You have an on-premises app named App1 that accesses Azure resources by using credentials stored in a configuration file.
You plan to upgrade App1 to use an Azure service principal.
What is required for App1 to programmatically sign in to Azure Active Directory (Azure AD)?
A. the application ID, a client secret, and the object ID
B. a client secret, the object ID, and the tenant ID
C. the application ID, a client secret, and the tenant ID
D. the application ID, a client secret, and the subscription ID
Show Answer
Correct Answer: C
Explanation: To authenticate programmatically to Azure AD using a service principal (client credentials flow), the application must provide the application (client) ID to identify the app, a client secret to prove its identity, and the tenant ID to indicate which Azure AD directory to authenticate against. Object ID and subscription ID are not used for sign-in.
Question 221
You use GitHub for source control of .NET applications.
You need to deploy a documentation solution that meets the following requirements:
✑ Documents will be written in Markdown as developers make code changes.
✑ Changes to the documents will trigger the recompilation of a static website.
✑ Users will access the documents from the static website.
✑ Documents will be stored in a GitHub repository.
Which two tools can you use to compile the website? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Word Press
B. Jekyll
C. DocFX
D. caret
E. Medium
Show Answer
Correct Answer: B, C
Explanation: The requirements call for a static site generator that compiles Markdown from a GitHub repository into a static website when changes occur. Jekyll is a widely used static site generator that natively supports Markdown and integrates with GitHub Pages. DocFX is designed for .NET documentation and generates static sites from Markdown and source code. Both fully satisfy the scenario.
Question 222
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You use Azure Pipelines to build and test a React.js application.
You have a pipeline that has a single job.
You discover that installing JavaScript packages from npm takes approximately five minutes each time you run the pipeline.
You need to recommend a solution to reduce the pipeline execution time.
Solution: You recommend using pipeline artifacts.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Using pipeline artifacts does not reduce npm install time. Artifacts are meant to share files between jobs or stages, not to speed up builds. To reduce repeated package installation time across pipeline runs, pipeline caching should be used instead. Therefore, the proposed solution does not meet the goal.
Question 223
You have an Azure subscription that contains multiple Azure pipelines.
You need to deploy a monitoring solution for the pipelines. The solution must meet the following requirements:
✑ Parse logs from multiple sources.
✑ Identify the root cause of issues.
What advanced feature of a monitoring tool should you include in the solution?
A. analytics
B. synthetic monitoring
C. directed monitoring
D. Alert Management
Show Answer
Correct Answer: A
Explanation: The requirements are to parse logs from multiple sources and identify the root cause of issues. Analytics capabilities are designed to aggregate and analyze data across multiple log sources, correlate events, detect patterns, and support root-cause analysis. Synthetic monitoring simulates user actions, alert management focuses on notifications, and directed monitoring is not applicable here. Therefore, analytics best meets both requirements.
Question 224
You have a GitHub repository that contains workflows. The workflows contain steps that execute predefined actions. Each action has one or more versions.
You need to request the specific version of an action to execute.
Which three attributes can you use to identify the version? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. the SHA-based hashes
B. the tag
C. the runner
D. the branch
E. the serial
Show Answer
Correct Answer: A, B, D
Explanation: In GitHub Actions, an action’s version is identified by a Git reference. You can pin an action to a specific commit SHA for maximum security and reproducibility, reference a tag that represents a released version, or reference a branch (often used for major versions like v1). The runner and a serial number are not valid mechanisms for versioning actions.
Question 225
You have a project in Azure DevOps.
You need to push notifications about pull requests to a Microsoft Teams channel. The solution must minimize development effort.
What should you do?
A. Install the Azure Pipelines app for Teams and configure a subscription to receive notifications in the channel.
B. Use Azure Automation to connect to the Azure DevOps REST API and send messages to Teams.
C. Install the Azure Repos app for Teams and configure a subscription to receive notifications in the channel.
D. Use an Azure function to connect to the Azure DevOps REST API and send messages to Teams.
Show Answer
Correct Answer: C
Explanation: Pull request notifications are part of Azure Repos events. The Azure Repos app for Microsoft Teams provides built-in, configurable subscriptions for pull request creation and updates, requiring no custom development. Azure Pipelines focuses on pipeline events, while Automation or Functions would require custom code and more effort.
Question 226
You have an Azure subscription named Subscription1 that contains a custom Azure policy named Policy1. Policy1 is an audit policy that monitors naming convention compliance for the resources deployed to Subscription1.
You have a pipeline named Pipeline1 in Azure Pipelines. Pipeline1 deploys Azure Resource Manager (ARM) resources to Subscription1.
You need to ensure that the resources deployed by Pipeline1 comply with Policy1.
What should you add to Pipeline1?
A. a pre-deployment task that runs a security and compliance assessment
B. a post-deployment task that runs a security and compliance assessment
C. an ARM template deployment task to assign Policy1 to Subscription1
D. an ARM template deployment task to deploy Policy1 to Subscription1
Show Answer
Correct Answer: A
Explanation: To ensure resources deployed by the pipeline comply with an existing Azure Policy, you add an Azure Policy compliance check as a pre-deployment task (gate). This allows the pipeline to evaluate policy compliance and prevent the release from proceeding if it would result in noncompliant resources. Options C and D are incorrect because the policy already exists, and B checks only after deployment rather than enforcing compliance during the release process.
Question 227
Your company has 60 developers who are assigned to four teams. Each team has 15 members.
The company uses an agile development methodology.
You need to structure the work of the development teams so that each team owns their respective work while working together to reach a common goal.
Which parts of the taxonomy should you enable the team to perform autonomously?
A. Features and Tasks
B. Initiatives and Epics
C. Epics and Features
D. Stories and Tasks
Show Answer
Correct Answer: D
Explanation: In an agile organization with multiple teams working toward a shared goal, higher-level taxonomy items (Initiatives, Epics, and often Features) are used to align teams and ensure coordination. Team autonomy is intentionally placed at the execution level. According to agile and Azure DevOps guidance ("line of autonomy"), development teams own and operate autonomously on User Stories and Tasks, where day-to-day planning, estimation, and implementation occur. This allows teams to self-organize while still contributing to shared Epics and Features. Therefore, the correct choice is Stories and Tasks.
Question 228
Your company is building a new solution in Java.
The company currently uses a SonarQube server to analyze the code of .NET solutions.
You need to analyze and monitor the code quality of the Java solution.
Which task types should you add to the build pipeline?
A. Maven
B. CocoaPods
C. Xcode
D. Gulp
Show Answer
Correct Answer: A
Explanation: For a Java solution, SonarQube analysis is typically integrated through Java build tools. Maven (and similarly Gradle) has built-in support for SonarQube analysis via plugins and pipeline tasks. Among the options, only Maven is a Java build task suitable for analyzing Java code with SonarQube; CocoaPods and Xcode are for iOS/macOS, and Gulp is mainly for JavaScript.
Question 229
Your company is building a new solution in Java.
The company currently uses a SonarQube server to analyze the code of .NET solutions.
You need to analyze and monitor the code quality of the Java solution.
Which task types should you add to the build pipeline?
A. Octopus
B. Chef
C. CocoaPods
D. Gradle
Show Answer
Correct Answer: D
Explanation: To analyze and monitor Java code quality with SonarQube, the build pipeline must use a Java build tool that integrates with SonarQube. Gradle is a standard Java build system with built-in SonarQube support via plugins. The other options are unrelated: Octopus is for deployments, Chef is configuration management, and CocoaPods is for iOS dependencies.
$19
Get all 531 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.