Microsoft

AZ-400 Free Practice Questions — Page 27

Question 268

DRAG DROP - You are creating a container for an ASP.NET Core app. You need to create a Dockerfile file to build the image. The solution must ensure that the size of the image is minimized. How should you configure the file? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

Illustration for AZ-400 question 268
Show Answer
Correct Answer: mcr.microsoft.com/dotnet/sdk:5.0 dotnet publish -c Release -o out mcr.microsoft.com/dotnet/aspnet:5.0
Explanation:
Use a multi-stage build: build with the SDK image and publish the app, then copy only the published output into the smaller ASP.NET runtime image to minimize the final image size.

Question 269

DRAG DROP - You have recently created a web application for your company. You have been tasked with making sure that a summary of the exceptions that transpire in the application is automatically sent to Microsoft Teams on a daily basis. Which of the following Azure services should you use? Answer by dragging the correct options from the list to the answer area. Select and Place:

Illustration for AZ-400 question 269
Show Answer
Correct Answer: Azure Logic Apps Azure Application Insights
Explanation:
Application Insights collects and stores application exceptions. Logic Apps can run on a schedule, query Application Insights, and send a daily summary to Microsoft Teams.

Question 271

HOTSPOT - You plan to use Desired State Configuration (DSC) to maintain the configuration state of virtual machines that run Windows Server. You need to perform the following: ✑ Install Internet Information Services (IIS) on the virtual machines. ✑ Update the default home page of the IIS web server. How should you configure the DSC configuration file? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-400 question 271
Show Answer
Correct Answer: WindowsFeature File
Explanation:
Use the DSC WindowsFeature resource to install the IIS role (Web-Server) on Windows Server. Use the File resource to copy the default index.htm from the source path to C:\inetpub\wwwroot.

Question 272

You configure Azure Application Insights and the shared service plan tier for a web app. You enable Smart Detection. You confirm that standard metrics are visible in the logs, but when you test a failure, you do not receive a Smart Detection notification. What prevents the Smart Detection notification from being sent?

A. You must enable the Snapshot Debugger for the web app.
B. Smart Detection uses the first 24 hours to establish the normal behavior of the web app.
C. The web app is configured to use the shared service plan tier.
D. You must restart the web app before Smart Detection is enabled.
Show Answer
Correct Answer: B
Explanation:
Smart Detection establishes a baseline of normal application behavior before it can reliably detect anomalies and send notifications. It typically uses the first 24 hours of telemetry to learn normal patterns. Snapshot Debugger is unrelated, the shared App Service plan tier does not prevent Smart Detection alerts, and restarting the web app is not required to enable Smart Detection.

Question 273

Your company is currently making use of Team Foundation Server 2013 (TFS 2013), but intend to migrate to Azure DevOps. You have been tasked with supplying a migration approach that allows for the preservation of Team Foundation Version Control changesets dates, as well as the changes dates of work items revisions. The approach should also allow for the migration of all TFS artifacts, while keeping migration effort to a minimum. You have suggested upgrading TFS to the most recent RTW release. Which of the following should also be suggested?

A. Installing the TFS kava SDK
B. Using the TFS Database Import Service to perform the upgrade.
C. Upgrading PowerShell Core to the latest version.
D. Using the TFS Integration Platform to perform the upgrade.
Show Answer
Correct Answer: B
Explanation:
To preserve TFVC changeset dates, work item revision dates, and migrate all supported TFS artifacts with minimal effort when moving to Azure DevOps Services, the recommended approach is to upgrade TFS to a supported RTW version and then use the TFS Database Import Service. The Integration Platform is an older synchronization/migration tool and is not the recommended path for full-fidelity Azure DevOps migration. The Java SDK and PowerShell Core are unrelated to this migration requirement.

Question 274

HOTSPOT - You need to create deployment files for an Azure Kubernetes Service (AKS) cluster. The deployments must meet the provisioning storage requirements shown in the following table. Which resource type should you use for each deployment? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-400 question 274 Illustration for AZ-400 question 274
Show Answer
Correct Answer: Deployment 1: provisioner: kubernetes.io/azure-file Deployment 2: provisioner: kubernetes.io/azure-disk Deployment 3: driver: secrets-store.csi.k8s.io
Explanation:
Azure Files provides SMB-backed shared storage, Azure Disk provides managed disk storage, and the Secrets Store CSI Driver mounts X.509 certificates and other secrets securely into pods.

Question 275

You need to consider the underlined segment to establish whether it is accurate. Black Duck can be used to make sure that all the open source libraries conform to your company's licensing criteria. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

A. No adjustment required.
B. Maven
C. Bamboo
D. CMAKE
Show Answer
Correct Answer: A
Explanation:
Black Duck is specifically designed for open source software composition analysis, including identifying open source components and verifying license compliance against organizational policies. Maven is a build and dependency management tool, Bamboo is a CI/CD server, and CMake is a build system generator, none of which primarily perform open source license compliance scanning.

Question 276

You need to consider the underlined segment to establish whether it is accurate. To deploy an application to a number of Azure virtual machines, you should create a universal group. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

A. No adjustment required.
B. security
C. deployment
D. resource
Show Answer
Correct Answer: C
Explanation:
The statement is inaccurate. To deploy an application to multiple Azure virtual machines in Azure DevOps, you create a deployment group, which is a logical collection of target machines with deployment agents installed. A universal group is unrelated to application deployment. A security group manages permissions, and a resource group organizes Azure resources but is not the deployment target grouping mechanism.

Question 277

You are making use of Azure DevOps to configure Azure Pipelines for project, named PROJ-01. You are preparing to use a version control system that allows for source code to be stored on a managed Windows server located on the company network. Which of the following is the version control system you should use?

A. Github Enterprise
B. Bitbucket cloud
C. Github Professional
D. Git in Azure Repos
Show Answer
Correct Answer: A
Explanation:
The requirement is for a version control system that stores source code on a managed server located on the company's network (on-premises). GitHub Enterprise Server is designed for self-hosted, on-premises deployment. Bitbucket Cloud and GitHub Professional are cloud offerings, and Azure Repos in Azure DevOps Services is cloud-hosted. Although Azure DevOps Server can provide on-premises Git repositories, that is not an answer option; the option given is 'Git in Azure Repos', which refers to the Azure DevOps service. Sources: https://learn.microsoft.com/en-us/azure/devops/integrate/concepts/dotnet-client-libraries?view=azure-devops

Question 278

You have several Azure Active Directory (Azure AD) accounts. You need to ensure that users use multi-factor authentication (MFA) to access Azure apps from untrusted networks. What should you configure in Azure AD?

A. access reviews
B. managed identities
C. entitlement management
D. conditional access
Show Answer
Correct Answer: D
Explanation:
Conditional Access in Azure AD (Microsoft Entra ID) allows you to create policies that require multi-factor authentication based on conditions such as network location (trusted vs. untrusted), user, application, and risk. Access reviews, managed identities, and entitlement management do not enforce MFA for app access.

$19

Get all 534 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.