AZ-400 practice questions 131–140

1. Question 131 · 540 in bank

   You configure Azure Application Insights and the shared service plan tier for a web app. You enable Smart Detection. You confirm that standard metrics are visible in the logs, but when you test a failure, you do not receive a Smart Detection notification. What prevents the Smart Detection notification from being sent?

   • AYou must enable the Snapshot Debugger for the web app.
   • BSmart Detection uses the first 24 hours to establish the normal behavior of the web app.
   • CThe web app is configured to use the shared service plan tier.
   • DYou must restart the web app before Smart Detection is enabled.

   Show answer

   Answer: B

   Explanation

   Smart Detection requires an initial period to establish a baseline of normal behavior before it can send notifications for anomalies.

   Source: Adapted from community discussion — ehallak

   Next question

2. Question 132 · 540 in bank

   DRAG DROP - You are using the Dependency Tracker extension in a project in Azure DevOps. You generate a risk graph for the project. What should you use in the risk graph to identify the number of dependencies and the risk level of the project? To answer, drag the appropriate elements to the correct data points. Each element may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Link width - The width of the lines indicates how many dependencies exist in that area, the thicker the link the more dependencies as indicated in the legend. Box 2: Link color - Reference: https://docs.microsoft.com/en-us/azure/devops/boards/extensions/dependency-tracker?view=azure-devops#risk-graph

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 133 · 540 in bank

   You have an Azure subscription linked to an Azure Active Directory Premium Plan 1 tenant. A security review indicates that too many users have privileged access to resources. You need to deploy a privileged access management solution that meets the following requirements: • Enforces time limits on the use of privileged access • Requires approval to activate privileged access • Minimizes costs What should you do first?

   • AConfigure notifications when privileged roles are activated.
   • BConfigure alerts for the activation of privileged roles.
   • CEnforce Azure Multi-Factor Authentication (MFA) for role activation.
   • DUpgrade the license of the Azure Active Directory (Azure AD) tenant.

   Show answer

   Answer: D

   Explanation

   This question might stray outside the boundaries of AZ-400, but the answer is D. P2 licenses are required for the advanced license governing features. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure https://learn.microsoft.com/en-us/azure/active-directory/governance/licensing-fundamentals

   Source: Adapted from community discussion — UrbanRellik

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 134 · 540 in bank

   You have a GitHub Enterprise account. You need to enable push protection for secret scanning of the account repositories. What should you do first?

   • APurchase a GitHub Advanced Security license.
   • BPurchase Premium Plus support.
   • CEnforce multi-factor authentication (MFA).
   • DCreate an access policy for secrets.

   Show answer

   Answer: A

   Explanation

   Secret scanning alerts for partners run automatically on all public repositories. If you have a license for GitHub Advanced Security, you can enable and configure secret scanning alerts for users for any repository owned by an organization. https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/protecting-pushes-with-secret-scanning

   Source: Adapted from community discussion — AzureJobsTillRetire

   Next question

5. Question 135 · 540 in bank

   DRAG DROP - Your company has a project in Azure DevOps named Project1. All the developers at the company have Windows 10 devices. You need to create a Git repository for Project1. The solution must meet the following requirements: • Support large binary files. • Store binary files outside of the repository. • Use a standard Git workflow to maintain the metadata of the binary files by using commits to the repository. Which three actions should you perform in sequence on each developer’s device? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Configure personal access token (PAT)-based authentication (B): This will allow the developer to authenticate with Azure DevOps and access the Git repository for Project1. Perform a custom installation of GIT for Windows that includes GIT Large File Storage (LFS) (E): This will install the necessary tools on the developer's device to support the use of Git LFS. Configure GIT Large File Storage (LFS) file tracking (D): This will enable Git LFS file tracking, allowing the developer to work with large binary files in a standard Git workflow. Note that these actions should be performed in the correct order to achieve the desired result. By following these steps, developers will be able to work with large binary files in a Git repository for Project1 without storing them in the repository itself, using a standard Git workflow to maintain the metadata of the binary files by using commits to the repository.

   Source: Adapted from community discussion — Fal991l

   

   Next question

6. Question 136 · 540 in bank

   DRAG DROP - You are planning projects for three customers. Each customer's preferred process for work items is shown in the following table.

   

   The customers all plan to use Azure DevOps for work item management. Which work item process should you use for each customer? To answer, drag the appropriate work item processes to the correct customers. Each work item process may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Scrum - Choose Scrum when your team practices Scrum. This process works great if you want to track product backlog items (PBIs) and bugs on the Kanban board, or break PBIs and bugs down into tasks on the taskboard. Box 2: Agile - Choose Agile when your team uses Agile planning methods, including Scrum, and tracks development and test activities separately. This process works great if you want to track user stories and (optionally) bugs on the Kanban board, or track bugs and tasks on the taskboard. Box 3: CMMI - Choose CMMI when your team follows more formal project methods that require a framework for process improvement and an auditable record of decisions. With this process, you can track requirements, change requests, risks, and reviews. Incorrect Answers: XP: The work tracking objects contained within the default DevOps processes and DevOps process templates are Basic, Agile, CMMI, and Scrum XP (Extreme Programming) and DevOps are different things. They don't contradict with each other, they can be used together, but they have different base concepts inside them. Reference: https://docs.microsoft.com/en-us/azure/devops/boards/work-items/guidance/choose-process?view=azure-devops

   Source: Adapted from community discussion — wasthi

   References

   • Microsoft Learn

   

   Next question

7. Question 137 · 540 in bank

   You configure an Azure Application Insights availability test. You need to notify the customer services department at your company by email when availability is degraded. You create an Azure logic app that will handle the email and follow up actions. Which type of trigger should you use to invoke the logic app?

   • Aan HTTPWebhook trigger
   • Ban HTTP trigger
   • Ca Request trigger
   • Dan ApiConnection trigger

   Show answer

   Answer: C

   Explanation

   Correct answer is C. Probably the following article has generated a misunderstanding: https://docs.microsoft.com/en-us/azure/app-service/tutorial-send-email?tabs=dotnet It uses the Action "When an HTTP request is received" and defines it as HTTP Request trigger. But this is a Request Trigger and not an HTTP Trigger. Please look at the document below where it is explained the difference very well. https://docs.microsoft.com/en-us/azure/connectors/connectors-native-reqres You have to consider that http trigger is used only for outbound requests from the logic app. You can't use it for Inbound http requests. For those you have to use Request Trigger.

   Source: Adapted from community discussion — rdemontis

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 138 · 540 in bank

   You have an Azure DevOps organization named Contoso and an Azure subscription. You use Azure DevOps to build a containerized app named App1 and deploy App1 to an Azure container instance named ACI1. You need to restart ACI1 when App1 stops responding. What should you do?

   • AAdd a liveness probe to the YAML configuration of App1.
   • BAdd a readiness probe to the YAML configuration of App1.
   • CUse Connection Monitor in Azure Network Watcher.
   • DUse IP flow verify in Azure Network Watcher.

   Show answer

   Answer: A

   Explanation

   Answer is surely A. 1. Azure Container Instances probes work like Kubernetes probes. https://docs.microsoft.com/en-us/azure/container-instances/container-instances-liveness-probe 2. The question ask only for service availability 3. If the container is not available restart is required. And this is possibile only using liveness probe https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/

   Source: Adapted from community discussion — rdemontis

   References

   • Microsoft Learn
   • Kubernetes documentation
   • Kubernetes documentation
   • Microsoft Learn

   Next question

9. Question 139 · 540 in bank

   You have a multi-tier application that has an Azure Web Apps front end and an Azure SQL Database back end. You need to recommend a solution to capture and store telemetry data. The solution must meet the following requirements: ✑ Support using ad-hoc queries to identify baselines. ✑ Trigger alerts when metrics in the baseline are exceeded. ✑ Store application and database metrics in a central location. What should you include in the recommendation?

   • AAzure Event Hubs
   • BAzure SQL Database Intelligent Insights
   • CAzure Application Insights
   • DAzure Log Analytics

   Show answer

   Answer: D

   Explanation

   I think answer should be Log Analytics What kind of telemetry data is being handled by Log Analytics ? -> Data related to infrastructure and network level i.e., few of them are syslogs, IIS logs, custom logs, windows events, windows and linux performance counters, etc. For more information, please refer https://docs.microsoft.com/en-us/azure/azure-monitor/azure-monitor-log-hub What kind of telemetry data is being handled by App Insights ? -> Data related to code-level application performance level i.e., few of them are ping URL tests, page view counts, page view load data, HTTP requests, dependency calls, exceptions and stack traces, custom events and metrics that you code, trace logs, AJAX calls, user and session counts, run-time exceptions, failure anomalies, abnormal rise in exceptions, etc. For more information, please refer https://docs.microsoft.com/en-us/azure/azure-monitor/azure-monitor-app-hub and https://docs.microsoft.com/en-us/azure/azure-monitor/app/troubleshoot-faq#what-telemetry-is-collected-by-application-insights

   Source: Adapted from community discussion — gulopez

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 140 · 540 in bank

    You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 that is configured for autoscaling. You use Azure DevOps to build a web app named App1 and deploy App1 to VMSS1. App1 is used heavily and has usage patterns that vary on a weekly basis. You need to recommend a solution to detect an abnormal rise in the rate of failed requests to App1. The solution must minimize administrative effort. What should you include in the recommendation?

    • Athe Smart Detection feature in Azure Application Insights
    • Bthe Failures feature in Azure Application Insights
    • Can Azure Service Health alert
    • Dan Azure Monitor alert that uses an Azure Log Analytics query

    Show answer

    Answer: A

    Explanation

    Answer A. Smart dection has a standard rule named "Abnormal rise in exception volume" which can alert by e-mail. With feature Failures (answer B) you have to search by your own for exceptions.

    Source: Adapted from community discussion — Marang73

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-400 practice, question 131. 540 questions available.