The latest updated Microsoft az-400 exam dumps and free az-400 exam practice questions and answers! Latest updates from Lead4Pass Microsoft az-400 Dumps PDF and az-400 Dumps VCE, Lead4Pass az-400 exam questions updated and answers corrected!
Get the full Microsoft az-400 dumps from https://www.leads4pass.com/az-400.html (VCE&PDF)
Latest az-400 PDF for free
Share the Microsoft az-400 Dumps PDF for free From Lead4pass az-400 Dumps part of the distraction collected on Google Drive shared by Lead4pass
https://drive.google.com/file/d/1I7-rC2pQuWP1ovNJ0Eu0FQjlhqJKWNAB/
Latest Lead4pass az-400 Youtube
Share the latest Microsoft az-400 exam practice questions and answers for free from Led4Pass Dumps viewed online by Youtube Videos
The latest updated Microsoft az-400 Exam Practice Questions and Answers Online Practice Test is free to share from Lead4Pass (Q1-Q13)
QUESTION 1
You need to recommend a Docker container build strategy that meets the following requirements:
1.
Minimizes image sizes
2.
Minimizes the security surface area of the final image What should you include in the recommendation?
A. multi-stage builds
B. PowerShell Desired State Configuration (DSC)
C. Docker Swarm
D. single-stage builds
Correct Answer: A
Multi-stage builds are a new feature requiring Docker 17.05 or higher on the daemon and client. Multistage builds are
useful to anyone who has struggled to optimize Dockerfiles while keeping them easy to read and maintain. Incorrect
Answers:
C: A swarm consists of multiple Docker hosts which run in swarm mode and act as managers (to manage membership
and delegation) and workers (which run swarm services). References: https://docs.docker.com/develop/developimages/multistage-build/
QUESTION 2
Your company is building a new solution in Java.
The company currently uses a SonarQube server to analyze the code of .NET solutions.
You need to analyze and monitor the code quality of the Java solution.
Which task types should you add to the build pipeline?
A. Chef
B. Gradle
C. Octopus
D. Gulp
Correct Answer: B
SonarQube is a set of static analyzers that can be used to identify areas of improvement in your code. It allows you to
analyze the technical debt in your project and keep track of it in the future. With Maven and Gradle build tasks, you can
run SonarQube analysis with minimal setup in a new or existing Azure DevOps Services build task.
References: https://docs.microsoft.com/en-us/azure/devops/java/sonarqube?view=azure-devops
QUESTION 3
HOTSPOT
You have a project in Azure DevOps that has three teams as shown in the Teams exhibit. (Click the Teams tab.)
You create a new dashboard named Dash1.
You configure the dashboard permissions for the Control project as shown in the Permissions exhibit. (Click the
Permissions tab.)
All other permissions have the default values set.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/devops/report/dashboards/charts-dashboard-permissions-access
QUESTION 4
DRAG DROP
You need to recommend a solution for deploying charts by using Helm and Tiller to Azure Kubernetes Service (AKS) in
an RBAC-enabled cluster.
Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from
the list of commands to the answer area and arrange them in the correct order.
Select and Place:
Step 1: Kubectl create
You can add a service account to Tiller using the –service-account flag while you’re configuring Helm (step 2 below).
As a prerequisite, you’ll have to create a role binding which specifies a role and a service account name that have
been set up in advance.
Example: Service account with the cluster-admin role
$ kubectl create -f rbac-config.YAML
service account “tiller” created
cluster role binding “tiller” created
$ helm init –service-account tiller
Step 2: helm init
To deploy a basic Tiller into an AKS cluster, use the helm init command.
Step 3: helm install
To install charts with Helm, use the helm install command and specify the name of the chart to install.
References:
https://docs.microsoft.com/en-us/azure/aks/kubernetes-helm
https://docs.helm.sh/using_helm/#tiller-namespaces-and-rbac
QUESTION 5
You have a GitHub repository.
You create a new repository in Azure DevOps.
You need to recommend a procedure to clone the repository from GitHub to Azure DevOps.
What should you recommend?
A. Create a pull request.
B. Create a webhook.
C. Create a service connection for GitHub.
D. From Import a Git repository, click Import.
E. Create a personal access token in Azure DevOps.
Correct Answer: D
You can import an existing Git repo from GitHub, Bitbucket, GitLab, or other location into a new or empty existing repo
in your project in Azure DevOps. Import into a new repo
1.
Select Repos, Files.
2.
From the repo drop-down, select Import repository.
3.
If the source repo is publicly available, just enter the clone URL of the source repository and a name for your new Git
repository.
References: https://docs.microsoft.com/en-us/azure/devops/repos/git/import-git-repository?view=azure-devops
QUESTION 6
You need to implement the code flow strategy for Project2 in Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
Select and Place:
Scenario: Implement a code flow strategy for Project2 that will:
Enable Team2 to submit pull requests for Project2.
Enable Team2 to work independently on changes to a copy of Project2.
Ensure that any intermediary changes performed by Team2 on a copy of Project2 will be subject to the same
restrictions as the ones defined in the building policy of Project2.
Step 1: Create a repository Step 2: Add a build policy for the master branch Step 3: Create a branch Each branch must
have a defined policy about how to integrate code into this branch. References:
https://docs.microsoft.com/en-us/azure/devops/learn/devops-at-microsoft/release-flow
QUESTION 7
To resolve the current technical issue, what should you do to the Register-AzureRmAutomationDscNode command?
A. Change the value of the ConfigurationMode parameter.
B. Replace the Register-AzureRmAutomationDscNode cmdlet with Register-AzureRmAutomationScheduledRunbook
C. Add the AllowModuleOverwrite parameter.
D. Add the DefaultProfile parameter.
Correct Answer: A
Change the ConfigurationMode parameter from ApplyOnly to ApplyAndAutocorrect.
The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State
Configuration (DSC) node in an Azure Automation account.
Scenario: Current Technical Issue
The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure
Automation State Configuration fails to correct the configurations.
Azure Automation State Configuration nodes are registered by using the following command.
QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear on the review screen.
You have an approval process that contains a condition. The condition requires that releases be approved by a team
leader before they are deployed.
You have a policy stating that approvals must occur within eight hours.
You discover that deployment fails if the approvals take longer than two hours.
You need to ensure that the deployments only fail if the approvals take longer than eight hours.
Solution: From Pre-deployment conditions, you modify the Time between re-evaluation of gates option.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Gates allow automatic collection of health signals from external services and then promote the release when all the
signals are successful at the same time or stop the deployment on timeout. Typically, gates are used in connection with
incident management, problem management, change management, monitoring, and external approval systems.
Approvals and gates give you additional control over the start and completion of the deployment pipeline. Each stage in
a release pipeline can be configured with pre-deployment and post-deployment conditions that can include waiting for
users to manually approve or reject deployments, and checking with other automated systems until specific conditions
are verified.
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/approvals/gates
QUESTION 9
You have an Azure DevOps project that uses many package feeds. You need to simplify the project by using a single
feed that stores packages produced by your company and packages consumed from remote feeds. The solution must
support public feeds and authenticated feeds.
What should you enable in DevOps?
A. Universal Packages
B. views in Azure Artifacts
C. upstream sources
D. a symbol server
Correct Answer: C
QUESTION 10
You have an Azure DevOps organization named Contoso that contains a project named Project1.
You provision an Azure key vault named Keyvault1.
You need to reference Keyvault1 secrets in a build pipeline of Project1.
What should you do first?
A. Create a XAML build service.
B. Create a variable group in Project1.
C. Add a secure file to Project1.
D. Configure the security policy of Contoso.
Correct Answer: D
Before this will work, the build needs permission to access the Azure Key Vault. This can be added to the Azure Portal.
Open the Access Policies in the Key Vault and add a new one. Choose the principle used in the DevOps build.
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/release/azure-key-vault
QUESTION 11
You plan to create an image that will contain a .NET Core application.
You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)
You need to ensure that the image is as small as possible when the image is built. Which line should you modify in the
file?
A. 1
B. 3
C. 4
D. 7
Correct Answer: A
Multi-stage builds (in Docker 17.05 or higher) allow you to drastically reduce the size of your final image, without
struggling to reduce the number of intermediate layers and files.
With multi-stage builds, you use multiple FROM statements in your Dockerfile. Each FROM instruction can use a
different base, and each of them begins a new stage of the build. You can selectively copy artifacts from one stage to
another, leaving behind everything you don\\’t want in the final image.
References: https://docs.docker.com/develop/develop-images/multistage-build/#use-multi-stage-builds
QUESTION 12
SIMULATION
You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault
named az400-9940427-kv1 by using a system managed identity.
The solution must use the principle of least privilege.
To complete this task, sign in to the Microsoft Azure portal.
Correct Answer: See solution below.
1.
In the Azure portal navigate to the az400-9940427-main app.
2.
Scroll down to the Settings group in the left navigation.
3.
Select Managed identity.
4.
Within the System assigned tab, switch Status to On. Click Save.
References: https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity
QUESTION 13
DRAG DROP
Your company plans to deploy an application to the following endpoints:
1.
Ten virtual machines hosted in Azure
2.
Ten virtual machines hosted in an on-premises data center environment
All the virtual machines have the Azure Pipelines agent.
You need to implement a release strategy for deploying the application to the endpoints.
What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate
components to the correct endpoints. Each component may be used once, more than once, or not at all. You may need
to drag
the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Correct Answer:
Box 1: A deployment group
When authoring an Azure Pipelines or TFS Release pipeline, you can specify the deployment targets for a job using a
deployment group.
If the target machines are Azure VMs, you can quickly and easily prepare them by installing the Azure Pipelines Agent
Azure VM extension on each of the VMs, or by using the Azure Resource Group Deployment task in your release
pipeline
to create a deployment group dynamically.
Box 2: A deployment group
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups
Fulldumps shares the latest updated Microsoft az-400 exam exercise questions, az-400 dumps pdf, and Youtube video learning for free.
All exam questions and answers come from the Lead4pass exam dumps shared part! Lead4pass updates throughout the year and shares a portion of your exam questions for free to help you understand the exam content and enhance your exam experience!
Get the full Microsoft az-400 exam readiness dumps questions at https://www.leads4pass.com/az-400.html (pdf&vce)
ps.
Get free Microsoft az-400 dumps PDF online: https://drive.google.com/file/d/1I7-rC2pQuWP1ovNJ0Eu0FQjlhqJKWNAB/
