AZ-400 無料問題集「Microsoft Designing and Implementing Microsoft DevOps Solutions」
You use a Git repository in Azure Repos to manage the source code of a web application. Developers commit changes directly to the master branch.
You need to implement achange management procedure that meets the following requirements:
The master branch must be protected, and new changes must be built in the feature branches first.
Changes must be reviewed and approved by at least one release manager before each merge.
Changes must be brought into the master branch by using pull requests.
What should you configure in Azure Repos?
D18912E1457D5D1DDCBD40AB3BF70D5D
You need to implement achange management procedure that meets the following requirements:
The master branch must be protected, and new changes must be built in the feature branches first.
Changes must be reviewed and approved by at least one release manager before each merge.
Changes must be brought into the master branch by using pull requests.
What should you configure in Azure Repos?
D18912E1457D5D1DDCBD40AB3BF70D5D
正解：A
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
You are creating a YAML-based Azure pipeline to deploy an Azure Data factory instance that has the following requirements;
* If a Data Factory instance exists already, the instance must be overwritten.
* No other resources in a resource group named Fabrikam must be affected.
How should you complete the code? To answer, select theappropriate options in the answer area.
NOTE: Each correct selection is worth one point.
* If a Data Factory instance exists already, the instance must be overwritten.
* No other resources in a resource group named Fabrikam must be affected.
How should you complete the code? To answer, select theappropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
see the answer below.
Explanation:
Answer is below
Explanation:
Answer is below
You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.
You need to ensure that all the open source libraries comply with your company's licensing standards.
Which service should you use?
You need to ensure that all the open source libraries comply with your company's licensing standards.
Which service should you use?
正解：D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Note: This question is part of a series of questionsthat present the same scenario. Each question in the series contains a unit solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a questionin this section, you will NOT be able to return to it. As a result, these questions will not appear if the review screen.
You use an Azure Pipelines pipeline to build and release web apps.
You need to configure the pipeline to meet the following requirements:
* Only run when there is a change in the /webapp folder.
* Only run when a pr is created.
Solution: You configure the pipeline definition by using the following elements.
Does this meet the goal?
After you answer a questionin this section, you will NOT be able to return to it. As a result, these questions will not appear if the review screen.
You use an Azure Pipelines pipeline to build and release web apps.
You need to configure the pipeline to meet the following requirements:
* Only run when there is a change in the /webapp folder.
* Only run when a pr is created.
Solution: You configure the pipeline definition by using the following elements.
Does this meet the goal?
正解：A
解答を投票する
You need to configure authentication for App1. The solution must support the planned changes.
Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
正解：
Explanation:
Woodgrove Bank plans to implement the following changes to the identity environment:
* Configure App1 to use a service principal.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal
You have an Azure Kubermets Service (AKS) implementation that is RBAC-enabled You plan to use Azure Container Instances as a hosted development environment to run containers in the AKS implementation.
Youneed to conjure Azure Container Instances as a hosted environment for running me containers in AKS.
Which three actions should you perform m sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Youneed to conjure Azure Container Instances as a hosted environment for running me containers in AKS.
Which three actions should you perform m sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
正解：
Explanation:
Step 1: Create a YAML file.
If your AKS cluster is RBAC-enabled, you must create a service account and role binding for use with Tiller.
To create a service account and role binding, create a file named rbac-virtual-kubelet.yaml Step 2: Run kubectl apply.
Apply the service account and binding with kubectl apply and specify your rbac-virtual-kubelet.yaml file.
Step 3: Run helm init.
Configure Helm to use the tiller service account:
helm init --service-account tiller
Youcan now continue to installing the Virtual Kubelet into your AKS cluster.
References:https://docs.microsoft.com/en-us/azure/aks/virtual-kubelet
You need to configure a virtual machine named VM1 to securely access stored secrets in an Azure Key Vault named az400-11566895-kv.
To complete this task, sign in to the Microsoft Azure portal.
To complete this task, sign in to the Microsoft Azure portal.
正解：
See solution below.
Explanation:
You can usea system-assigned managed identity for a Windows virtual machine (VM) to access Azure Key Vault.
* Sign in to Azure portal
* Locate virtual machine VM1.
* Select Identity
* Enable the system-assigned identity for VM1 by setting the Status to On.
Note:Enabling a system-assigned managed identity is a one-click experience. You can either enable it during the creation of a VM or in the properties of an existing VM.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows- vm-access-nonaad
Explanation:
You can usea system-assigned managed identity for a Windows virtual machine (VM) to access Azure Key Vault.
* Sign in to Azure portal
* Locate virtual machine VM1.
* Select Identity
* Enable the system-assigned identity for VM1 by setting the Status to On.
Note:Enabling a system-assigned managed identity is a one-click experience. You can either enable it during the creation of a VM or in the properties of an existing VM.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows- vm-access-nonaad
You need to recommend a procedure to implement the build agent for Project1.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions tothe answer area and arrange them in the correct order.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions tothe answer area and arrange them in the correct order.
正解：
Explanation:
Scenario:
Step 1: Sign in to Azure Develops by using an account that is assigned the Administrator service connection security role.
Note: Under Agent Phase, click Deploy Service Fabric Application. Click Docker Settings and then click Configure Docker settings. In Registry Credentials Source, select Azure Resource Manager Service Connection. Then select your Azure subscription.
Step 2: Create a personal access token..
A personal access token or PAT is required so that a machine can join the pool created with the Agent Pools (read, manage) scope.
Step 3: Install and register the Azure Pipelines agent on an Azure virtual machine.
By running a Azure Pipeline agent in thecluster, we make it possible to test any service, regardless of type.
References:
https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-tutorial-deploy-container-app-with-cicd- vsts
https://mohitgoyal.co/2019/01/10/run-azure-devops-private-agents-in-kubernetes-clusters/
This question is part of a series ofquestions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure DevOps project.
Your build process creates several artifacts.
You need to deploy the artifacts to on-premises servers.
Solution: You deploy an Azure self-hosted agent to an on-premises server. You add a Copy and Publish Build Artifacts task to the deployment pipeline.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure DevOps project.
Your build process creates several artifacts.
You need to deploy the artifacts to on-premises servers.
Solution: You deploy an Azure self-hosted agent to an on-premises server. You add a Copy and Publish Build Artifacts task to the deployment pipeline.
Does this meet the goal?
正解：A
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
You need to create a notification if the peak averageresponse time of an Azure web app named az400-
9940427-main is more than five seconds when evaluated during a five-minute period. The notification must trigger the "https://contoso.com/notify" webhook.
To complete this task, sign in to the Microsoft Azureportal.
9940427-main is more than five seconds when evaluated during a five-minute period. The notification must trigger the "https://contoso.com/notify" webhook.
To complete this task, sign in to the Microsoft Azureportal.
正解：
See explanation below
Explanation:
1. Open Microsoft Azure Portal
2. Log into your Azure account and go to App Service and look under Monitoring then you will see Alert.
3. Select Add an alert rule
4. Configure the alert rule as per belowand click Ok.
Source: Alert on Metrics
Resource Group: az400-9940427-main
Resource: az400-9940427-main
Threshold: 5
Period: Over the last 5 minutes
Webhook: https://contoso.com/notify
Reference:
https://azure.microsoft.com/es-es/blog/webhooks-for-azure-alerts/
Explanation:
1. Open Microsoft Azure Portal
2. Log into your Azure account and go to App Service and look under Monitoring then you will see Alert.
3. Select Add an alert rule
4. Configure the alert rule as per belowand click Ok.
Source: Alert on Metrics
Resource Group: az400-9940427-main
Resource: az400-9940427-main
Threshold: 5
Period: Over the last 5 minutes
Webhook: https://contoso.com/notify
Reference:
https://azure.microsoft.com/es-es/blog/webhooks-for-azure-alerts/
You have an Azure subscription that contains an Azure Pipelines pipeline named Pipeline1 and a user named User1. Pipeline1 is used to build and test an app named Appl. User1 isassigned the Contributors role for Pipeline1.
You plan to test App1 by using an Azure Deployment Environments environment.
You need to ensure that User1 can provision the environment. The solution must follow the principle of least privilege.
Which role should you assign to User1?
You plan to test App1 by using an Azure Deployment Environments environment.
You need to ensure that User1 can provision the environment. The solution must follow the principle of least privilege.
Which role should you assign to User1?
正解：C
解答を投票する
You company uses Azure DevOps to deploy infrastructures to Azure.
Pipelines are developed by using YAML.
You execute a pipeline and receive the results in the web portal for Azure Pipelines as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE:Each correct selection is worth one point.
Pipelines are developed by using YAML.
You execute a pipeline and receive the results in the web portal for Azure Pipelines as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE:Each correct selection is worth one point.
正解：
Explanation:
Reference:
https://dev.to/rajikaimal/azure-devops-ci-cd-yaml-pipeline-4glj
You plan touse Terraform to deploy an Azure resource group.
You need to install the required frameworks to support the planned deployment.
Which two frameworks should you install? Each correct answer presents part of the solution.
NOTE:Each correct selection isworth one point.
You need to install the required frameworks to support the planned deployment.
Which two frameworks should you install? Each correct answer presents part of the solution.
NOTE:Each correct selection isworth one point.
正解：A、C
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
Your companyhas a project in Azure DevOps for a new web application.
The company uses Service Now for change management.
You need to ensure that a change request is processed before any components can be deployed to the production environment.
What are two ways to integrate into the Azure DevOps release pipeline? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
The company uses Service Now for change management.
You need to ensure that a change request is processed before any components can be deployed to the production environment.
What are two ways to integrate into the Azure DevOps release pipeline? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
正解：C、D
解答を投票する
解説: (JPNTest メンバーにのみ表示されます)
You have a project in Azure DevOps that uses an Azure Boards board and stores code in a GitHub repository.
The repository contains a file named README.md.
You need to ensure thatREADME.md includes the status of the work items on the board. The solution must minimize administrative effort.
What should you do first?
The repository contains a file named README.md.
You need to ensure thatREADME.md includes the status of the work items on the board. The solution must minimize administrative effort.
What should you do first?
正解：B
解答を投票する
You have a project in Azure DevOps named Project1 that has a release pipeline in Azure Pipeline named ReleaseP1.
you need toensure that when a new release is generated for ReleaseP1, a new release note document is created. The release notes must contain new features and bug fixes.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the Most of actions to the answer area and arrange them r the correct order.
NOTE: More than one order of answer choices is correct You will receive credit for any of the correct orders you select
you need toensure that when a new release is generated for ReleaseP1, a new release note document is created. The release notes must contain new features and bug fixes.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the Most of actions to the answer area and arrange them r the correct order.
NOTE: More than one order of answer choices is correct You will receive credit for any of the correct orders you select
正解：
