Microsoft

AZ-400 Free Practice Questions — Page 21

Question 209

DRAG DROP - You have a web app named App1 that is hosted on multiple servers. App1 uses Application Insights in Azure Monitor. You need to compare the daily CPU usage from the last week for all servers. How should you complete the query? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

Illustration for AZ-400 question 209
Show Answer
Correct Answer: bin(timestamp, 1d) render timechart
Explanation:
Daily comparison requires grouping timestamps into 1-day bins. A timechart visualization shows CPU usage trends per server over the last 7 days.

Question 210

HOTSPOT - You have a virtual machine that runs Windows Server 2019 and is managed by using Desired State Configuration (DSC). You have the following DSC configuration. You have the following Local Configuration Manager (LCM) configuration. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-400 question 210 Illustration for AZ-400 question 210 Illustration for AZ-400 question 210
Show Answer
Correct Answer: No No Yes
Explanation:
1) The File resource has DependsOn the Web-Server feature, so the feature is installed before the file is copied, not after. 2) The LCM is set to ApplyAndMonitor, which reports drift but does not automatically reapply the configuration. 3) With ApplyAndMonitor and ConfigurationModeFrequencyMins set to 60, DSC checks for drift and logs discrepancies within 60 minutes.

Question 211

HOTSPOT - You are creating a YAML-based Azure pipeline to deploy an Azure Data Factory instance that has the following requirements: ✑ If a Data Factory instance exists already, the instance must be overwritten. ✑ No other resources in a resource group named Fabrikam must be affected. How should you complete the code? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-400 question 211
Show Answer
Correct Answer: Action: Create Or Update Resource Group Deployment mode: Incremental
Explanation:
Create Or Update Resource Group ensures the existing Fabrikam resource group is targeted and the Data Factory is overwritten if it already exists. Incremental mode updates or replaces only the resources defined in the template, leaving all other resources in the Fabrikam resource group unaffected.

Question 212

DRAG DROP - You need to deploy a new project in Azure DevOps that has the following requirements: * The lead developer must be able to create repositories, manage permissions, manage policies, and contribute to the repository. * Developers must be able to contribute to the repository and create branches, but NOT bypass policies when pushing builds. * Project managers must only be able to view the repository. * The principle of least privilege must be used. You create a new Azure DevOps project team for each role. To which Azure DevOps groups should you add each team? To answer, drag the appropriate groups to the correct teams. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

Illustration for AZ-400 question 212
Show Answer
Correct Answer: Project manager: Readers Lead developer: Project Administrators Developer: Contributors
Explanation:
Readers provides view-only access. Project Administrators can manage repositories, permissions, and policies while contributing. Contributors can create branches and push code but cannot bypass policies, satisfying least privilege.

Question 213

DRAG DROP - You have an Azure Key Vault that contains an encryption key named key1. You plan to create a Log Analytics workspace that will store logging data. You need to encrypt the workspace by using key1. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

Illustration for AZ-400 question 213
Show Answer
Correct Answer: Enable soft delete for the key vault. Create a Log Analytics cluster. Grant permissions to the key vault. Link the workspace.
Explanation:
Customer-managed key encryption for Log Analytics requires a recoverable Key Vault (soft delete enabled), a dedicated Log Analytics cluster using a managed identity, Key Vault permissions (Get, Wrap, Unwrap) granted to that identity, and finally linking the workspace to the cluster so data is encrypted with the key.

Question 214

DRAG DROP - You have an Azure subscription that uses Azure Monitor and contains a Log Analytics workspace. You have an encryption key. You need to configure Azure Monitor to use the key to encrypt log data. Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select. Select and Place:

Illustration for AZ-400 question 214
Show Answer
Correct Answer: Create an Azure key vault and store the key Create an Azure Monitor Logs dedicated cluster that has a system-assigned managed identity Grant the system-assigned managed identity Key permissions for the key vault Configure the key vault properties for the cluster Link the Log Analytics workspace to the cluster
Explanation:
Azure Monitor customer-managed keys require a Key Vault key and a Logs dedicated cluster with a system-assigned managed identity. The cluster identity must be granted key permissions (Get, Wrap, Unwrap) in Key Vault. After configuring the cluster to use the key, the Log Analytics workspace is linked to the cluster so that ingested log data is encrypted with the customer-managed key.

Question 216

HOTSPOT - You plan to use Desired State Configuration (DSC) to maintain the configuration of a server that runs Windows Server 2019. The server must have the following features installed: ✑ A web server ✑ An email server How should you complete the DSC configuration file? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-400 question 216
Show Answer
Correct Answer: Box 1: = @("SMTP-Server", "Web-Server") Box 2: Ensure
Explanation:
Use WindowsFeatureSet to install multiple roles. "Web-Server" installs IIS (web server) and "SMTP-Server" provides email functionality. Setting Ensure = 'Present' guarantees the features are installed, with IncludeAllSubFeature = $true installing all subfeatures.

Question 217

DRAG DROP - You need to deploy Internet Information Services (IIS) to an Azure virtual machine that runs Windows Server 2019. How should you complete the Desired State Configuration (DSC) configuration script? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

Illustration for AZ-400 question 217
Show Answer
Correct Answer: Configuration WindowsFeature
Explanation:
In DSC, a configuration block defines the script, and the WindowsFeature resource is used to install IIS by ensuring the Web-Server role is present on the target node.

Question 218

Your team uses Azure Pipelines to deploy applications. You need to ensure that when a failure occurs during the build or release process, all the team members are notified by using Microsoft Teams. The solution must minimize development effort. What should you do?

A. Install the Azure Boards app for Teams and configure a subscription to receive notifications in a channel.
B. Use Azure Automation to connect to the Azure DevOps REST API and notify the team members.
C. Use an Azure function to connect to the Azure DevOps REST API and notify the team members.
D. Install the Azure Pipelines app for Teams and configure a subscription to receive notifications in a channel.
Show Answer
Correct Answer: D
Explanation:
To minimize development effort and notify the team when builds or releases fail, use the built-in Azure Pipelines app for Microsoft Teams. It natively integrates with Azure DevOps and allows you to configure subscriptions for build and release events (including failures) directly to a Teams channel without custom code. Other options require additional development or target different services.

Question 219

You have an Azure subscription that contains 50 virtual machines. You plan to manage the configuration of the virtual machines by using Azure Automation State Configuration. You need to create the Desired State Configuration (DSC) configuration files. How should you structure the code blocks?

A. Node > Configuration > Resource
B. Configuration > Resource > Node
C. Resource > Configuration > Node
D. Configuration > Node > Resource
Show Answer
Correct Answer: D
Explanation:
In Azure Automation State Configuration (PowerShell DSC), the Configuration block is the outermost container. Inside it, one or more Node blocks define the target machines. Within each Node block, resource blocks specify the desired state (for example, WindowsFeature, File, Service). Therefore, the correct structure is Configuration > Node > Resource.

$19

Get all 531 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.