HOTSPOT
-
You use Git for source control.
You need to optimize the performance of a repository. The solution must meet the following requirements:
• Permanently remove all items referenced only in the reflog.
• Remove history that is NOT in any current branch.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: reflog
gc
now
Explanation: Use `git reflog expire --expire-unreachable=now --all` to expire unreachable reflog entries, then `git gc --prune=now` to immediately prune unreachable objects not referenced by current branches.
Question 155
DRAG DROP
-
You have an app named App1. You have a Log Analytics workspace named Workspace1 that contains two tables named Events and Logs. App1 manages events in multiple locations and writes logs to Workspace1.
You need to query Workspace1 for all log entries related to Asia that occurred during the last two days.
In which order should you arrange the query statements? To answer, move all statements from the list of statements to the answer area and arrange them in the correct order.
Show Answer
Correct Answer: Logs
| where timestamp > ago(2d)
| join ( Events
| where continent == 'Asia'
) on RequestId
Explanation: Start from the Logs table, filter by the last two days for efficiency, then join to Events and filter the Events rows to Asia before joining on RequestId.
Question 156
You have a project in Azure DevOps named Project1.
You implement a Continuous Integration/Continuous Deployment (CI/CD) pipeline that uses PowerShell Desired State Configuration (DSC) to configure the application infrastructure.
You need to perform a unit test and an integration test of the configuration before Project1 is deployed.
What should you use?
A. the PSScriptAnalyzer tool
B. the Pester test framework
C. the PSCodeHealth module
D. the Test-DscConfiguration cmdlet
Show Answer
Correct Answer: B
Explanation: Pester is the standard PowerShell testing framework used to write and run unit and integration tests, including for Desired State Configuration (DSC) configurations, making it well suited for CI/CD validation before deployment. PSScriptAnalyzer performs static code analysis, PSCodeHealth measures code quality/coverage, and Test-DscConfiguration checks whether a node is currently in the desired state rather than providing a unit/integration testing framework.
Question 157
HOTSPOT -
You have a project in Azure DevOps that contains a release pipeline. The pipeline contains two stages named QA and Prod. QA deploys code to an Azure web app named webapp1. Prod deploys code to an Azure web app named webapp2.
You need to ensure that code deployments to webapp2 are blocked if Azure Application Insights generates Failed requests alerts following the deployment of new code to webapp1.
What should you do for each stage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: QA: Add a task to configure alert rules in Application Insights.
Prod: Configure a gate in the pre-deployment conditions.
Explanation: Configure Application Insights alert rules after deploying to QA so failed request alerts are generated. Use a pre-deployment gate on the Prod stage that queries those alerts and blocks deployment if the gate fails.
Question 158
You have a project in Azure DevOps named Project1.
You need to ensure that all new pipelines in Project1 execute three specific tasks during pipeline execution.
What should you create?
A. a task group
B. a JSON template
C. a YAML template
D. a PowerShell task
Show Answer
Correct Answer: C
Explanation: For modern Azure DevOps pipelines, reusable sets of tasks are defined with YAML templates. A YAML template can be referenced by new YAML pipelines so the same three tasks are executed consistently. Task groups are a legacy feature primarily for classic pipelines, JSON templates are not used for Azure Pipelines, and a PowerShell task is a single task rather than a reusable pipeline definition.
Question 159
DRAG DROP
-
You use Exabeam Fusion SIEM and the Azure cloud platform.
You need to integrate Exabeam and Azure. The solution must use OAuth authentication.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Show Answer
Correct Answer: 1. Register an Exabeam application in Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra.
2. Create a client secret.
3. Configure the Exabeam Azure cloud connector.
Explanation: For OAuth, you must first register the application, then generate a client secret for authentication, and finally configure the Exabeam connector with the app registration details. Uploading a certificate is for certificate-based authentication, not OAuth.
Question 160
You plan to create a GitHub workflow that will use GitHub Actions. The actions will require a 256-KB secret.
You need to recommend a solution to store and encrypt the secret. The secret value must be accessible only to the workflow. The solution must minimize administrative effort
What should you recommend?
A. Store the secret in the organization-level GitHub secrets.
B. Store the secret in the repository-level GitHub secrets.
C. Encrypt the secret value and store the value in the repository. Store the decryption key in the repository-level GitHub secrets.
D. Encrypt the secret value and store the value in the repository. Store the decryption key in the organization-level GitHub secrets.
Show Answer
Correct Answer: C
Explanation: GitHub Actions secrets have a size limit (well below 256 KB). For a 256-KB secret, GitHub recommends encrypting the large secret yourself, storing the encrypted file in the repository, and storing only the decryption passphrase/key as a GitHub secret. Because the secret is only needed by a single repository workflow and should minimize administration, a repository-level secret is more appropriate than an organization-level secret.
Question 162
You have an Azure subscription that contains the resources shown in the following table.
Project produces npm packages that are published to Feed1. Feed1 is consumed by multiple projects.
You need to ensure that only tested packages are available for consumption. The solution must minimize development effort.
What should you do?
A. Create a feed view named @release and set @release as the default view. After the npm packages test successfully, configure a release pipeline that promotes a package to the @release view.
B. Create a feed view named @release and set @release as the default view. After the npm packages test successfully, configure a release pipeline that tags the packages as release.
C. Create a feed view named @default. After the npm packages test successfully, configure a release pipeline that tags the packages as release.
D. Create a feed view named @default. After the npm packages test successfully, configure a release pipeline that promotes a package to the @default view.
Show Answer
Correct Answer: A
Explanation: Azure Artifacts feed views are designed to separate packages by release stage. Publish new packages to the default view, then after validation/testing, promote the tested package version to a @release view. Consumers use the @release view so only validated packages are available. Tags are metadata and do not restrict package visibility, so they do not meet the requirement. Setting @release as the default consumer view minimizes development effort because consumers automatically receive only promoted packages.
Sources:
https://learn.microsoft.com/en-us/azure/devops/artifacts/get-started-npm?view=azure-devops
Question 163
DRAG DROP
-
You have an Azure Repos Git repository named repo1.
You need to ensure that you can authenticate to repo1 by using SSH.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Show Answer
Correct Answer: Create SSH keys by using ssh-keygen
Sign in to Azure DevOps
Add the SSH public key
Clone repo1
Explanation: Generate an SSH key pair, sign in to Azure DevOps, upload the public key to your user settings, then clone the repository using the SSH URL. The private key stays on the client; it is not uploaded or saved in the repository.
Question 164
You have a GitHub repository that contains multiple versions of an Azure Pipelines template.
You plan to deploy multiple pipelines that will use a template stored in the repository.
You need to ensure that you use a fixed version of the template.
What should you use to reference which version of the template repository to use?
A. the serial
B. the SHA-based hashes
C. the runner
D. the branch
Show Answer
Correct Answer: D
Explanation: Azure Pipelines documentation recommends pinning the template repository to a ref to use a fixed version. Refs can be branches or tags; among the provided options, branch is the correct choice because the pipeline references a ref via the `ref` field. Although pinning to a specific SHA is supported, Microsoft's guidance for fixed template versions is to pin to a ref (typically a release branch or tag).
Sources:
https://learn.microsoft.com/en-us/azure/devops/pipelines/process/templates?view=azure-devops
$19
Get all 534 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.