SIMULATION -
You plan to implement a CI/CD strategy for an Azure Web App named az400-123456789-main.
You need to configure a staging environment for az400-123456789-main.
To complete this task, sign in to the Microsoft Azure portal.
Explanation: A staging environment for an Azure Web App is created by adding a deployment slot, typically named 'staging', optionally cloning the production configuration.
Question 196
SIMULATION -
You need to configure an Azure web app named az400-123456789-main to contain an environmental variable named `MAX_ITEMS`. The environmental variable must have a value of 50.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: Azure portal → App Service: az400-123456789-main → Settings → Environment variables → Add
Name: MAX_ITEMS
Value: 50
Save and apply/restart if prompted.
Explanation: App Service environment variables are configured under Environment variables (Application settings). Add the key MAX_ITEMS with value 50 and save the changes.
Question 197
SIMULATION -
You need to create and configure an Azure Storage account named az400lod123456789stor in a resource group named RG1lod123456789 to store the boot diagnostics for a virtual machine named VM1.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: Create storage account: az400lod123456789stor in resource group RG1lod123456789.
Open VM1 → Boot diagnostics → Enable with custom storage account → Select az400lod123456789stor → Save.
Explanation: The task requires creating the specified storage account and configuring VM1 boot diagnostics to use that custom storage account.
Question 198
SIMULATION -
You plan to add a new web farm that will be published by using an IP address of 10.0.0.5.
You need to allow traffic from the web farm to an Azure Database for MySQL server named az400-123456789-mysql.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: On az400-123456789-mysql, configure Networking/Security to allow the web farm by adding the VNet/Subnet with a Microsoft.Sql/MySQL service endpoint (not a firewall IP rule for 10.0.0.5).
Explanation: The web farm uses a private IP. Azure Database for MySQL firewall rules accept public IP ranges; private connectivity requires allowing the virtual network/subnet via the service endpoint configuration.
Question 199
SIMULATION -
You need to ensure that the https://contoso.com/statushook webhook is called every time a repository named az400123456789acr1 receives a new version of an image named dotnetapp.
To complete this task, sign in to the Microsoft Azure portal.
Explanation: Create an ACR webhook that triggers on push events and limit the scope to the dotnetapp repository (all tags) so each new image version invokes the specified endpoint.
Question 200
SIMULATION -
You need to ensure that an Azure web app named az400-123456789-main can retrieve secrets from an Azure key vault named az400-123456789-kv1 by using a system managed identity.
The solution must use the principle of least privilege.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: Enable the system-assigned managed identity on az400-123456789-main.
Grant that managed identity access to az400-123456789-kv1 with the least-privileged role: Key Vault Secrets User (RBAC), or Secret Get permission if using access policies.
Explanation: The web app must authenticate with its system-assigned managed identity and be authorized to read secrets from the Key Vault. Least privilege is read-only secret access.
Question 201
SIMULATION -
You need to configure a virtual machine named VM1 to securely access stored secrets in an Azure Key Vault named az400-123456789-kv.
To complete this task, sign in to the Microsoft Azure portal.
Show Answer
Correct Answer: Enable the system-assigned managed identity on VM1.
Grant that managed identity access to az400-123456789-kv (Key Vault) with secret permissions via an access policy or appropriate RBAC role, depending on the vault permission model.
Explanation: VM1 needs a managed identity to authenticate to Azure Key Vault. The Key Vault must then explicitly authorize that identity to read stored secrets using either Key Vault access policies or Azure RBAC, depending on how the vault is configured.
Question 202
You have a private distribution group that contains provisioned and unprovisioned devices.
You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.
What should you do?
A. Register the devices on the Apple Developer portal.
B. Add the device owner to the organization in App Center.
C. Create an unsigned build.
D. Add the device owner to the collaborators group.
Show Answer
Correct Answer: A
Explanation: For private iOS app distribution through App Center using Apple ad hoc distribution, any unprovisioned devices must be registered in the Apple Developer portal and included in the provisioning profile. Otherwise, those devices cannot install the app. Adding owners as collaborators or organization members affects App Center access, not iOS installation eligibility, and an unsigned build cannot be distributed to devices.
Question 203
You have a private distribution group that contains provisioned and unprovisioned devices.
You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.
What should you do?
A. Select Register devices and sign my app.
B. Create an active subscription in App Center Test.
C. Add the device owner to the organization in App Center.
D. Create an unsigned build.
Show Answer
Correct Answer: A
Explanation: To distribute an iOS app to a private distribution group containing both provisioned and unprovisioned devices, App Center must automatically register devices and re-sign the app with an updated provisioning profile. This is accomplished by selecting 'Register devices and sign my app'. The other options are unrelated to iOS distribution provisioning requirements.
Question 204
HOTSPOT -
Your company uses GitHub for source control. GitHub repositories store source code and store process documentation. The process documentation is saved as
Microsoft Word documents that contain simple flow charts stored as .bmp files.
You need to optimize the integration and versioning of the process documentation and the flow charts. The solution must meet the following requirements:
✑ Store documents as plain text.
✑ Minimize the number of files that must be maintained.
✑ Simplify the modification, merging, and reuse of flow charts.
Simplify the modification, merging, and reuse of documents.
Hot Area:
Show Answer
Correct Answer: Markdown (.md)
Mermaid diagrams
Explanation: Markdown stores documentation as plain text for easy versioning and merging. Mermaid stores flowcharts as text embedded in Markdown, reducing file count and simplifying editing, merging, and reuse.
$19
Get all 534 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
