy that supports developing new functionality in isolation must be used. Members of a group named Team Leaders must be able to create new packages and edit the permissions of package feeds. Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.  By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days.  Code quality and release quality are critical. During release, deployments must not proceed between stages if any active bugs are logged against the release. The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.  The required operating system configuration for the test servers changes weekly. Azure Automation State Configuration must be used to ensure that the operating system on each test server is configured the same way when the servers are created and checked periodically. Current Technical Issue The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration fails to correct the configurations. Azure Automation State Configuration nodes are registered by using the following command.  How should you configure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area. **NOTE:** Each correct selection is worth one point. Hot Area: **Correct Answer:**  QUESTION 4 HOTSPOT Where should the build and release agents for the investment planning application suite run? To answer, select the appropriate options in the answer area. **NOTE**: Each correct selection is worth one point. Hot Area: **Correct Answer:**  Implement Continuous Delivery 02 **QUESTION 1** Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources: Two resource groups Four Azure virtual machines in one resource group Two Azure SQL databases in other resource group You need to recommend a solution to deploy the resources. Solution: Create a main template that will deploy the resources in one resource group and a nested template that will deploy the resources in the other resource group. Does this meet the goal? n its respective group. Yes No Correct Answer: **B** QUESTION 2 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources: Two resource groups Four Azure virtual machines in one resource group Two Azure SQL ^p^databases in other resource grou You need to recommend a solution to deploy the resources. Solution: Create a main template that has two linked templates, each of which will deploy the resource i Does this meet the goal? Yes No Correct Answer: **A** QUESTION 3 Your company has a project in Azure DevOps for a new web application. The company uses ServiceNow for change management. You need to ensure that a change request is processed before any components can be deployed to the production environment. What are two ways to integrate ServiceNow into the Azure DevOps release pipeline? Each Correct Answer presents a complete solution. NOTE: Each correct selection is worth one point. Define a deployment control that invokes the ServiceNow REST API. Define a pre-deployment gate before the deployment to the Prod stage. Define a deployment control that invokes the ServiceNow SOAP API. Define a post-deployment gate after the deployment to the QA stage. Correct Answer: **BD** QUESTION 4 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed. You have a policy stating that approvals must occur within eight hours.You discover that deployment fail if the approvals take longer than two hours.You need to ensure that the deployments only fail if the approvals take longer than eight hours. Solution: From Post-deployment conditions, you modify the Time between re-evaluation of gates option Does this meet the goal? Yes No Correct Answer: **B** **/Reference:** Use a gate From Pre-deployment conditions instead. References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/approvals/gates QUESTION 5 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed. You have a policy stating that approvals must occur within eight hours. You discover that deployment fail if the approvals take longer than two hours. You need to ensure that the deployments only fail if the approvals take longer than eight hours. Solution: From Pre-deployment conditions, you modify the Time between re-evaluation of gates option. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 6 Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed. You have a policy stating that approvals must occur within eight hours. You discover that deployment fail if the approvals take longer than two hours. You need to ensure that the deployments only fail if the approvals take longer than eight hours. Solution: From Pre-deployment conditions, you modify the Timeout setting for pre-deployment approvals. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 7 Note: This question-is part of a series of questions that present the same^seriescontains^scenario^unique^.Each^solution^ question-in the hat might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution. After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources: Two resource groups Four Azure virtual machines in one resource group Two Azure SQL databases in other resource group You need to recommend a solution to deploy the resources. Solution: Create two standalone templates, each of which will deploy the resources in its respective group. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 8 HOTSPOT You have a project in Azure DevOps. You plan to create a build pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault. You need to ensure that you can dynamically generate the resource ID of the key vault during template deployment. What should you include in the template? To answer, select the appropriate options in the answer area. **NOTE:** Each correct selection is worth one point. Hot Area: **Correct Answer:**  **/Reference:** : QUESTION 9 HOTSPOT You are configuring a release pipeline in Azure DevOps as shown in the exhibit. Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic. **NOTE:** Each correct selection is worth one point. Hot Area:  **Correct Answer:** QUESTION 10 DRAG DROP Your company plans to deploy an application to the following endpoints: Ten virtual machines hosted in Azure Ten virtual machines hosted in an on-premises data center environment All the virtual machines have the Azure Pipelines agent.  You need to implement a release strategy for deploying the application to the endpoints. What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate components to the correct endpoints. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: **Correct Answer:**  QUESTION 11 **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one** **correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources: Two resource groups Four Azure virtual machines in one resource group Two Azure SQL databases in other resource group You need to recommend a solution to deploy the resources. Solution: Create a single standalone template that will deploy all the resources. Does this meet the goal? Yes No Correct Answer: **B** **/Reference:** : Use two templates, one for each resource group, and link the templates. References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-linked-templates QUESTION 12 HOTSPOT Your company has an Azure subscription. The company requires that all resource group in the subscription have a tag named organization set to a value of Contoso. You need to implement a policy to meet the tagging requirement. How should you complete the policy? To answer, select the appropriate options in the answer area. **NOTE:** Each correct selection is worth one point. Hot Area: **Correct Answer:**  ed by a team leader before they ar QUESTION 13 DRAG DROP You are defining release strategies for two applications as shown in the following table. Which release strategy should you use for each application? To answer, drag the appropriate release strategies to the correct applications. Each release strategy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place:  **Correct Answer:** **QUESTION 14** **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able^questions^toreturn^willot^ to^appear^it. As^inth^a result, thes** You discover that deployment fail if the approvals take longer than two hours. You need to ensure that the deployments only fail if the approvals take longer than eight hours. Solution: From Post-deployment conditions, you modify the Timeout setting for post-deployment approvals. Does this meet the goal? Yes No Correct Answer: **B** **/Reference:** **QUESTION 15** **Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You have an Azure DevOps project. Your build process creates several artifacts. You need to deploy the artifacts to on-premises servers. Solution: You deploy a Kubernetes cluster on-premises. You deploy a Helm agent to the cluster. You add a Download Build Artifacts task to the deployment pipeline. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 16 **Note: This question is part of a series of questions that present^on^the^inthe^same^seriescontains^scenario^uniqu^. Each questi e solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You have an Azure DevOps project. Your build process creates several artifacts. You need to deploy the artifacts to on-premises servers. Solution: You deploy a Docker build to an on-premises server. You add a Download Build Artifacts task to the deployment pipeline. Does this meet the goal? Yes No Correct Answer: **B** QUESTION 17 **This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.** **After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.** You have an Azure DevOps project. Your build process creates several artifacts. You need to deploy the artifacts to on-premises servers. Solution: You deploy an Azure self-hosted agent to an on-premises server. You add a Copy and Publish Build Artifacts task to the deployment pipeline. Does this meet the goal? Yes No Correct Answer: **A** QUESTION 18 Your company hosts a web application in Azure. The company uses Azure Pipelines for the build and release management of the application. Stakeholders report that the past few releases have negatively affected system performance. You configure alerts in Azure Monitor. You need to ensure that new releases are only deployed to production if the releases meet defined performance baseline criteria in the staging environment first. What should you use to prevent the deployment of releases that fall to meet the performance baseline? an Azure Scheduler job a. trigger a gate an Azure function Correct Answer: **C** QUESTION 19 SIMULATION You need to ensure that an Azure web app named az400-9940427-main supports rolling upgrades. The solution must ensure that only 10 percent of users who connect to az400-9940427-main use update versions of the app. The solution must minimize administrative effort. To complete this task, sign in to the Microsoft Azure portal. See solution below. Correct Answer: **A** QUESTION 20 You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure SQL database named DB1. You need to create a release pipeline that uses the Azure SQL Database Deployment task to update DB1. Which artifact should you deploy? a. BACPAC a DACPAC an LDF file an MDF file Correct Answer: **B** QUESTION 21 DRAG DROP You have an Azure Kubernetes Service (AKS) cluster. You need to deploy an application to the cluster by using Azure DevOps. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:  **Correct Answer:** QUESTION 22 You plan to use Terraform to deploy an Azure resource group. You need to install the required frameworks to support the planned deployment. Which two frameworks should you install? Each Correct Answer presents part of the solution. **NOTE:** Each correct selection is worth one point. Vault Terratest Node.js Yeoman Tiller Correct Answer: **BD** Implement Dependency Management 01 **QUESTION 1** **Case Study** This is a case study. **Case studies are not timed separately. You can use as much exam time as you** **would like to complete each case.** However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section. To start the case study To display the first question on this case study, click the **Next** button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an **All Information** tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the **Question** button to return to the question. Overview Litware, Inc. is an independent software vendor (ISV). Litware has a main office and five branch offices. Existing Environment Application Architecture The company's primary application is a single monolithic retirement fund management system based on ASP.NET web forms that use logic written in VB.NET. Some new sections of the application are written in C\#. Variations of the application are created for individual customers. Currently, there are more than 80 live code branches in the application's code base.  Architectural Issues Litware focuses on writing new code for customers. No resources are provided to refactor or remove existing code. Changes to the code base take a long time, as dependencies are not obvious to individual developers. Merge operations of the code often take months and involve many developers. Code merging frequently introduces bugs that are difficult to locate and resolve. Customers report that ownership costs of the retirement fund management system increase continually. The need to merge unrelated code makes even minor code changes expensive. Customers report that bug reporting is overly complex. Requirements Planned changes Litware plans to develop a new suite of applications for investment planning. The investment planning applications will require only minor integration with the existing retirement fund management system. The investment planning applications suite will include one multi-tier web application and two iOS mobile applications. One mobile application will be used by employees; the other will be used by customers. Litware plans to move to a more agile development methodology. Shared code will be extracted into a series of packages. Litware has started an internal cloud transformation process and plans to use cloud-based services whenever suitable. Litware wants to become proactive in detecting failures, rather than always waiting for customer bug reports. Technical requirements The company's investment planning applications suite must meet the following requirements: New incoming connections through the firewall must be minimized. Members of a group named Developers must be able to install packages. The principle of least privilege must be used for all permission assignments.A branching strategy that supports developing new functionality in isolation must be used. Members of a group named Team Leaders must be able to create new packages and edit the permissions of package feeds. Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.  By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days.  Code quality and release quality are critical. During release, deployments must not proceed between stages if any active bugs are logged against the release. The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.  The required operating system configuration for the test servers changes weekly. Azure Automation State Configuration must be used to ensure that the operating system on each test server is configured the same way when the servers are created and checked periodically. Current Technical Issue The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration fails to correct the configurations. Azure Automation State  Configuration nodes are registered by using the following command. A. **QUESTION 2** DRAG DROP Which package feed access levels should be assigned to the Developers and Team Leaders groups for the investment planning applications suite? To answer, drag the appropriate access levels to the correct groups. Each access level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. **NOTE:** Each correct selection is worth one point. Select and Place: **Correct Answer:**  Implement Dependency Management 02 **QUESTION 1** **Case Study** This is a case study. **Case studies are not timed separately. You can use as much exam time as you** **would like to complete each case.** However, there may be