[May 22, 2024] Pass Your AZ-400 Dumps Free Latest Microsoft Practice Tests
Get Top-Rated Microsoft AZ-400 Exam Dumps Now
Microsoft AZ-400 (Designing and Implementing Microsoft DevOps Solutions) Certification Exam is a comprehensive exam that prepares candidates for designing and implementing DevOps solutions on Microsoft Azure. DevOps is an emerging field that combines software development and operations to improve the efficiency and reliability of software delivery. Designing and Implementing Microsoft DevOps Solutions certification exam is designed to test the candidate's knowledge and skills in various areas of DevOps, including continuous integration and delivery, infrastructure as code, security, monitoring, and collaboration.
NEW QUESTION # 244
You have a web app named App1 that is hosted on multiple servers. App1 uses Application Insights in Azure Monitor.
You need to compare the dairy CPU usage from the last week for all servers.
How should you complete the query? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 245
You have multi-tier application that he an Azure Web Apps front end and art Azure SQL Datable back end.
You need to recommend a solution to capture and store telemetry dat
a. The solution must meet the following requirements:
* Support using ad-hoc queries to identify baselines.
* Trigger alerts when metrics in the baseline are exceeded.
* Store application and database metrics in a central location.
What should you include in the recommendation?
- A. Azure SQL Database Intelligent Insights
- B. Azure Application Insights
- C. Azure Log Analytics
- D. Azure Event Hubs
Answer: B
Explanation:
Azure Platform as a Service (PaaS) resources, like Azure SQL and Web Sites (Web Apps), can emit performance metrics data natively to Log Analytics.
The Premium plan will retain up to 12 months of data, giving you an excellent baseline ability.
There are two options available in the Azure portal for analyzing data stored in Log analytics and for creating queries for ad hoc analysis.
NEW QUESTION # 246
Your company has an Azure subscription named Subscription1. Subscription1 is associated to an Azure Active Directory tenant named contoso.com.
You need to provision an Azure Kubernetes Services (AKS) cluster in Subscription1 and set the permissions for the cluster by using RBAC roles that reference the identities in contoso.com.
Which three objects should you create in sequence? To answer, move the appropriate objects from the list of objects to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Step 1: Create an AKS cluster
Step 2: a system-assigned managed identity
To create an RBAC binding, you first need to get the Azure AD Object ID.
* Sign in to the Azure portal.
* In the search field at the top of the page, enter Azure Active Directory.
* Click Enter.
* In the Manage menu, select Users.
* In the name field, search for your account.
* In the Name column, select the link to your account.
* In the Identity section, copy the Object ID.
Step 3: a RBAC binding
Reference:
https://docs.microsoft.com/en-us/azure/developer/ansible/aks-configure-rbac
NEW QUESTION # 247
You manage build and release pipelines by using Azure DevOps. Your entire managed environment resides in Azure.
You need to configure a service endpoint for accessing Azure Key Vault secrets. The solution must meet the following requirements:
Ensure that the secrets are retrieved by Azure DevOps.
Avoid persisting credentials and tokens in Azure DevOps.
How should you configure the service endpoint? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/deploy/azure-key-vault
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
NEW QUESTION # 248
You have a containerized solution that runs in Azure Container Instances. The solution contains a frontend container named App1 and a backend container named DB1. DB1 loads a large amount of data during startup.
You need to verify that DB1 can handle incoming requests before users can submit requests to Appl.
What should you configure?
- A. a readiness probe
- B. a performance log
- C. a Iiveness probe
- D. an Azure Load Balancer health probe
Answer: A
Explanation:
Explanation
For containerized applications that serve traffic, you might want to verify that your container is ready to handle incoming requests. Azure Container Instances supports readiness probes to include configurations so that your container can't be accessed under certain conditions.
Reference:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-readiness-probe
NEW QUESTION # 249
DRAG DROP
You need to use Azure Automation State Configuration to manage the ongoing consistency of virtual machine configurations.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Answer:
Explanation:
Select and Place:
Explanation/Reference:
Explanation:
Step 1: Assign the node configuration.
You create a simple DSC configuration that ensures either the presence or absence of the Web-Server Windows Feature (IIS), depending on how you assign nodes.
Step 2: Upload a configuration to Azure Automation State Configuration.
You import the configuration into the Automation account.
Step 3: Compiling a configuration into a node configuration
Compiling a configuration in Azure Automation
Before you can apply a desired state to a node, a DSC configuration defining that state must be compiled into one or more node configurations (MOF document), and placed on the Automation DSC Pull Server.
Step 4: Onboard the virtual machines to Azure State Configuration
Onboarding an Azure VM for management with Azure Automation State Configuration Step 5: Check the compliance status of the node.
Viewing reports for managed nodes. Each time Azure Automation State Configuration performs a consistency check on a managed node, the node sends a status report back to the pull server. You can view these reports on the page for that node.
On the blade for an individual report, you can see the following status information for the corresponding consistency check:
The report status - whether the node is "Compliant", the configuration "Failed", or the node is "Not Compliant" (when the node is in ApplyandMonitor mode and the machine is not in the desired state).
References: https://docs.microsoft.com/en-us/azure/automation/automation-dsc-getting-started
NEW QUESTION # 250
You have a GitHub organization named org1 and an Azure tenant named Tenant1.
You need to enable single sign-on (SSO) in Azure Active Directory (Azure AD) for the users in org1.
Which URIs should you use for the SAML configuration in Azure AD? To answer, drag the appropriate URIs to the correct settings. Each URI may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/github-tutorial
NEW QUESTION # 251
You have a web app named App1 that is hosted on multiple servers. App1 uses Application Insights in Azure Monitor.
You need to compare the dairy CPU usage from the last week for all servers.
How should you complete the query? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 252
Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.
You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.
What should you use?
- A. WhiteSource
- B. OWASP ZAP
- C. PDM
- D. Microsoft Visual SourceSafe
Answer: A
Explanation:
WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.
Azure DevOps integration with WhiteSource Bolt will enable you to:
* Detect and remedy vulnerable open source components.
* Generate comprehensive open source inventory reports per project or build.
* Enforce open source license compliance, including dependencies' licenses.
* Identify outdated open source libraries with recommendations to update.
References: https://www.azuredevopslabs.com/labs/vstsextend/WhiteSource/
NEW QUESTION # 253
You plan to use Azure Kubernetes Service (AKS) to host containers deployed from images hosted in a Docker Trusted Registry.
You need to recommend a solution for provisioning and connecting to AKS. The solution must ensure that AKS is RBAC-enaWed and uses a custom service principal.
Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the coned order.
Answer:
Explanation:
Explanation
Step 1 : az acr create
An Azure Container Registry (ACR) can also be created using the new Azure CLI.
az acr create
--name <REGISTRY_NAME>
--resource-group <RESOURCE_GROUP_NAME>
--sku Basic
Step 2: az ad sp create-for-rbac
Once the ACR has been provisioned, you can either enable administrative access (which is okay for testing) or you create a Service Principal (sp) which will provide a client_id and a client_secret.
az ad sp create-for-rbac
--scopes
/subscriptions/<SUBSCRIPTION_ID>/resourcegroups/<RG_NAME>/providers/Microsoft.ContainerRegistry/re
--role Contributor
--name <SERVICE_PRINCIPAL_NAME>
Step 3: kubectl create
Create a new Kubernetes Secret.
kubectl create secret docker-registry <SECRET_NAME>
--docker-server <REGISTRY_NAME>.azurecr.io
--docker-email <YOUR_MAIL>
--docker-username=<SERVICE_PRINCIPAL_ID>
--docker-password <YOUR_PASSWORD>
References:
https://thorsten-hans.com/how-to-use-private-azure-container-registry-with-kubernetes
NEW QUESTION # 254
You are designing a configuration management solution to support five apps hosted on Azure App Service.
Each app is available in the following three environments: development, test, and production.
You need to recommend a configuration management solution that meets the following requirements:
Supports feature flags
Tracks configuration changes from the past 30 days
Stores hierarchically structured configuration values
Controls access to the configurations by using role-based access control (RBAC) permission Stores shared values as key/value pairs that can be used by all the apps Which Azure service should you recommend as the configuration management solution?
- A. Azure App Service
- B. Azure Cosmos DB
- C. Azure App Configuration
- D. Azure Key Vault
Answer: C
Explanation:
Explanation
The Feature Manager in the Azure portal for App Configuration provides a UI for creating and managing the feature flags that you use in your applications.
App Configuration offers the following benefits:
A fully managed service that can be set up in minutes
Flexible key representations and mappings
Tagging with labels
Point-in-time replay of settings
Dedicated UI for feature flag management
Comparison of two sets of configurations on custom-defined dimensions
Enhanced security through Azure-managed identities
Encryption of sensitive information at rest and in transit
Native integration with popular frameworks
App Configuration complements Azure Key Vault, which is used to store application secrets.
Reference:
https://docs.microsoft.com/en-us/azure/azure-app-configuration/overview
NEW QUESTION # 255
How should you configure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Scenario: By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days.
Box 1: Set the default retention policy to 30 days
The Global default retention policy sets the default retention values for all the build pipelines. Authors of build pipelines can override these values.
Box 2: Set the stage retention policy to 60 days
You may want to retain more releases that have been deployed to specific stages.
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/policies/retention
NEW QUESTION # 256
You are automating the testing process for your company.
You need to automate UI testing of a web application.
Which framework should you use?
- A. Selenium
- B. JaCoco
- C. Microsoft.CodeAnalysis
- D. Xamarin.UITest
Answer: A
Explanation:
Performing user interface (UI) testing as part of the release pipeline is a great way of detecting unexpected changes, and need not be difficult. Selenium can be used to test your website during a continuous deployment release and test automation.
References:
https://docs.microsoft.com/en-us/azure/devops/pipelines/test/continuous-test-selenium?view=azure-devops
NEW QUESTION # 257
You manage build pipelines and deployment pipelines by using Azure DevOps.
Your company has a team of 500 developers.
New members are added continual lo the team.
You need to automate me management of users and licenses whenever possible.
Which task must you perform manually?
- A. adding users
- B. modifying group memberships
- C. assigning entitlements
- D. procuring licenses
Answer: D
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/migrate-to-group-based-resource-managem
https://docs.microsoft.com/en-us/rest/api/azure/devops/memberentitlementmanagement/?view=azure-devops-res
Topic 1, Case Study: 2Overview
Existing Environment
This is a case study Case studies are not limed separately. You can use as much exam time at you would like to complete each case. However there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided m the case study Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of the case study, a review screen will appear. This screen allows you to review your answers and to mate changes before you move to the next section of the exam, After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment and problem statements. If the case study has an All Information tab, note that the information displayed on identical to the Information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Requirements
Contoso plans to improve its IT development and operations processes implementing Azue DevOps principles.
Contoso has an Azure subscription and creates an Azure DevOPs organization.
The Azure DevOps organization includes:
* The Docker extension
* A deployment pool named Pool7 that contains 10 Azure virtual machines that run Windows Server 2016.
The Azure subscription contains an Azure Automation account.
Planned Changes
Contoso plans to create projects in Azure DevOps as shown in the following table.
Technical Requirements
Contoso identities the following technical requirements:
* Implement build agents rot Project 1.
* Whenever possible, use Azure resources
*Avoid using deprecated technologies
* Implement a code flow strategy for Project2 that will:
*Enable Team 2 to submit pull requests for Project2.
* Enable Team 2 to work independently on changes to a copy of Project?
* Ensure that any intermediary changes performed by Tram2 on a copy of Project2 will be subject to the same restrictions as the ones defied in the build policy of Project2.
* Whenever possible. Implement automation and minimize administrative effort.
* Implement Protect3, Project5, Project6, and Project7 based on the planned changes.
* Implement Project4 and configure the project to push Docker images to Azure Container Reentry.
NEW QUESTION # 258
You manage build and release pipelines by using Azure DevOps. Your entire managed environment resides in Azure.
You need to configure a service endpoint for accessing Azure Key Vault secrets. The solution must meet the following requirements:
* Ensure that the secrets are retrieved by Azure DevOps.
* Avoid persisting credentials and tokens in Azure DevOps.
How should you configure the service endpoint? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: Azure Pipelines service connection
Box 2: Managed Service Identity Authentication
The managed identities for Azure resources feature in Azure Active Directory (Azure AD) provides Azure services with an automatically managed identity in Azure AD. You can use the identity to authenticate to any service that supports Azure AD authentication, including Key Vault, without any credentials in your code.
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/deploy/azure-key-vault
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
NEW QUESTION # 259
You add the virtual machines as managed nodes in Azure Automation State Configuration.
You need to configure the managed computers in Pool7.
What should you do next?
- A. Modify the RefreshMode property of the Local Configuration Manager (LCM).
- B. Modify the ConfigurationMode property of the Local Configuration Manager (LCM).
- C. Install PowerShell Core.
- D. Run the Register-AzureRmAutomationDscNodeAzure Powershell cmdlet.
Answer: D
Explanation:
The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State Configuration (DSC) node in an Azure Automation account.
Scenario: The Azure DevOps organization includes:
The Docker extension
A deployment pool named Pool7 that contains 10 Azure virtual machines that run Windows Server 2016
References: https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/register- azurermautomationdscnode Implement DevOps Development Processes Question Set 3
NEW QUESTION # 260
You have a project in Azure DevOps that uses packages from multiple public feeds. Some of the feeds are unreliable.
You need to consolidate the packages into a single feed.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: Create a NuGet package.
NuGet and Maven are public package managers that support multiple feeds.
Step 2: Create an Azure Artifacts feed that uses upstream sources
If you want to use packages from multiple feeds, use upstream sources to bring packages from multiple feeds together into a single feed.
Step 3: Create a Micrtosoft Visual Studio project that includes all the packages Consume NuGet packages from upstream sources: Now you can open Visual Studio and install packages from the upstream sources you just configured.
Reference:
https://docs.microsoft.com/en-us/azure/devops/artifacts/how-to/set-up-upstream-sources
NEW QUESTION # 261
Your company has two virtual machines that run Linux in a third-party public cloud.
You plan to use the company's Azure Automation State Configuration implementation to manage the two virtual machines and detect configuration drift.
You need to onboard the Linux virtual machines.
You install PowerShell Desired State Configuration (DSC) on the virtual machines, and then run register.py.
Which three actions should you perform next in sequence? To answer, move the actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Create a DSC metaconfiguration
2 - Copy the metaconfiguration to the virtual machines.
3 - Add the virtual machines as DSC nodes in Azure Automation.
NEW QUESTION # 262
Your company wants to use Azure Application Insights to understand how user behaviors affect an application.
Which Application Insights tool should you use to analyze each behavior? To answer, drag the appropriate tools to the correct behaviors. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-flows
https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-impact
https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-troubleshoot
NEW QUESTION # 263
......
Microsoft DevOps Engineer Exam Certification Details:
| Exam Price | $165 (USD) |
| Schedule Exam | Pearson VUE |
| Passing Score | 700 / 1000 |
| Exam Name | Microsoft Certified - DevOps Engineer Expert |
| Number of Questions | 40-60 |
| Exam Code | AZ-400 |
Microsoft AZ-400: Exam details
First and foremost, you need to know that the AZ-400 test is available in various languages, including English, Korean, Japanese, and Chinese (Simplified) and costs $165. However, the price depends on the country where the exam is proctored. You will have to deal with more than 40 questions within 150 minutes. The questions will be of different types and you need to get 700 or more points to pass this certification exam.
Passing Key To Getting AZ-400 Certified Exam Engine PDF: https://www.actualtorrent.com/AZ-400-questions-answers.html
AZ-400 Exam Dumps Pass with Updated Tests Dumps: https://drive.google.com/open?id=1oI_QxyepyU8qdjO3AVKrcrqQJzpsEbvo