SIMULATION -
You need to create and configure an Azure Storage account named az400lod123456789stor in a resource group named RG1lod123456789 to store the boot diagnostics for a virtual machine named VM1.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: Create a Storage account named az400lod123456789stor in resource group RG1lod123456789.
Open VM1 → Help + troubleshooting → Boot diagnostics → Settings.
Enable Boot diagnostics with a custom storage account.
Select az400lod123456789stor and save (restart VM if prompted).
Explanation: Boot diagnostics requires a storage account to store logs and screenshots. The task is completed by first creating the specified storage account in the given resource group, then enabling boot diagnostics on VM1 and associating it with that storage account through the Azure portal.
Question 200
SIMULATION -
You need to ensure that the https://contoso.com/statushook webhook is called every time a repository named az400123456789acr1 receives a new version of an image named dotnetapp.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: Create or configure an Azure Container Registry webhook.
Registry: az400123456789acr1
Service URI: https://contoso.com/statushook
Action: Push
Scope: dotnetapp:*
Explanation: An Azure Container Registry webhook with the Push action ensures the endpoint is called whenever a new image version is pushed. Setting the scope to dotnetapp:* limits triggers to pushes of any tag for the dotnetapp image in the registry.
Question 201
SIMULATION -
You need to ensure that an Azure web app named az400-123456789-main can retrieve secrets from an Azure key vault named az400-123456789-kv1 by using a system managed identity.
The solution must use the principle of least privilege.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: Enable the system-assigned managed identity on the web app az400-123456789-main.
Grant the managed identity access to secrets in Key Vault az400-123456789-kv1 using least privilege (Key Vault Secrets User role or Get permission only).
Explanation: The web app needs a system-assigned managed identity to authenticate to Azure AD. Enabling the identity creates a service principal for the app. To retrieve secrets, that identity must be authorized on the Key Vault. Using RBAC, assign the Key Vault Secrets User role (or equivalent access policy with only Secret:Get) to the web app’s managed identity, which satisfies the principle of least privilege.
Question 202
SIMULATION -
You need to configure a virtual machine named VM1 to securely access stored secrets in an Azure Key Vault named az400-123456789-kv.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: Enable system-assigned managed identity on VM1.
Grant the VM1 managed identity access to the Key Vault.
Explanation: Turn on the system-assigned identity for VM1. Then, in Key Vault az400-123456789-kv, assign permissions to that managed identity (via Access policies or RBAC, e.g., Secrets Get/List) so the VM can securely access stored secrets without credentials.
Question 203
You have a private distribution group that contains provisioned and unprovisioned devices.
You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.
What should you do?
A. Register the devices on the Apple Developer portal.
B. Add the device owner to the organization in App Center.
C. Create an unsigned build.
D. Add the device owner to the collaborators group.
Show Answer
Correct Answer: A
Explanation: For iOS app distribution via App Center to a private distribution group, all target devices must be provisioned with Apple. Unprovisioned devices cannot install the app until their device IDs are registered on the Apple Developer portal and included in the provisioning profile. Therefore, registering the devices is required.
Question 204
You have a private distribution group that contains provisioned and unprovisioned devices.
You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.
What should you do?
A. Select Register devices and sign my app.
B. Create an active subscription in App Center Test.
C. Add the device owner to the organization in App Center.
D. Create an unsigned build.
Show Answer
Correct Answer: A
Explanation: To distribute an iOS app to a private distribution group that includes both provisioned and unprovisioned devices, App Center must automatically handle device registration and provisioning profile updates. Selecting **Register devices and sign my app** enables App Center to register unprovisioned devices with the Apple Developer account and re-sign the app so it can be installed on all devices in the group. The other options do not address iOS device provisioning requirements.
Question 205
HOTSPOT -
Your company uses GitHub for source control. GitHub repositories store source code and store process documentation. The process documentation is saved as
Microsoft Word documents that contain simple flow charts stored as .bmp files.
You need to optimize the integration and versioning of the process documentation and the flow charts. The solution must meet the following requirements:
✑ Store documents as plain text.
✑ Minimize the number of files that must be maintained.
✑ Simplify the modification, merging, and reuse of flow charts.
Simplify the modification, merging, and reuse of documents.
Hot Area:
Show Answer
Correct Answer: Convert the .docx files to:
Markdown (.md)
Convert the flow charts to:
Mermaid diagrams
Explanation: Markdown stores documents as plain text, integrates natively with GitHub, reduces file count, and simplifies diffing, merging, and reuse. Mermaid defines flow charts as text within Markdown, enabling easy modification, versioning, and reuse compared to binary image formats.
Question 206
SIMULATION -
You need to create an instance of Azure Application Insights named az400-123456789-main and configure the instance to receive telemetry data from an Azure web app named az400-123456789-main.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: 1. In Azure Portal, create an Application Insights resource named az400-123456789-main.
2. Open the Web App az400-123456789-main.
3. Go to Settings > Application Insights.
4. Enable Application Insights and select the existing az400-123456789-main resource.
5. Apply the changes.
Explanation: Application Insights can be created and linked directly from the Azure Portal. Enabling it on the Web App automatically configures telemetry without requiring Visual Studio or code changes.
Question 207
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:
✑ The build must access an on-premises dependency management system.
✑ The build outputs must be stored as Server artifacts in Azure DevOps.
✑ The source code must be stored in a Git repository in Azure DevOps.
Solution: Configure the build pipeline to use a Microsoft-hosted agent pool running the Windows Server 2019 with Visual Studio 2019 image. Include the Java Tool
Installer task in the build pipeline.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: The build must access an on-premises dependency management system, which requires network connectivity to on-prem resources. Microsoft-hosted agents cannot access on-premises networks. This scenario requires a self-hosted agent. Although the pipeline can publish Server artifacts and use Azure DevOps Git, using a Microsoft-hosted Windows Server 2019 agent with Java Tool Installer does not meet the on-premises access requirement.
Question 208
DRAG DROP -
You have an app named App1. You have a Log Analytics workspace named Workspace1 that contains a table named AppEvents. App1 writes logs to
Workspace1.
You need to query the AppEvents table. The solution must meet the following requirements:
✑ Only query rows for a column named Name that starts with the following text: "Clicked Create New Ticket."
✑ Calculate the number of daily clicks per user.
✑ Return the top 10 users based on their number of clicks for any day.
✑ Sort the results based on the highest number of clicks.
✑ Ignore any users who have less than three daily clicks.
In which order should you arrange the query statements? To answer, move all statements from the list of statements to the answer area and arrange them in the correct order.
Select and Place:
Show Answer
Correct Answer: AppEvents
| where Name startswith "Clicked Create New Ticket"
| summarize NumberOfClicks = count() by bin(TimeGenerated, 1d), UserId
| where NumberOfClicks >= 3
| top 10 by NumberOfClicks desc
Explanation: Start from the AppEvents table, filter only relevant events by Name, then aggregate to calculate daily clicks per user. After the NumberOfClicks column is created by summarize, filter out users with fewer than three daily clicks, and finally return the top 10 users ordered by highest click count.
$19
Get all 531 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
