Valid AZ-400 Dumps shared by PassLeader for Helping Passing AZ-400 Exam! PassLeader now offer the newest AZ-400 VCE dumps and AZ-400 PDF dumps, the PassLeader AZ-400 exam questions have been updated and ANSWERS have been corrected, get the newest PassLeader AZ-400 dumps with VCE and PDF here: https://www.passleader.com/az-400.html (619 Q&As Dumps)
BTW, DOWNLOAD part of PassLeader AZ-400 dumps from Cloud Storage: https://drive.google.com/open?id=1L7kKrrFiEOHT2sXpAOJyL21YYGtCNOUZ
NEW QUESTION 581
You have an on-premises web server named Server. You need to ensure that you can build .NET apps and deploy the apps to Server1 by using Azure Pipelines.
Solution: You deploy a virtual machine scale set and select the [small disk] Windows Server 2019 Datacenter – x64 Gen 1 image.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-use-custom-image-cli
https://learn.microsoft.com/en-us/dotnet/core/tools/
NEW QUESTION 582
You have an on-premises web server named Server. You need to ensure that you can build .NET apps and deploy the apps to Server1 by using Azure Pipelines.
Solution: You deploy a virtual machine scale set and select a custom Ubuntu image that includes the .NET command-line interface (CLI) tools.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-use-custom-image-cli
https://learn.microsoft.com/en-us/dotnet/core/tools/
NEW QUESTION 583
You are developing an Azure Pipelines pipeline. You need to configure a check in the pipeline that will query Azure Boards to ensure that there are no active work item issues before the pipeline deploys a build to production. Which type of check should you implement?
A. post-deployment approvals
B. manual validations
C. pre-deployment gates
D. pre-deployment approvals
Answer: C
NEW QUESTION 584
You use an Azure Pipelines pipeline to build and test an app named App1. Your company’s development department works in the feature branches. You need to ensure that a pull request will merge into the main branch only when testing covers more than 90 percent of the code. What should you do?
A. Configure a branch policy for the feature branches.
B. Configure a branch policy for the main branch.
C. Create a Publish Test Results task.
D. Create a code coverage configuration YAML file.
Answer: B
Explanation:
https://learn.microsoft.com/en-us/azure/devops/pipelines/test/codecoverage-for-pullrequests?view=azure-devops#protect-a-branch-using-a-code-coverage-policy
NEW QUESTION 585
You have an Azure Pipelines pipeline named Pipeline1 and a user named User1. Pipeline1 contains a temporary final stage named final1. You need to ensure that User1 can delete final1 when testing is complete. The solution must follow the principle of least privilege. At which level should you grant permissions to User1?
A. pipeline
B. organization
C. stage
D. project
Answer: A
Explanation:
Azure Pipelines does not support granting permissions specifically at the stage level. Permissions in Azure DevOps are hierarchical and are typically managed at broader levels, such as the pipeline, project, or organization.
NEW QUESTION 586
You have an Azure subscription. You need to ensure that users can provision preconfigured cloud-based environments for developing apps. The solution must minimize administrative effort. What should you include in the solution?
A. Windows 365 Cloud PC
B. Azure Deployment Environments
C. Azure Virtual Desktop
D. Microsoft Dev Box
Answer: B
Explanation:
Azure Deployment Environments empowers development teams to quickly and easily spin up app infrastructure with project-based templates that establish consistency and best practices while maximizing security. This on-demand access to secure environments accelerates the stages of the software development lifecycle in a compliant and cost-efficient way. A deployment environment is a collection of Azure infrastructure resources defined in a template called an environment definition. Developers can deploy infrastructure defined in the templates in subscriptions where they have access, and build their applications on the infrastructure.
https://learn.microsoft.com/en-us/azure/deployment-environments/overview-what-is-azure-deployment-environments
NEW QUESTION 587
You have an Azure subscription that contains 20 virtual machines. You plan to deploy an Azure infrastructure by using Bicep files. The files will be deployed by using self-hosted GitHub runners on the virtual machines. You need to ensure that the GitHub runners can authenticate to Azure. The solution must minimize administrative effort. What should you use?
A. service principals
B. system-assigned managed identities
C. personal access tokens (PATs)
D. user-assigned managed identities
Answer: D
Explanation:
To authenticate a self-hosted GitHub Actions runner with Azure, you’ll typically use either a managed identity or a service principal with OpenID Connect (OIDC). Managed identities are generally preferred for simplicity and security, especially with Azure Virtual Machines. Alternatively, you can use a service principal and configure it with a federated identity credential, which can be helpful in more complex scenarios. System-assigned managed identities are tied to a specific Azure resource and are deleted when the resource is deleted, while user-assigned managed identities are separate Azure resources that can be assigned to multiple resources. In this scenario we need only a single user-assigned managed identity.
https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities
https://learn.microsoft.com/en-us/azure/developer/github/connect-from-azure-identity
NEW QUESTION 588
You have an Azure DevOps organization that contains a repo named Repo1 that contains infrastructure as code (IaC) resources. You plan to deploy the resources by using a GitHub Actions workflow. You need to configure an authentication method for the workflow. What should you configure?
A. a GitHub token
B. an X.509 certificate
C. a Microsoft Entra user-assigned managed identity
D. a Microsoft Entra external identity
Answer: C
Explanation:
To connect a GitHub Actions workflow to an Azure DevOps repo for infrastructure as code (IaC) deployments, authentication is typically achieved using Personal Access Tokens (PATs), Service Principals with OpenID Connect (OIDC), or Managed Identities. PATs offer a straightforward approach, while Service Principals and Managed Identities provide more robust and secure authentication for automated deployments. The Azure Login action supports different ways of authenticating with Azure:
– Sign in with OpenID Connect using a Microsoft Entra application or a user-assigned managed identity.
– Sign in with a managed identity configured on an Azure virtual machine (Only available for self-hosted GitHub runners).
– Sign in with a service principal and secret (Not recommended).
https://learn.microsoft.com/en-us/azure/developer/github/connect-from-azure
NEW QUESTION 589
You have an Azure DevOps pipeline named Pipeline1. You need to track the stability of code changes in Pipeline1. Which metric should you use?
A. test pass rate
B. lead time for changes (LT)
C. time to detect (TTD)
D. deployment frequency (DT)
Answer: D
Explanation:
Understanding the frequency of how often new code is deployed into production is critical to understanding DevOps success. Many practitioners use the term “delivery” to mean code changes that are released into a pre-production staging environment, and reserve “deployment” to refer to code changes that are released into production.
https://www.atlassian.com/devops/frameworks/devops-metrics
NEW QUESTION 590
You are designing a build and release pipeline. You need to implement continuous integration and continuous delivery (CI/CD) for the pipeline. Which automated activities should you include in the pipeline?
A. unit tests, integration tests, and acceptance tests
B. functional tests, production tests, and production release
C. unit tests, production release, and production deployment
D. functional tests, regression tests, and formal assessments
Answer: A
Explanation:
Continuous integration is the practice of testing each change made to your codebase automatically and as early as possible. Continuous delivery follows the testing that happens during continuous integration and pushes changes to a staging or production system.
https://learn.microsoft.com/en-us/azure/devops/pipelines/architectures/devops-pipelines-baseline-architecture
NEW QUESTION 591
You have an Azure subscription. The subscription contains virtual machines that run either Windows Server or Ubuntu. You need to recommend a configuration management solution for the virtual machines. The solution must meet the following requirements:
– Minimize the number of additional servers required.
– Ensure that configuration management can be performed from the Azure portal.
– Ensure that status reports can be forwarded directly to a Log Analytics workspace.
What should you include in the recommendation?
A. PowerShell Desired State Configuration (DSC).
B. Azure Resource Manager (ARM) templates.
C. Bicep.
D. The State configuration (DSC) settings.
Answer: C
Explanation:
Bicep, a domain-specific language (DSL), is a great choice for Azure Virtual Machine (VM) configuration management, especially when you want to automate and standardize the deployment and management of VMs. It allows you to define the infrastructure as code, making it easy to manage VM configurations across multiple environments and versions.
https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/overview
https://learn.microsoft.com/en-us/azure/templates
NEW QUESTION 592
You have an Azure DevOps release pipeline named Pipeline1. You plan to use Pipeline1 to deploy infrastructure as code (IaC) resources to Azure. You need to create templates to define which resources to deploy. Which template formats should you use?
A. Azure Resource Manager (ARM) only.
B. Bicep only.
C. XML only.
D. Azure Resource Manager (ARM) and Bicep only.
E. Azure Resource Manager (ARM), Bicep, and XML.
Answer: C
Explanation:
When using Azure DevOps release pipelines for infrastructure as code (IaC) deployments, the recommended template formats are Azure Resource Manager templates (ARM templates) and Bicep. These Azure-native tools facilitate deploying infrastructure declaratively, meaning you define what you want to deploy without specifying how to do it. Bicep is a domain-specific language that is a simpler and more readable alternative to ARM templates, which are written in JSON. Additionally, you can use Terraform if you prefer.
https://learn.microsoft.com/en-us/devops/deliver/what-is-infrastructure-as-code
NEW QUESTION 593
You are designing a build and release pipeline. You need to implement a shift-left testing strategy for the pipeline. Which types of tests should you include?
A. formal acceptance, user acceptance, and smoke
B. functional, regression, and formal acceptance
C. unit, smoke, and integration
D. integration, user acceptance, and regression
Answer: C
Explanation:
The goal for shifting testing left is to move quality upstream by performing testing tasks earlier in the pipeline. Through a combination of test and process improvements, shifting left reduces both the time it takes for tests to run, and the impact of failures later in the cycle. Shifting left ensures that most testing is completed before a change merges into the main branch.
https://learn.microsoft.com/en-us/devops/develop/shift-left-make-testing-fast-reliable
NEW QUESTION 594
You have an infrastructure as code (IaC) solution that is managed by using Bicep files and Azure Pipelines. You need to ensure that pipeline actions that significantly affect the existing infrastructure are reviewed before they are run. What should you configure?
A. a release pipeline that performs a repository build validation
B. a branch policy that performs a repository check for comment resolution
C. a build pipeline with a Bicep file that performs a what-if operation
D. a build pipeline with a Bicep file that performs a deploy operation
Answer: C
Explanation:
To effectively review pipeline actions in Azure Pipelines, especially when managing infrastructure as code with Bicep, you need to integrate your Bicep deployments with a CI/CD pipeline and implement robust validation and testing practices. This includes using linting, preflight validation, and “what-if” operations to ensure your changes are valid before deployment, and testing resources after each deployment.
https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/add-template-to-azure-pipelines
NEW QUESTION 595
You have a widget named App1 and an Azure DevOps YAML pipeline named Pipeline1. App1 is released by using Pipeline1. Pipeline1 contains a single stage and a single job. You need to ensure that App1 is approved before the app is released. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Configure branch control.
B. Add a stage named deployment to the YAML pipeline.
C. Change Pipeline1 to a deployment job.
D. Create a service connection.
E. Create an environment and add a check.
Answer: CE
NEW QUESTION 596
You have a GitHub repository named repo1. You commit a change to repo1. You need to update the commit message. The solution must ensure that the version number remains the same. Which command should you run?
A. git commit –patch
B. git commit –amend
C. git status –renames
D. git restore –patch
Answer: B
Explanation:
To update the most recent commit message in a Git repository, use the command git commit –amend to open your editor, change the message, and save it; if the commit has already been pushed, you’ll need to force push with git push –force-with-lease origin <branch-name> to update the remote repository with the new commit, which replaces the old one and generates a new commit ID.
https://docs.github.com/articles/changing-a-commit-message
NEW QUESTION 597
You have an AzureDevOps project that contains a pipeline named Pipeline1. Pipeline1 contains the following stages:
– Build.
– Unit test.
– User acceptance test deployment.
– Staging deployment.
– Approval.
– Production deployment.
You use pull requests from feature branches to suggest changes to a release branch. When a pull request is issued against the main branch, Pipeline1 runs. You need to reduce the time it takes to deploy resolutions for high severity incidents. What should you do?
A. Create a deployment pipeline for hotfixes that contains a production deployment stage.
B. Create a deployment pipeline for hotfixes that contains a build stage, a unit test stage, and a production deployment stage.
C. In the Azure Boards backlog, create a bug, and then assign the bug to a sprint.
D. Fix the code in the main branch, and then deploy and raise a pull request to the release branch.
Answer: B
Explanation:
A hotfix DevOps pipeline automates code delivery by integrating a build stage (compiling code into a deployable artifact), a unit test stage (running automated tests to validate functionality), and a production deployment stage (releasing the artifact to production) to quickly fix critical issues. This process reduces lead time between a fix being committed and its deployment, improving software quality and delivery speed, often using CI/CD tools like Azure DevOps or Jenkins.
https://learn.microsoft.com/en-us/azure/devops/pipelines/get-started/key-pipelines-concepts
NEW QUESTION 598
You have an app named App1 that will be deployed by using Azure Container Apps. You need to ensure that App1 can be deployed by using the blue-green deployment strategy. Which two actions should you perform in Container Apps? (Each correct answer presents part of the solution. Choose two.)
A. Configure continuous deployment.
B. Enable ingress.
C. From Scale rule setting, set Min replicas to 2.
D. From Scale rule setting, set Max replicas to 2.
E. Set Revision Mode to Multiple.
Answer: BE
Explanation:
https://learn.microsoft.com/en-us/azure/container-apps/blue-green-deployment
https://learn.microsoft.com/en-us/azure/container-apps/ingress-environment-configuration
NEW QUESTION 599
You plan to implement infrastructure as code (IaC) to deploy Azure resources. You need to automate the deployment. The solution must meet the following requirements:
– Ensure that you can track the status of the deployment by using the Azure portal.
– Support the deployment of Azure services in preview.
– Minimize development effort.
What should you use?
A. Windows Subsystem for Linux (WSL)
B. Terraform
C. Azure Developer CLI
D. Bicep
Answer: D
Explanation:
You can track the status of Bicep deployments in the Azure portal by navigating to the resource group, selecting the “Deployments” link, and then choosing a specific deployment from the deployment history. The portal provides detailed information, including the provisioning state, and allows you to troubleshoot errors by viewing deployment operations. Bicep supports the immediate deployment of both public and private preview Azure services, as well as Generally Available (GA) resources, providing “Day 0” support for new Azure services and their API versions. This is a key benefit of using Bicep, which is a domain-specific language that transpiles into Azure Resource Manager (ARM) templates, allowing for simpler authoring and immediate use of new Azure resource types without waiting for GA status.
https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/overview
NEW QUESTION 600
You have a project in Azure DevOps that will use infrastructure as code (IaC) to deploy resources to Azure and Amazon Web Services (AWS). You need to recommend a deployment solution for the project. The solution must minimize administrative effort. What should you include in the recommendation?
A. Terraform.
B. Bicep.
C. Azure Command-Line Interface (CLI).
D. Azure Resource Manager (ARM) templates.
Answer: A
Explanation:
https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/considerations/infrastructure-as-code
NEW QUESTION 601
HotSpot
You have an Azure subscription that contains a user named User1. You have an Azure Resource Manager (ARM) template named Template1. You plan to perform the following actions:
– Deploy an Azure key vault named KV1.
– Deploy Azure resources by using Template1 to retrieve secrets from KV1.
You need to ensure that User1 can deploy Template1. The solution must follow the principle of least privilege. Which permission should you grant to User1, and which parameter should be specified when you create KV1? (To answer, select the appropriate options in the answer area.)
Answer:
Explanation:
https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/key-vault-parameter?tabs=azure-cli#deploy-key-vaults-and-secrets
https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/key-vault-parameter?tabs=azure-cli#grant-deployment-access-to-the-secrets
NEW QUESTION 602
HotSpot
You have an Azure subscription that contains Azure DevOps build pipelines. You need to implement pipeline caching by using the cache task. How should you complete the YAML definition? (To answer, select the appropriate options in the answer area.)
Answer:
Explanation:
https://learn.microsoft.com/en-us/azure/devops/pipelines/release/caching
NEW QUESTION 603
HotSpot
You have an Azure SQL database named DB1. You have an Azure DevOps pipeline named Pipeline1. Pipeline1 creates a data-tier app and publishes a file that contains the output of the app. You need to deploy the published file to DB1 by using a pipeline task. How should you complete the YAML file for Pipeline1? (To answer, select the appropriate options in the answer area.)
Answer:
Explanation:
https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/sql-azure-dacpac-deployment-v1
https://learn.microsoft.com/en-us/azure/devops/pipelines/targets/azure-sqldb
NEW QUESTION 604
Drag and Drop
You have an Azure subscription that contains an Azure Traffic Manager profile named ATM1 and a web app named App1. ATM1 manages App1 traffic. ATM1 is configured to route callers to the endpoint that has the lowest latency. You need to configure ATM1 to route all traffic from Asia to an endpoint in Australia. Which three actions should you perform in sequence from the Azure portal? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
NEW QUESTION 605
Drag and Drop
You have an Azure subscription that contains multiple users. You need to create an Azure Deployment Environment. The solution must meet the following requirements:
– Ensure that users can deploy preconfigured environments.
– Follow the principle of least privilege.
– Minimize administrative effort.
Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
Explanation:
https://learn.microsoft.com/en-us/azure/deployment-environments/quickstart-create-and-configure-devcenter
https://learn.microsoft.com/en-us/azure/deployment-environments/how-to-configure-project-environment-types
NEW QUESTION 606
Drag and Drop
You have a GitHub repository named Repo1. You plan to implement continuous integration and continuous delivery (CI/CD) by using GitHub Actions. You need to create a workflow. Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
NEW QUESTION 607
……
Get the newest PassLeader AZ-400 VCE dumps here: https://www.passleader.com/az-400.html (619 Q&As Dumps)
And, DOWNLOAD the newest PassLeader AZ-400 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1L7kKrrFiEOHT2sXpAOJyL21YYGtCNOUZ