AZ-400リアル試験問題解答は更新された[2026年07月27日]
お手軽に合格させる 最新Microsoft AZ-400問題集には625問があります
この試験は40〜60の多肢選択問題から構成され、制限時間は3時間です。質問は、Azure DevOps、Azure Resource Manager、およびVisual Studioを含むMicrosoftテクノロジーを使用してDevOpsソリューションを設計および実装する能力を評価するように設計されています。試験に合格した候補者は、DevOpsの実践における専門知識を示し、ジョブマーケットで競争力を持つMicrosoft Certified: DevOps Engineer Expert認定を受け取ります。
Microsoft AZ-400（Microsoft DevOps Solutionsの設計と実装）認定試験は、DevOpsの実践とツールの専門知識を実証したい専門家向けに設計されています。この試験は、Microsoft環境におけるDevOpsソリューションの設計、実装、および管理に関与しているITの専門家、開発者、およびソフトウェアエンジニアに最適です。この試験では、継続的な統合と配信、コードなどのインフラストラクチャ、監視とロギング、セキュリティとコンプライアンスなど、さまざまなトピックをカバーしています。
質問 # 173
HOTSPOT
You are using PowerShell to administer Azure Log Analytics workspaces.
You need to list the available workspaces and their properties.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Box 1: Get-AzResource
Use the following command to examine the access control mode for all workspaces in the subscription:
PowerShell
Get-Az Resource -Resource Type Microsoft. Operational Insights/workspaces -Expand Properties | for each
{s.Name + ": " + $_.Properties.features.enableLogAccessUsingOnlyResourcePermissions Box 2: -Resource Type Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-access
質問 # 174
You have a large repository named Repo1 that contains a directory named directory 1.
You plan to modify files in directory1.
You need to create a clone of Repo1. The solution must minimize the amount of transferred data.
How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
正解：
解説：
質問 # 175
You have the following Azure policy.
- A. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the internet
- B. ensures that at) data for new Azure Storage accounts is encrypted at rest
- C. ensures that all traffic to new Azure Storage accounts is encrypted
- D. prevents all HTTPtraffic to wasting Azure Storage accounts
正解：B
質問 # 176
You have an Azure subscription that contains the resources shown in the following table.
Project1 produces npm packages that are published to Feed 1. Feed1 is consumed by multiple projects.
You need to ensure that only tested packages are available for consumption. The solution must minimize development effort.
What should you do?
- A. Create a feed view named @default. After the npm packages test successfully, configure a release pipeline that promotes a package to the @default view.
- B. Create a feed view named @release and set @release as the default view. After the npm packages test successfully, configure a release pipeline that tags the packages as release.
- C. Create a feed view named release and set @release as the default view. After the npm packages test successfully, configure a release pipeline that promotes a package to the @release View.
- D. Create a feed view named @default. After the npm packages test successfully. configure a release pipeline that tags the packages as release.
正解：B
質問 # 177
You have app named App1. You have a Log Analytics workspace named Workspace1 that contains two tables named Events and Logs. App1 manage events in multiple locations and writes logs to Workspace1.
You need to query Workspace1 for all log entries related to Asia that occurred during the last two days.
In which order should you arrange the query statements?
正解：
解説：
Explanation
質問 # 178
You have an Azure DevOps organization named Contoso.
You have 10 Azure virtual machines that run Windows Server 2019. The virtual machines host an application that you build and deploy by using Azure Pipelines. Each virtual machine has the Web Server (IIS) role installed and configured.
You need to ensure that the web server configurations pin the virtual machines is maintained automatically.
The solution must provide centralized management of the configuration settings and minimize management overhead.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
Step1: Create an Azure Automation account.
An Azure Automation account is required.
Step 2: Install the custom Desired State Configuration (DSC) extension on the virtual machines Under the hood, and without an administrator having to remote into a VM, the Azure VM Desired State Configuration extension registers the VM with Azure Automation State Configuration.
Step 3: Onboard the virtual machines to the Azure Automation account.
Step 4: Complete the Desired State Configuration (DSC) configuration.
Create a DSC configuration.
Reference:
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-onboarding
質問 # 179
You useGet for source control.
You delete a file, commit the changes, and continue to work.
You need to recover the deleted file.
Which three commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
質問 # 180
Your company has a release pipeline in an Azure DevOps project.
You plan to deploy to an Azure Kubernetes Services (AKS) cluster by using the Helm package and deploy task.
You need to install a service in the AKS namespace for the planned deployment.
Which service should you install?
- A. Kubectl
- B. Tiller
- C. Chart
- D. Azure Container Registry
正解：B
解説：
Before you can deploy Helm in an RBAC-enabled AKS cluster, you need a service account and role binding for the Tiller service.
Incorrect Answers:
C: Kubectl is a command line interface for running commands against Kubernetes clusters.
Reference:
https://docs.microsoft.com/en-us/azure/aks/kubernetes-helm
質問 # 181 
正解：
解説：
Your company is building a new web application.
You plan to collect feedback from pilot users on the features being delivered.
All the pilot users have a corporate computer that has Google Chrome and the Microsoft Test & Feedback extension installed. The pilot users will test the application by using Chrome.
You need to identify which access levels are required to ensure that developers can request and gather feedback from the pilot users. The solution must use the principle of least privilege.
Which access levels in Azure DevOps should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Reference:
https://docs.microsoft.com/en-us/azure/devops/organizations/security/access-levels?view=vsts
質問 # 182
You are developing an open source solution that uses a GitHub repository.
You create a new public project in Azure DevOps.
You plan to use Azure Pipelines for continuous build. The solution will use the GitHub Checks API.
Which authentication type should you use?
- A. GitHub App
- B. OAuth
- C. SAML
- D. a personal access token
正解：A
解説：
Write permission for the Checks API is only available to GitHub Apps.
Note: Authenticating as a GitHub App lets you do a couple of things:
- You can retrieve high-level management information about your GitHub App.
- You can request access tokens for an installation of the app.
Reference:
https://docs.github.com/en/rest/guides/getting-started-with-the-checks-apiapps/
質問 # 183
You haw an Azure subscription that contains multiple Azure services. You need to send an SMS alert when scheduled maintenance is planned for the Azure services. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A. Create an Azure Service Health alert.
- B. Enable Azure Security Center.
- C. Create and configure an Azure Monitor alert rule
- D. Create and configure an action group
正解：A、C
質問 # 184
You have a project Azure DevOps.
You plan to create a build pipeline that will deploy resources by using Azure Resource Manager templates.
The templates will reference secretes stored in Azure Key Vault.
You need to ensure that you can dynamically generate the resource ID of the key vault during template deployment.
What should you include in the template? To answer, select eh appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
質問 # 185
You have an app named App1. You have a Log Analytics workspace named Workspace 1 that contains two tables named Events and Logs. App1 manages events in multiple locations and writes togs to Workspace1.
You need to query Workspace1 for all log entries related to Asia that occurred during the last two days.
In which order should you arrange the query statements? To answer, move all statements from the let of statements to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
質問 # 186
Your company has an Azure subscription.
The company requires that all resource group in the subscription have a tag named organization set to a value of Contoso.
You need to implement a policy to meet the tagging requirement.
How should you complete the policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation
Box 1: " Microsoft.Resources/subscriptions/resourceGroups"
Box 2: "Deny",
Sample - Enforce tag and its value on resource groups
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Resources/subscriptions/resourceGroups"
},
{
"not": {
"field": "[concat('tags[',parameters('tagName'), ']')]",
"equals": "[parameters('tagValue')]"
}
}
]
},
"then": {
"effect": "deny"
}
}
}
}
References:
https://docs.microsoft.com/en-us/azure/governance/policy/samples/enforce-tag-on-resource-groups
質問 # 187
You provision an Azure Kubernetes Service (AKS) cluster that has RBAC enabled. You have a Helm chart for a client application.
You need to configure Helm and Tiller on the cluster and install the chart.
Which three commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.
正解：
解説：
Explanation:
Step 1: Kubectl create
You can add a service account to Tiller using the --service-account <NAME> flag while you're configuring Helm (step 2 below). As a prerequisite, you'll have to create a role binding which specifies a role and a service account name that have been set up in advance.
Example: Service account with cluster-admin role
$ kubectl create -f rbac-config.yaml
serviceaccount "tiller" created
clusterrolebinding "tiller" created
$ helm init --service-account tiller
Step 2: helm init
To deploy a basic Tiller into an AKS cluster, use the helm init command.
Step 3: helm install
To install charts with Helm, use the helm install command and specify the name of the chart to install.
References:
https://docs.microsoft.com/en-us/azure/aks/kubernetes-helm
https://docs.helm.sh/using_helm/#tiller-namespaces-and-rbac
質問 # 188
......
Microsoft AZ-400認定試験は、Microsoft DevOpsソリューションを設計および実装する個人の能力をテストするために特別に設計されています。これは非常に求められている認定であり、DevOpsの分野での個人の技術的専門知識の検証として世界中で認識されています。試験に合格した候補者は、DevOpsのライフサイクル全体を管理するために必要な知識とスキルを持っている非常に熟練した専門家と見なされます。
最新のAZ-400学習ガイド2026年最新の- 提供するのはテストエンジンとPDF：https://www.jpntest.com/shiken/AZ-400-mondaishu
最新版を今すぐ試そうAZ-400練習テスト問題解答：https://drive.google.com/open?id=1IWa7VMdoZjFX3hWe_5EF5P7s5eWmkbF4