Go Back on AZ-400 Exam
Available in 1, 3, 6 and 12 Months Free Updates Plans
PDF: $15 $60

Test Engine: $20 $80

PDF + Engine: $25 $99

AZ-400 Practice Test


Page 18 out of 98 Pages

Topic 3: Woodgrove bank

   

This is a case study. Case studies are not timed separately. You can use as much
exam time as you would like to complete each case. However, there may be additional
case studies and sections on this exam. You must manage your time to ensure that you
are able to complete all questions included on this exam in the time provided.

To answer the questions included in a case study, you will need to reference information
that is provided in the case study. Case studies might contain exhibits and other resources
that provide more information about the scenario that is described in the case study. Each
question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review
your answers and to make changes before you move to the next section of the exam. After
you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the
left pane to explore the content of the case study before you answer the questions. Clicking
these buttons displays information such as business requirements, existing environment,
and problem statements. If the case study has an All Information tab, note that the
information displayed is identical to the information displayed on the subsequent tabs.
When you are ready to answer a question, click the Question button to return to the
question.
Overview
General Overview
Woodgrove Bank is a financial services company that has a main office in the United
Kingdom.
Technical Requirements and Planned Changes
Planned Changes
Woodgrove Bank plans to implement the following project management changes:
Implement Azure DevOps for project tracking.
Centralize source code control in private GitHub repositories.
Implement Azure Pipelines for build pipelines and release pipelines.
Woodgrove Bank plans to implement the following changes to the identity environment:
Deploy an Azure AD tenant named woodgrovebank.com.
Sync the Active Directory domain to Azure AD.
Configure App1 to use a service principal.
Integrate GitHub with Azure AD.
Woodgrove Bank plans to implement the following changes to the core apps:

Migrate App1 to ASP.NET Core.
Integrate Azure Pipelines and the third-party build tool used to develop App2.Woodgrove Bank plans to implement the following changes to the DevOps environment:
Deploy App1 to Azure App Service.
Implement source control for the DB1 schema.
Migrate all the source code from TFS1 to GitHub.
Deploy App2 to an Azure virtual machine named VM1.
Merge the POC branch into the GitHub default branch.
Implement an Azure DevOps dashboard for stakeholders to monitor development
progress.
Technical Requirements
Woodgrove Bank identifies the following technical requirements:
The initial databases for new environments must contain both schema and
reference data.
An Azure Monitor alert for VM1 must be configured to meet the following
requirements:
The commit history of the POC branch must replace the history of the default
branch.
The Azure DevOps dashboard must display the metrics shown in the following
table. 

Access to Azure DevOps must be restricted to specific IP addresses.
Page load times for App1 must be captured and monitored.
Administrative effort must be minimized.

You need to meet the technical requirements for monitoring App1. What should you use?


A. Splunk


B. Azure Application Insights


C. Azure Advisor


D. App Service logs





B.
  Azure Application Insights

You need to the merge the POC branch into the main branch. The solution must meet the technical requirements. Which command should you run?


A. git push


B. git merge --squash


C. git merge --allow-unrelated-histories


D. git rebase





A.
  git push

You have a project in Azure DevOps.
You create the following YAML template named Template1.yml. steps:
- script: 9pm install
- script: yarn install
- script: 9pm run compile
You create the following pipeline named File1.yml.
parameters:
users steps:

- task: MyTask@1
- script: echo Done
You need to ensure that Template1.yaml runs before File1.yml.
How should you update File1.yml?


A. parameters: user steps: extends: template: template1.yml
- task: MyTask@1 - script: echo Done


B. template: template1.yml parameters: user steps:
- task: MyTask@1 - script: echo Done


C. extends: template: templatel.yml parameters: user steps:
- task: MyTask@1 - script: echo Done


D. parameters: user steps: - template: templatel.yml
- task: MyTask@1 - script: echo Done





C.
  extends: template: templatel.yml parameters: user steps:
- task: MyTask@1 - script: echo Done

Azure Pipelines offers two kinds of templates: includes and extends. Included templates behave like #include in C++: it's as if you paste the template's code right into the outer file, which references it. To continue the C++ metaphor, extends templates are more like inheritance: the template provides the outer structure of the pipeline and a set of places where the template consumer can make targeted alterations.

You need to configure Azure Pipelines to control App2 builds. Which authentication method should you use?


A. Windows NTLM


B. certificate


C. SAML


D. personal access token (PAT)





D.
  personal access token (PAT)

Explanation: Scenario: Deploy App2 to an Azure virtual machine named VM1. A personal access token (PAT) is used as an alternate password to authenticate into Azure DevOps.

You have an Azure key vault named KV1 and three web servers. You plan to deploy an app named App1 to the web server. You need to ensure that App1 can retrieve a secret from KV1. The solution must meet the following requirements:

  • Minimize the number of permission grants required
  • Follow the principle of least privilege.
What should you include in the solution?


A. role-based access control (RBAQ permissions


B. a system-assigned managed identity


C. a user-assigned managed identity


D. a service principal





B.
  a system-assigned managed identity


Page 18 out of 98 Pages
Previous