Free AZ-400 Exam Braindumps - New 2022 Microsoft Pratice Exam
Practice Test for AZ-400 Certification Real 2022 Mock Exam
Microsoft AZ-400 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Develop an Instrumentation Strategy | - Design and implement logging
| 5-10% |
| Facilitate communication and collaboration | - Communicate deployment and release information with business stakeholders
- Generate DevOps process documentation
- Automate communication with team members
| 10-15% |
| Manage source control | - Develop a modern source control strategy
- Plan and implement branching strategies for the source code
- Integrate source control with tools
| 10-15% |
| Develop a security and compliance plan | - Design an authentication and authorization strategy
- Design governance enforcement mechanisms
| 10-15% |
| Define and implement continuous integration | - Design build automation
- Design a package management strategy
- Implement a build strategy
- Maintain build strategy
- Design a process for standardizing builds across organization
| 20-25% |
Major Exam Topics
To get the required score and obtain the expert-level certification, you need to master the certain topics, each having the particular percentage of the whole content. The domains include the following:
- Facilitate Communication and Collaboration (10-15%);
- Design a Security and Compliance Plan (10-15%);
- Develop a Site Reliability Engineering Strategy (5-10%);
It is important to know all the subtopics and vital details related to these areas so that you will be able to master them. Therefore, let’s look at this information.
Domain 1: This objective includes three main subtopics that are covering the least amount of the whole exam content. Thus, you should know how to design an actionable alerting strategy, a failure prediction strategy, and implement a health check. This means that it is important to know how to identify metrics and recommend them on which to base alerts, analyze combinations of metrics, as well as design the mechanisms of communication to notify the users of degraded systems. A potential candidate has to understand the behavior of a system, know how to analyze it, measure baseline metrics, and know which tools to use to prevent the system from failure. Analyzing system dependencies is also an important task to deal with.
Domain 2: This area proves that you are capable of designing authentication and authorization strategies, sensitive information management strategies, security and compliance, as well as governance enforcement mechanisms. These four subjects include the skills in organizing teams with the use of Azure AD groups, evaluating vault solutions, as well as assessing and reporting risks. Your knowledge also requires the ability to implement container scanning and Azure policies.
Domain 3: This topic covers the generation of DevOps process documentation, automation of communication with team members, and your ability to communicate with the business stakeholders about the deployment and release information. This means that you have to know how to integrate GitHub as repository with Azure Boards and notify the stakeholders about key metrics, alerts, and severity using Teams, Slack, SMS, or Email. One’s skills in documenting artifacts and external dependencies are also important.
Domain 4: This subject includes the students’ ability to develop logging and telemetry, implement them, and integrate monitoring and logging solutions. Thus, you need to know all about the integration of crash analytics such as Crashlytics or App Center Crashes and creation of the feedback loop from platform monitoring tools, including Event Grid, Azure Platform Logs, and Azure Diagnostics VM extensions. Your knowledge base should include your understanding of key metrics, such as Teams/Slack, network, webhooks, disk, SMS and Email, memory, and CPU, as well as your ability to define them, measure, and implement alerts on them.
Domain 5: The main subtopics of this area include the development of a modern source control strategy, implementation of branching strategies for the source code, integration of source control with tools, and configuration of repositories.
Domain 6: This section covers the learners’ skills in implementing an orchestration automation solution, planning a deployment environment strategy, and developing deployment scripts and templates. Load balancer, App Center, ARM, Azure Stack, Terraform, PowerShell DSC, GitHub Actions, IoT, CLI, multiregion, Azure Pipelines, DR, sovereign Cloud, Jenkins, Azure IoT Edge, CircleCI, mobile, and CDN are the technologies that you should know all about.
Domain 7: The last topic has the highest percentage of the exam content, which means that you will face with more questions from this section than others. It covers a wide area of subjects that include the maintenance of a build strategy, its implementation, as well as design of a package management strategy, build automation, and a process for standardizing builds across the organization.
NEW QUESTION 195
You need to configure a cloud service to store the secrets required by the mobile applications to call the share.
What should you include in the solution? To answer, select the appropriate options m the answer ate», NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 196
You have the following Azure policy.
You assign the policy to the Tenant root group.
What is the effect of the policy?
- A. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet
- B. prevents all http traffic to existing Azure Storage accounts
- C. ensures that all data for new Azure Storage accounts is encrypted at rest
- D. ensures that all traffic to new Azure Storage accounts is encrypted
Answer: D
Explanation:
Explanation
Denies non HTTPS traffic.
NEW QUESTION 197
You are configuring a release pipeline in Azure DevOps as shown in the exhibit.
Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: 5
There are five stages: Development, QA, Pre-production, Load Test and Production. They all have triggers.
Box 2: The Internal Review stage
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/triggers
NEW QUESTION 198
You are building an ASP.NET Core application.
You plan to create an application utilization baseline by capturing telemetry data.
You need to add code to the application to capture the telemetry data. The solution must minimize the costs of storing the telemetry data.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point
- A. From the code of the application, enable adaptive sampling.
- B. Add the <MaxTelemetryItemsPerSecond>5</MaxTelemetryItemsPerSecond>parameter to the ApplicationInsights.config file.
- C. From the code of the application, disable adaptive sampling.
- D. From the code of the application, add Azure Application Insights telemetry.
- E. Add the <InitialSamplingPercentage>99</InitialSamplingPercentage> parameter to the ApplicationInsights.config file.
Answer: A,B
Explanation:
Sampling is a feature in Azure Application Insights. It is the recommended way to reduce telemetry traffic, data costs, and storage costs, while preserving a statistically correct analysis of application data.
The Application Insights SDK for ASP.NET Core supports both fixed-rate and adaptive sampling. Adaptive sampling is enabled by default.
D: For adaptive sampling: The volume is adjusted automatically to keep within a specified maximum rate of traffic, and is controlled via the setting MaxTelemetryItemsPerSecond. If the application produces a low amount of telemetry, such as when debugging or due to low usage, items won't be dropped by the sampling processor as long as volume is below MaxTelemetryItemsPerSecond.
Note: In ApplicationInsights.config, you can adjust several parameters in the AdaptiveSamplingTelemetryProcessor node. The figures shown are the default values:
<MaxTelemetryItemsPerSecond>5</MaxTelemetryItemsPerSecond>
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/sampling
NEW QUESTION 199
You need to use Azure Automation Sure Configuration to manage the ongoing consistency of virtual machine configurations.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices in correct. You writ receive credit for any of the orders you select.
Answer:
Explanation:
Explanation
Step 1: Assign the node configuration.
You create a simple DSC configuration that ensures either the presence or absence of the Web-Server Windows Feature (IIS), depending on how you assign nodes.
Step 2: Upload a configuration to Azure Automation State Configuration.
You import the configuration into the Automation account.
Step 3: Compiling a configuration into a node configuration
Compiling a configuration in Azure Automation
Before you can apply a desired state to a node, a DSC configuration defining that state must be compiled into one or more node configurations (MOF document), and placed on the Automation DSC Pull Server.
Step 4: Onboard the virtual machines to Azure State Configuration
Onboarding an Azure VM for management with Azure Automation State Configuration Step 5: Check the compliance status of the node.
Viewing reports for managed nodes. Each time Azure Automation State Configuration performs a consistency check on a managed node, the node sends a status report back to the pull server. You can view these reports on the page for that node.
On the blade for an individual report, you can see the following status information for the corresponding consistency check:
The report status - whether the node is "Compliant", the configuration "Failed", or the node is "Not Compliant" (when the node is in ApplyandMonitor mode and the machine is not in the desired state).
References: https://docs.microsoft.com/en-us/azure/automation/automation-dsc-getting-started
NEW QUESTION 200
You plan to use Azure Kubernetes Service (AKS) to host containers deployed from images hosted in a Docker Trusted Registry.
You need to recommend a solution for provisioning and connecting to AKS. The solution must ensure that AKS is RBAC-enaWed and uses a custom service principal.
Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the coned order.
Answer:
Explanation:
Explanation
Step 1 : az acr create
An Azure Container Registry (ACR) can also be created using the new Azure CLI.
az acr create
--name <REGISTRY_NAME>
--resource-group <RESOURCE_GROUP_NAME>
--sku Basic
Step 2: az ad sp create-for-rbac
Once the ACR has been provisioned, you can either enable administrative access (which is okay for testing) or you create a Service Principal (sp) which will provide a client_id and a client_secret.
az ad sp create-for-rbac
--scopes
/subscriptions/<SUBSCRIPTION_ID>/resourcegroups/<RG_NAME>/providers/Microsoft.ContainerRegistry/re
--role Contributor
--name <SERVICE_PRINCIPAL_NAME>
Step 3: kubectl create
Create a new Kubernetes Secret.
kubectl create secret docker-registry <SECRET_NAME>
--docker-server <REGISTRY_NAME>.azurecr.io
--docker-email <YOUR_MAIL>
--docker-username=<SERVICE_PRINCIPAL_ID>
--docker-password <YOUR_PASSWORD>
References:
https://thorsten-hans.com/how-to-use-private-azure-container-registry-with-kubernetes
NEW QUESTION 201
Your company is building a new solution in Java.
The company currently uses a SonarQube server to analyze the code of .NET solutions.
You need to analyze and monitor the code quality of the Java solution.
Which task types should you add to the build pipeline?
- A. Chef
- B. Octopus
- C. Gradle
- D. Gulp
Answer: C
Explanation:
Explanation/Reference:
Explanation:
SonarQube is a set of static analyzers that can be used to identify areas of improvement in your code. It allows you to analyze the technical debt in your project and keep track of it in the future. With Maven and Gradle build tasks, you can run SonarQube analysis with minimal setup in a new or existing Azure DevOps Services build task.
References:
https://docs.microsoft.com/en-us/azure/devops/java/sonarqube?view=azure-devops
NEW QUESTION 202
SIMULATION
You need to prepare a network security group (NSG) named az400-9940427-nsg1 to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet.
To complete this task, sign in to the Microsoft Azure portal.
- A. 1. Open Microsoft Azure Portal and Log into your Azure account.
2. Select network security group (NSG) named az400-9940427-nsg1
3. Select Settings, Outbound security rules, and click Add
4. Click Advanced
5. Change the following settings:
* Destination Port range: 8080
* Protocol. TCP
* Action: Allow
Note: By default, Azure DevOps Server uses TCP Port 8080. - B. 1. Open Microsoft Azure Portal and Log into your Azure account.
2. Select network security group (NSG) named az400-9940427-nsg1
3. Select Settings, Outbound security rules, and click Add
4. Click Advanced
5. Change the following settings:
* Destination Port range: 9090
* Protocol. TCP
* Action: Allow
Note: By default, Azure DevOps Server uses TCP Port 8080.
Answer: A
Explanation:
References:
https://robertsmit.wordpress.com/2017/09/11/step-by-step-azure-network-security-groups-nsg-security-center-azure-nsg-network/
https://docs.microsoft.com/en-us/azure/devops/server/architecture/required-ports?view=azure-devops
NEW QUESTION 203
Your company wants to use Azure Application Insights to understand how user behaviors affect an application.
Which Application Insights tool should you use to analyze each behavior? To answer, drag the appropriate tools to the correct behaviors. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-flows
https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-impact
https://docs.microsoft.com/en-us/azure/azure-monitor/app/usage-troubleshoot
NEW QUESTION 204
SIMULATION
You need to ensure that Microsoft Visual Studio 2017 can remotely attach to an Azure Function named fa-11566895.
To complete this task, sign in to the Microsoft Azure portal.
- A. Enable Remote Debugging
Before we start a debugging session to our Azure Function app we need to enable the functionality.
* Navigate in the Azure portal to your function app fa-11588895
* Go to the "Application settings"
* Under "Debugging" set Remote Debugging to On and set Remote Visual Studio version to 2017. - B. Enable Remote Debugging
Before we start a debugging session to our Azure Function app we need to enable the functionality.
* Navigate in the Azure portal to your function app fa-11566895
* Go to the "Application settings"
* Under "Debugging" set Remote Debugging to On and set Remote Visual Studio version to 2017.
Answer: B
Explanation:
https://www.locktar.nl/uncategorized/azure-remote-debugging-manually-in-visual-studio-2017/
NEW QUESTION 205
You are configuring a release pipeline in Azure DevOps as shown in the exhibit.
Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: 5
There are five stages: Development, QA, Pre-production, Load Test and Production. They all have triggers.
Box 2: The Internal Review stage
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/triggers
NEW QUESTION 206
How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection a worth one point.
Answer:
Explanation:
Explanation
Scenario: Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.
In order to use App Center, you need to opt in to the service(s) that you want to use, meaning by default no services are started and you will have to explicitly call each of them when starting the SDK.
Insert the following line to start the SDK in your app's AppDelegate class in the didFinishLaunchingWithOptions method.
MSAppCenter.start("{Your App Secret}", withServices: [MSAnalytics.self, MSCrashes.self]) References: https://docs.microsoft.com/en-us/appcenter/sdk/getting-started/ios
NEW QUESTION 207
You have an Azure Kubernetes Service (AKS) pod.
You need to configure a probe to perform the following actions:
Confirm that the pod is responding to service requests.
Check the status of the pod four times a minute.
Initiate a shutdown if the pod is unresponsive.
How should you complete the YAML configuration file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-readiness-probe
NEW QUESTION 208
You need to implement the code flow strategy for Project2 in Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange in the correct order.
Answer:
Explanation:
Explanation
Step 1: Create a repository
A Git repository, or repo, is a folder that you've told Git to help you track file changes in. You can have any number of repos on your computer, each stored in their own folder.
Step 2: Create a branch
Branch policies help teams protect their important branches of development. Policies enforce your team's code quality and change management standards.
Step 3: Add a build validation policy
When a build validation policy is enabled, a new build is queued when a new pull request is created or when changes are pushed to an existing pull request targeting this branch. The build policy then evaluates the results of the build to determine whether the pull request can be completed.
Scenario:
Implement a code flow strategy for Project2 that will:
Enable Team2 to submit pull requests for Project2.
Enable Team2 to work independently on changes to a copy of Project2.
Ensure that any intermediary changes performed by Team2 on a copy of Project2 will be subject to the same restrictions as the ones defined in the build policy of Project2.
References: https://docs.microsoft.com/en-us/azure/devops/repos/git/manage-your-branches
NEW QUESTION 209
You are designing the security validation strategy for a project in Azure DevOps.
You need to identify package dependencies that have known security issues and can be resolved by an update.
What should you use?
- A. Gradle
- B. Octopus Deploy
- C. Jenkins
- D. SonarQube
Answer: D
Explanation:
Explanation
With enterprise level of SonarQube you can use OWASP that runs the security scans for known vulnerabilities. https://www.sonarqube.org/features/security/
https://www.sonarqube.org/features/security/owasp/?gclid=Cj0KCQiAzZL-BRDnARIsAPCJs70Teq0-efI2Hd_h
NEW QUESTION 210
You plan to onboard 10 new developers.
You need to recommend a development environment that meets the following requirements:
* Integrates with GitHub
* Provides integrated debugging tools
* Supports remote workers and hot-desking environments
* Supports developers who use browsers, tablets, and Chromebooks
What should you recommend?
- A. Visual Studio Codespaces
- B. VS Code
- C. MonoDevelop
- D. Xamarin Studio
Answer: A
Explanation:
Explanation
Visual Studio Codespaces is built to accommodate the widest variety of projects or tasks, including GitHub and integrating debugging.
Visual Studio Codespaces conceptually and technically extends the Visual Studio Code Remote Development extensions.
In addition to "backend" environments, Visual Studio Codespaces supports these "frontend" editors:
* Visual Studio Code
* Visual Studio Code-based editor in the browser
Reference:
https://docs.microsoft.com/sv-se/visualstudio/codespaces/overview/what-is-vsonline
NEW QUESTION 211
......
Skills measured
- Define and implement a continuous delivery and release management strategy (10-15%)
- Facilitate communication and collaboration (10-15%)
- Develop a security and compliance plan (10-15%)
- Develop an instrumentation strategy (5-10%)
Prepare For Realistic AZ-400 Dumps PDF - 100% Passing Guarantee: https://www.examtorrent.com/AZ-400-valid-vce-dumps.html
Check the Available AZ-400 Exam Dumps with 370 QA's: https://drive.google.com/open?id=1ZzTZwBGmt5nDwbHwPSLsrM1klexua7JA
