Advice for Taking the Microsoft Role-based AZ-400 Exam (Optimal)

Everything you need to know to get through. The Microsoft Role-based AZ-400 exam is no exception. I also previously provided advice on taking the AZ-400 exam in a blog post. Now I would like to re-talk about the update of the experience of taking the AZ-400 dumps pdf. If you’re planning to take the AZ-400 exam or want to know how to pass the exam, then this blog is for you!

To pass the Microsoft AZ-400 exam, you need to improve your abilities in real AZ-400 dumps pdf 2022, which offers practice tests similar to real exams >>> https://www.pass4itsure.com/az-400.html full AZ-400 dumps pdf 2022.

[google drive] Updated Microsoft AZ-400 dumps pdf 2022

Newly published Microsoft Role-based AZ-400 practice questions

QUESTION 1

DRAG-DROP
You are deploying a new application that uses Azure virtual machines.
You plan to use the Desired State Configuration (DSC) extension on the virtual machines.
You need to ensure that the virtual machines always have the same Windows feature installed.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
Select and Place:

Correct Answer:

Step 1: Create a PowerShell configuration file
You create a simple PowerShell DSC configuration file.

Step 2: Load the file to Azure Blob storage
Package and publish the module to a publically accessible blob container URL

Step 3: Configure the Custom Script Extension on the virtual machines.
The Custom Script Extension downloads and executes scripts on Azure virtual machines.

Reference:
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-getting-started
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-windows

QUESTION 2

HOTSPOT
You are configuring a release pipeline in Azure DevOps as shown in the exhibit.

Use the drop-down menus to select the answer choice that answers each question based on the information presented
in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Box 1: 5 There are five stages: Development, QA, Pre-production, Load Test, and Production. They all have triggers.
Box 2: The Internal Review stage References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/triggers

QUESTION 3

DRAG DROP As part of your application build process, you need to deploy a group of resources to Azure by using an
Azure Resource Manager template located on GitHub. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Correct Answer:

QUESTION 4

You have an existing build pipeline in Azure Pipelines. You need to use incremental builds without purging the
the environment between pipeline executions. What should you use?

A. a File Transform task
B. a self-hosted agent
C. Microsoft-hosted parallel jobs

Correct Answer: B

QUESTION 5

You manage to build pipelines and deployment pipelines by using Azure DevOps.
Your company has a team of 500 developers. New members are added continually to the team.
You need to automate the management of users and licenses whenever possible.
Which task must you perform manually?

A. modifying group memberships
B. adding users
C. assigning entitlements
D. procuring licenses

Correct Answer: D

Incorrect Answers:
A: You can seamlessly replace existing solutions with group-based licensing to more easily manage licenses in Azure
DevOps. You can use Group rules.
C: Member Entitlement Management APIs allow managing Entitlements that include

1. License
2. Extensions
3. Project/Team memberships

References: https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/migrate-to-group-based-resourcemanagement?view=vstsandtabs=new-nav https://docs.microsoft.com/enus/rest/api/azure/devops/memberentitlementmanagement/?view=azure-devops-rest-5.0

QUESTION 6

Your company is concerned that when developers introduce open source libraries, it creates licensing compliance
issues.
You need to add an automated process to the build pipeline to detect when common open source libraries are added to the codebase.

What should you use?

A. Microsoft Visual SourceSafe
B. Code Style
C. Black Duck
D. Jenkins
E. SourceGea
F. OWASP ZAP

Correct Answer: C

Secure and Manage Open Source Software Black Duck helps organizations identify and mitigate open source security,
license compliance, and code-quality risks across application and container portfolios.

Black Duck Hub and its plugin for Team Foundation Server (TFS) allows you to automatically find and fix open source security vulnerabilities during the build process, so you can proactively manage risk. The integration allows you to receive alerts and fail builds when any Black Duck Hub policy violations are met.

Note: WhiteSource would also be a good answer, but it is not an option here.

References: https://marketplace.visualstudio.com/items?itemName=black-duck-software.hub-tfs

QUESTION 7

You have 50 Node. js-based projects that you can do by using WhiteSource. Each project includes Package.json, Packagelock.json, and Npm-shrinkwrap.json files.
You need to minimize the number of library reports by WhiteSource to only the libraries that you explicitly reference.
What should you do?

A. Configure the File System Agent plug-in.
B. Add a devDependencies section to Package-lock.json.
C. Configure the Artifactory plug-in.
D. Delete Package-lock.json.

Correct Answer: B

Separate Your Dependencies
Within your package.json file be sure you split out your npm dependencies between devDependencies and (production) dependencies. The key part is that you must then make use of the –production flag when installing the npm packages.

The –production flag will exclude all packages defined in the devDependencies section.

References: https://blogs.msdn.microsoft.com/visualstudioalmrangers/2017/06/08/manage-your-open-source-usageand-security-as-reported-by-your-cicd-pipeline/

QUESTION 8

DRAG-DROP
You are configuring Azure DevOps build pipelines.
You plan to use hosted build agents.

Which build agent pool should you use to compile each application type? To answer, drag the appropriate build agent
pools to the correct application types. Each build agent pool may be used once, more than once, or not at all. You may
need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.
Select and Place:

Box 1: Hosted macOS
Hosted macOS pool (Azure Pipelines only): Enables you to build and release on macOS without having to configure a
self-hosted macOS agent. This option affects where your data is stored.

Box 2: Hosted
Hosted pool (Azure Pipelines only): The Hosted pool is the built-in tool that is a collection of Microsoft-hosted agents.

Incorrect Answers:
Default pool: Use it to register self-hosted agents that you\’ve set up.
Hosted Windows Container pool (Azure Pipelines only): Enabled you to build and release inside Windows containers.
Unless you\’re building using containers, Windows builds should run in the Hosted VS2017 or Hosted pools.

References: https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/v2-osx

QUESTION 9

You are automating the build process for a Java-based application by using Azure DevOps.
You need to add code coverage testing and publish the outcomes to the pipeline.
What should you use?

A. Bullseye Coverage
B. JUnit
C. JaCoCo
D. NUnit

Correct Answer: C

Use Publish Code Coverage Results task in a build pipeline to publish code coverage results to Azure Pipelines or TFS,
which were produced by a build-in Cobertura or JaCoCo format.

Incorrect Answers:
A: Bullseye Coverage is used for C++ code, and not for Java.

Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/test/publish-code-coverage-results

QUESTION 10

You use a Git repository in Azure Repos to manage the source code of a web application. Developers commit changes
directly to the master branch.

You need to implement a change management procedure that meets the following requirements:
1. The master branch must be protected, and new changes must be built in the feature branches first.
2. Changes must be reviewed and approved by at least one release manager before each merge.
3. Changes must be brought into the master branch by using pull requests. What should you configure in Azure Repos?

A. branch policies of the master branch
B. Services in Project Settings
C. Deployment pools in Project Settings
D. branch security of the master branch

Correct Answer: A

Branch policies help teams protect their important branches of development. Policies enforce your team\\’s code quality and change management standards.

Reference: https://docs.microsoft.com/en-us/azure/devops/repos/git/branch-policies

QUESTION 11

HOTSPOT
You need to configure a cloud service to store the secrets required by the mobile applications to call the share pricing
service.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Box 1: Shared Access Authorization token
Every request made against a storage service must be authorized unless the request is for a blob or container resource
that has been made available for public or signed access. One option for authorizing a request is by using Shared Key.

Box 2: Azure Storage with HTTPS access
Scenario: The mobile applications must be able to call the share pricing service of the existing retirement fund
management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.

The investment planning application suite will include one multi-tier web application and two iOS mobile applications. One mobile application will be used by employees; the other will be used by customers.

Reference: https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key

QUESTION 12

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.

You have an Azure DevOps project.
Your build process creates several artifacts.
You need to deploy the artifacts to on-premises servers.

Solution: You deploy a Kubernetes cluster on-premises. You deploy a Helm agent to the cluster. You add a Download
Build Artifacts task to the deployment pipeline.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B

Instead, you should deploy an Azure self-hosted agent to an on-premises server.
Note: To build your code or deploy your software using Azure Pipelines, you need at least one agent.

If your on-premises environments do not have connectivity to a Microsoft-hosted agent pool (which is typically the case due to intermediate firewalls), you\’ll need to manually configure a self-hosted agent on the on-premises computer(s).

Note 2: As we [Microsoft] are launching this new experience in preview, we are currently optimizing it for Azure
Kubernetes Service (AKS) and Azure Container Registry (ACR). Other Kubernetes clusters, for example, running on-premises or in other clouds, as well as other container registries, can be used, but require setting up a Service Account and connection manually.

References:
https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops

QUESTION 13

You use Azure Pipelines to manage project builds and deployments.
You plan to use Azure Pipelines for Microsoft Teams to notify the legal team when a new build is ready for release.
You need to configure the Organization Settings in Azure DevOps to support Azure Pipelines for Microsoft Teams.
What should you turn on?

A. Azure Active Directory Conditional Access Policy Validation
B. Alternate authentication credentials
C. Third-party application access via OAuth
D. SSH authentication

Correct Answer: C

The Azure Pipelines app uses the OAuth authentication protocol and requires Third-party application access via OAuth
for the organization to be enabled. To enable this setting, navigate to Organization Settings > Security > Policies, and
set the Third-party application access via OAuth for the organization setting to On.

Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/integrations/microsoft-teams

In conclusion

To succeed in the Microsoft AZ-400 exam, we recommend that you practice as many AZ-400 exam questions as possible with the real AZ-400 exam dump pdf for high-level understanding.

A great opportunity to get serious on the Designing and Implementing Microsoft DevOps Solutions exam >>> AZ-40 dumps pdf https://www.pass4itsure.com/az-400.html (PDF+ VCE). It is recommended to study at least 3 times a week for at least eight weeks to prepare for this exam.

Click here for more Microsoft exam questions: https://www.microsoft-technet.com/category/microsoft