AZ-400 Exam Questions & Answers
Designing and Implementing Microsoft DevOps Solutions • Microsoft
100% money-back guarantee
Sample AZ-400 Questions
Practice with real exam-style questions, each with the verified correct answer and explanation.
SIMULATION
Task 7
You need to prepare a network security group (NSG) named az400 38443478 nsgl to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet
To prepare a Network Security Group (NSG) namedaz400-38443478-nsg1for hosting an Azure DevOps pipeline agent, while allowing only the required outbound port for Azure DevOps and denying all other inbound and outbound access to the Internet, follow these steps:
Create the NSG:
Navigate to the Azure Portal.
Go toNetwork Security Groupsand click on+ Create.
Fill in the details, including the nameaz400-38443478-nsg1, and create the NSG.
ConfigureOutbound Security Rules:
Once the NSG is created, go to its settings.
Navigate toOutbound security rules.
Click on+ Addto create a new rule.
Set theDestination port rangesto443, which is the required port for Azure DevOps12.
Set theProtocoltoTCP.
Set theActiontoAllow.
Assign aPrioritynumber (e.g.,100) that does not conflict with existing rules.
Provide a meaningfulNamefor the rule (e.g.,AllowAzureDevOps).
Configure Default Rules to Deny All Other Traffic:
In the sameOutbound security rulessection, edit the default rule to deny alltraffic.
Change theActiontoDenyfor the rule with the lowest priority (highest number).
Ensure that this rule applies to all protocols, source and destination IP ranges, and port ranges.
Associate the NSG with the Appropriate Resource:
Associate the NSGwith the subnet or network interface of the virtual machine or resource where the Azure DevOps pipeline agent will be hosted.
By following these steps, you will ensure that the Azure DevOps pipeline agent can communicate with Azure DevOps services over the required port while blocking all other inbound and outbound Internet access, adhering to the principle of least privilege and security best practices.
Your company hosts a web application in Azure. The company uses Azure Pipelines for the build and release management of the application.
Stakeholders report that the past few releases have negatively affected system performance.
You configure alerts in Azure Monitor.
You need to ensure that new releases are only deployed to production if the releases meet defined
performance baseline criteria in the staging environment first.
What should you use to prevent the deployment of releases that fall to meet the performance baseline?
Scenarios and use cases for gates include:
Quality validation. Query metrics from tests on the build artifacts such as pass rate or code coverage and deploy only if they are within required thresholds.
Use Quality Gates to integrate monitoring into your pre-deployment or post-deployment. This ensures that you are meeting the key health/performance metrics (KPIs) as your applications move from dev to production and any differences in the infrastructure environment or scale is not negatively impacting your KPIs.
Note: Gates allow automatic collection of health signals from external services, and then promote the release when all the signals are successful at the same time or stop the deployment on timeout. Typically, gates are used in connection with incident management, problem management, change management, monitoring, and external approval systems.
https://docs.microsoft.com/en-us/azure/azure-monitor/continuous-monitoring
https://docs.microsoft.com/en-us/azure/devops/pipelines/release/approvals/gates?view=azure-devops
You have an Azure subscription.
You create two Bicep templates named Template1 and Template2 that will be used to create a virtual machine and a website.
You need to create a template named Template3 that will reuse logic from Template1 and Template2.
What should you define first?
You manage projects by using Azure Boards.
You have a current work item name item A that is dependent on a work item named item3.
You need to define the dependency for item A.
What should you do in the web portal for Azure DevOps?
You have an Azure subscription that includes an app named App1.
You have an Azure DevOps project that contains two environments named Staging and Production.
You use Azure Pipelines to deploy App1.
You need to validate the performance of App1 in the Staging environment before it is deployed to Production. The solution must minimize administrative effort.
What should you do in the Azure DevOps project?
Get access to all 628 verified questions with detailed answers.
Unlock All AZ-400 Questions