Microsoft

AZ-400 Free Practice Questions — Page 24

Question 236

You have an Azure virtual machine that is monitored by using Azure Monitor. The virtual machine has the Azure Log Analytics agent installed. You plan to deploy the Service Map solution from the Azure Marketplace. What should you deploy to the virtual machine to support the Service Map solution?

A. the Dependency agent
B. the Telegraf agent
C. the Windows Azure diagnostics extension (WAD)
D. the Azure monitor agent
Show Answer
Correct Answer: A
Explanation:
Service Map requires the Dependency agent on the VM in addition to the Log Analytics agent (for the legacy Service Map solution). The Telegraf agent is for collecting Linux metrics, WAD is for Azure diagnostics, and Azure Monitor Agent is the newer monitoring agent but does not change the legacy prerequisite as stated in the question.

Question 237

HOTSPOT - You have a project in Azure DevOps that contains a Continuous Integration/Continuous Deployment (CI/CD) pipeline. You need to enable detailed logging by defining a pipeline variable. How should you configure the variable? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-400 question 237
Show Answer
Correct Answer: Name: System.Debug Value: true
Explanation:
Azure DevOps enables detailed (verbose) pipeline logging by setting the predefined pipeline variable `System.Debug` to `true`.

Question 238

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling. You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1. You need to ensure that an email alert is generated whenever VMSS1 scales in or out. Solution: From Azure DevOps, configure the Notifications settings for Project1. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
Azure DevOps project notification settings only generate notifications for Azure DevOps events such as builds, releases, work items, and pull requests. VM scale set autoscale events are Azure resource events and should be monitored using Azure Monitor autoscale notifications or Azure Monitor alerts with an action group configured to send email.

Question 240

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling. You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1. You need to ensure that an email alert is generated whenever VMSS1 scales in or out. Solution: From Azure DevOps, configure the Service hooks settings for Project1. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
Azure DevOps Service Hooks trigger notifications and integrations based on Azure DevOps events (such as builds, releases, or work item changes). VM scale set autoscale events are Azure resource events, not Azure DevOps project events. To generate email alerts when VMSS1 scales in or out, you would configure Azure Monitor autoscale notifications or Azure Monitor alerts with an action group, not Azure DevOps Service Hooks.

Question 241

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling. You have a project in Azure DevOps named Project1. Project1 is used to build a web app named App1 and deploy App1 to VMSS1. You need to ensure that an email alert is generated whenever VMSS1 scales in or out. Solution: From Azure Monitor, create an action group. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
An Azure Monitor action group only defines the notification actions (such as sending email). By itself it does not define the condition that triggers those actions. To generate an email when a virtual machine scale set scales in or out, you also need an alert rule or autoscale notification configuration tied to the scaling event. Therefore, creating only an action group does not meet the stated goal. Sources: https://www.coursehero.com/file/p68s38ce/Question-15-Note-This-question-is-part-of-a-series-of-questions-that-present-the https://www.certlibrary.com/exam/70-774 https://www.secexams.com/exams/Microsoft/70-703/view/32

Question 242

You have Azure Pipelines and GitHub integrated as a source code repository. The build pipeline has continuous integration enabled. You plan to trigger an automated build whenever code changes are committed to the repository. You need to ensure that the system will wait until a build completes before queuing another build. What should you implement?

A. path filters
B. batch changes
C. scheduled builds
D. branch filters
Show Answer
Correct Answer: B
Explanation:
Setting the CI trigger option `batch: true` (batch changes) causes Azure Pipelines to wait for the currently running build to complete before queuing another build, combining any intervening commits into the next run. Path filters and branch filters only control which changes trigger builds, and scheduled builds are time-based.

Question 243

DRAG DROP - You are preparing to deploy an Azure resource group via Terraform. To achieve your goal, you have to install the necessary frameworks. Which of the following are the frameworks you should use? Answer by dragging the correct options from the list to the answer area. Select and Place:

Illustration for AZ-400 question 243
Show Answer
Correct Answer: Vault Terratest
Explanation:
Among the listed options, Vault is the HashiCorp framework for secrets management commonly used with Terraform, and Terratest is the standard framework for testing Terraform infrastructure. Yeoman is a scaffolding tool, and Tiller is a Helm v2 component unrelated to Terraform deployments.

Question 244

You have been tasked with strengthening the security of your team's development process. You need to suggest a security tool type for the Continuous Integration (CI) phase of the development process. Which of the following is the option you would suggest?

A. Penetration testing
B. Static code analysis
C. Threat modeling
D. Dynamic code analysis
Show Answer
Correct Answer: B
Explanation:
Static code analysis (SAST) is the security tool type most appropriate for the Continuous Integration (CI) phase because it analyzes source code without executing it and can automatically scan every build to detect security vulnerabilities before code is merged or deployed. Penetration testing and dynamic code analysis (DAST) require a running application and are typically performed later in testing or staging environments. Threat modeling is a design-phase activity rather than a CI security scanning tool.

Question 245

SIMULATION - You need to create a notification if the peak average response time of an Azure web app named az400-123456789-main is more than five seconds when evaluated during a five-minute period. The notification must trigger the `https://contoso.com/notify` webhook. To complete this task, sign in to the Microsoft Azure portal.

Show Answer
Correct Answer: Azure portal → Web App (az400-123456789-main) → Alerts → Create alert rule. Condition: Response time (Average), Time aggregation: Average, Threshold: Greater than 5 seconds, Evaluation period: 5 minutes. Action: Create/select an Action Group with a Webhook action pointing to https://contoso.com/notify. Create the alert rule.
Explanation:
Azure Monitor alert rules for App Service use a metric condition and notifications are delivered through an Action Group. Configure the response time metric with a 5-minute evaluation window and a threshold greater than 5 seconds, then attach a webhook action.

Question 246

You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries. You need to ensure that all the open source libraries comply with your company's licensing standards. Which service should you use?

A. NuGet
B. Maven
C. Black Duck
D. Helm
Show Answer
Correct Answer: C
Explanation:
Black Duck is a software composition analysis (SCA) tool that scans open source dependencies, identifies licenses, and checks compliance with organizational licensing and security policies. NuGet and Maven are package managers, and Helm is a Kubernetes package manager, not a license compliance service.

$19

Get all 534 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.