HOTSPOT
-
You have a project in Azure DevOps that includes two users named User1 and User2.
You plan to use Azure Monitor to manage logs.
You need to ensure that the users can perform the actions shown in following the table.
The solution must follow the principle of least privilege.
Which role should you assign to each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: User1 must create private monitoring dashboards and query Log Analytics data, which requires write access to Azure Monitor resources—provided by Monitoring Contributor. User2 only needs to view autoscale settings and alert activities without making changes, which is covered by the read-only Monitoring Reader role.
Question 94
You have an app named App1 that uses Application Insights to monitor application performance.
You need to analyze how often a page in App1 is accessed.
Which pane in Application Insights should you use?
A. Events
B. Sessions
C. Impact
D. Users
Show Answer
Correct Answer: A
Explanation: To analyze how often a page is accessed, you need page view counts. In Application Insights, page views are tracked and analyzed under the **Events** pane, which answers questions like how often certain pages and features are used. Sessions and Users focus on aggregation by session or user, and Impact focuses on problems, not usage frequency.
Question 95
You have an Azure subscription that contains a Log Analytics workspace named WS1 and a virtual machine named VM1.
You need to install the Microsoft Enterprise Cloud Monitoring extension on VM1.
Which two values are required to configure the extension? Each correct answer presents part of the solution.
NOTE: Each correct answer is worth one point.
A. the secret key of WS1
B. the ID of the subscription
C. the system-assigned managed identity of VM1
D. the ID of WS1
E. the resource ID of VM1
Show Answer
Correct Answer: A, D
Explanation: The Microsoft Enterprise Cloud Monitoring (Log Analytics/MMA) extension must be configured to connect the VM to a specific Log Analytics workspace. This requires the Workspace ID to identify the workspace and the Workspace Key (secret key) to authenticate the agent. Subscription ID, VM resource ID, or managed identity are not required for configuring this extension.
Question 96
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure pipeline that is used to deploy a web app. The pipeline includes a test suite named TestSuite1. TestSuite1 is used to validate the operations of the web app.
TestSuite1 fails intermittently.
You identify that the failures are unrelated to changes in the source code and execution environment.
You need to minimize troubleshooting effort for the TestSuite1 failures.
Solution: You enable flaky test management.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: A
Explanation: Flaky test management in Azure Pipelines is designed to identify and handle intermittently failing tests whose failures are not caused by code or environment changes. Enabling it reduces troubleshooting effort by automatically detecting, marking, and optionally mitigating flaky tests, which directly meets the stated goal.
Question 97
You have an Azure subscription that contains an Azure pipeline named Pipeline1 and a GitHub repository named Repo1. Repo1 contains Bicep modules. Pipeline1 deploys Azure resources by using the Bicep modules.
You need to ensure that all releases comply with Azure Policy before they are deployed to production.
What should you do?
A. To Pipeline1, add a step that runs a What if deployment before the deployment step.
B. Configure a deployment gate for Pipeline1 that uses Azure Automation to run a What If deployment.
C. Create an Azure DevOps build that runs on the creation of a pull request and assesses the code for compliance.
D. Configure a deployment gate for Pipeline1 and include the Azure DevOps Security and compliance assessment task.
Show Answer
Correct Answer: C
Explanation: To ensure Azure Policy compliance before anything reaches production, the validation must happen before the release pipeline executes. Creating an Azure DevOps build that runs on pull request creation allows you to analyze the Bicep code (for example, using Azure Policy, PSRule, or similar compliance checks) and block non-compliant changes from being merged. Deployment gates and What-If deployments do not enforce Azure Policy compliance, and the Azure DevOps Security and compliance assessment task is not designed to validate Azure Policy against Bicep deployments.
Question 98
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure pipeline that is used to deploy a web app. The pipeline includes a test suite named TestSuite1. TestSuite1 is used to validate the operations of the web app.
TestSuite1 fails intermittently.
You identify that the failures are unrelated to changes in the source code and execution environment.
You need to minimize troubleshooting effort for the TestSuite1 failures.
Solution: You implement the Test Results Trend widget.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: The Test Results Trend widget only visualizes pass/fail trends over time and does not reduce or manage intermittent (flaky) test failures. To minimize troubleshooting effort for unrelated intermittent failures, flaky test management (such as identifying, quarantining, or rerunning flaky tests) is required, not trend visualization.
Question 99
You manage projects by using Azure Boards.
You have a current work item name itemA that is dependant on a work item named itemB.
You need to define the dependency for itemA.
What should you do in the web portal for Azure DevOps?
A. From itemA, open the Links tab, and then select Add link. Set Link type to Related and add the ID of itemB.
B. From Backlogs, open the context menu, select Add link, and then select itemA. Set Link type to Successor and add the ID of item
C. From itemA, open the Links tab, and then select Add link. Set Link type to References and add the ID of itemB.
D. From Queries, open the context menu, select Add link, and then select Existing Item. Set Link type to Affected By and add the ID of itemB.
Show Answer
Correct Answer: B
Explanation: In Azure Boards, work item dependencies are defined using the Predecessor/Successor link types. If itemA depends on itemB, then itemA is the successor of itemB. Option B correctly uses the Successor link type to establish this dependency, whereas the other options use non-dependency link types such as Related, References, or Affected By.
Question 101
You manage projects by using Azure Boards.
You have a current work item name itemA that is dependant on a work item named itemB.
You need to define the dependency for itemA.
What should you do in the web portal for Azure DevOps?
A. Add a Parent link to the user story of item
B. From Backlogs, open the context menu, select Add link, and then select itemA. Set Link type to Successor and add the ID of item
C. From itemA, open the Links tab, and then select Add link. Set Link type to References and add the ID of itemB.
D. From Backlogs, open he context menu, select Add link, and then select itemA. Set Link type to References and add the ID of itemB.
Show Answer
Correct Answer: B
Explanation: In Azure Boards, dependencies between work items are modeled using Predecessor/Successor links. Since itemA depends on itemB, itemA must be the Successor and itemB the Predecessor. From the Backlogs view, you add a link to itemA, choose the Successor link type, and specify the ID of itemB. Other link types like Parent or References do not define a dependency.
Question 102
DRAG DROP
-
You have a large repository named Repo1 that contains a directory named directory1.
You plan to modify files in directory1.
You need to create a clone of Repo1. The solution must minimize the amount of transferred data.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: scalar clone https://dev.azure.com/organisation/_git/Repo1
git sparse-checkout set directory1
Explanation: Scalar is optimized for large repositories and minimizes data transfer. Sparse checkout limits the working tree to directory1 so only required files are downloaded.
Question 103
You have an Azure key vault named KV1 and three web servers.
You plan to deploy an app named App1 to the web servers.
You need to ensure that App1 can retrieve a secret from KV1. The solution must meet the following requirements:
• Minimize the number of permission grants required.
• Follow the principle of least privilege.
What should you include in the solution?
A. role-based access control (RBAC) permission
B. a system-assigned managed identity
C. a user-assigned managed identity
D. a service principal
Show Answer
Correct Answer: C
Explanation: The app runs on three web servers and needs access to the same Key Vault secret. To minimize permission grants, all servers should share a single identity that is granted access once to KV1. A user-assigned managed identity can be attached to multiple servers and granted only the required Key Vault permissions, satisfying least privilege. System-assigned managed identities would require separate permission grants per server, and service principals or generic RBAC are less streamlined for this scenario.
$19
Get all 531 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
