Go Back on AZ-400 Exam
Available in 1, 3, 6 and 12 Months Free Updates Plans
PDF: $15 $60

Test Engine: $20 $80

PDF + Engine: $25 $99

AZ-400 Practice Test


Page 38 out of 98 Pages

Topic 4: Mix Questions Set

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You manage a project in Azure DevOps. You need to prevent the configuration of the project from changing over time. Solution: Perform a Subscription Health scan when packages are created. Does this meet the goal?


A. Yes


B. No





B.
  No

Explanation: Instead implement Continuous Assurance for the project. Note: The Subscription Security health check features in AzSK contains a set of scripts that examines a subscription and flags off security issues, misconfigurations or obsolete artifacts/settings which can put your subscription at higher risk.

You use Azure Pipelines to manage project builds and deployments. You plan to use Azure Pipelines for Microsoft Teams to notify the legal team when a new build is ready for release. You need to configure the Organization Settings in Azure DevOps to support Azure Pipelines for Microsoft Teams. What should you turn on?


A. Azure Active Directory Conditional Access Policy Validation


B. Alternate authentication credentials


C. Third-party application access via OAuth


D. SSH authentication





C.
  Third-party application access via OAuth

Explanation: The Azure Pipelines app uses the OAuth authentication protocol, and requires Third-party application access via OAuth for the organization to be enabled. To enable this setting, navigate to Organization Settings > Security > Policies, and set the Third-party application access via OAuth for the organization setting to On.

Unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen. You integrate a cloud-hosted Jenkins server and a new Azure DevOps deployment. You need Azure DevOps to send a notification to Jenkins when a developer commits changes to a branch in Azure Repos. Solution: You create a service hook subscription that uses the build completed event Does this meet the goal?


A. Yes


B. No





B.
  No

Explanation: You can create a service hook for Azure DevOps Services and TFS with Jenkins. However, the service subscription event should use the code pushed event, is triggered when the code is pushed to a Git repository.

Your company deploys applications m Docket containers. You want to detect known exploits in the Docket images used to provision the Docker containers. You need to integrate image scanning into the application lifecycle. The solution must expose the exploits as early as possible during the application lifecycle. What should you configure?


A. a task executed in the continuous deployment pipeline and a scheduled task against a running production container.


B. a task executed in the continuous integration pipeline and a scheduled task that analyzes the production container.


C. a task executed in the continuous integration pipeline and a scheduled task that analyzes the image registry


D. manual tasks performed during the planning phase and the deployment phase





C.
  a task executed in the continuous integration pipeline and a scheduled task that analyzes the image registry

Explanation: You can use the Docker task to sign into ACR and then use a subsequent script to pull an image and scan the container image for vulnerabilities. Use the docker task in a build or release pipeline. This task can be used with Docker or Azure Container registry.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. The lead developer at your company reports that adding new application features takes longer than expected due to a large accumulated technical debt. You need to recommend changes to reduce the accumulated technical debt. Solution: You recommend increasing the code duplication. Does this meet the goal?


A. Yes


B. No





B.
  No


Page 38 out of 98 Pages
Previous