AZ-400 practice questions 161–170

1. Question 161 · 540 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company's development process: ✑ Licensing violations ✑ Prohibited libraries Solution: You implement continuous integration. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   You can integrate WhiteSource into your CI pipeline as it is done in the lab referenced in the explanation. But implementing CI could be also done with a build task or build+test or build+test+code analysis or ... So the answer is "B = No"

   Source: Adapted from community discussion — tom999

   Next question

2. Question 162 · 540 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company's development process: ✑ Licensing violations ✑ Prohibited libraries Solution: You implement pre-deployment gates. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   the given answer is Correct. it should be No cause it's not the role of pre-deployment gates to check for your licenses Pre-deployment gates ensure there are no active issues in the work item or problem management system before deploying a build to an environment.

   Source: Adapted from community discussion — noussa

   References

   • Microsoft Learn

   Next question

3. Question 163 · 540 in bank

   You plan to provision a self-hosted Linux agent. Which authentication mechanism should you use to register the self-hosted agent?

   • Apersonal access token (PAT)
   • BSSH key
   • CAlternate credentials
   • Dcertificate

   Show answer

   Answer: A

   Explanation

   Authenticate with a personal access token (PAT) Sign in with the user account you plan to use in your Azure DevOps organization

   Source: Adapted from community discussion — 27close

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 164 · 540 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company's development process: ✑ Licensing violations ✑ Prohibited libraries Solution: You implement automated security testing. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   IMO this is the correct answer (it should be Yes). I've already explained in the previous answer why Continuous Integration is wrong, and that Whitesource Bolt is not necessarily part of CI. However, Whitesource Bolt *IS* an automated security testing solution (which is added to the build pipeline). This answer is more specific, and more correct, than the CI answer.

   Source: Adapted from community discussion — JimmyC

   Next question

5. Question 165 · 540 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to update the Azure DevOps strategy of your company. You need to identify the following issues as they occur during the company's development process: ✑ Licensing violations ✑ Prohibited libraries Solution: You implement continuous deployment. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   Instead implement continuous integration. Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories. Reference: https://azuredevopslabs.com/labs/vstsextend/whitesource/

   Next question

6. Question 166 · 540 in bank

   SIMULATION - You manage a website that uses an Azure SQL Database named db1 in a resource group named RG1lod11566895. You need to modify the SQL database to protect against SQL injection. To complete this task, sign in to the Microsoft Azure portal.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Set up Advanced Threat Protection in the Azure portal 1. Sign into the Azure portal. 2. Navigate to the configuration page of the server you want to protect. In the security settings, select Advanced Data Security. 3. On the Advanced Data Security configuration page: 4. Enable Advanced Data Security on the server. Note: Advanced Threat Protection for Azure SQL Database detects anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases. Advanced Threat Protection can identify Potential SQL injection, Access from unusual location or data center, Access from unfamiliar principal or potentially harmful application, and Brute force SQL credentials Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-account-create https://docs.microsoft.com/en-us/azure/azure-sql/database/threat-detection-configure

   Source: Adapted from community discussion — meinekarte

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 167 · 540 in bank

   HOTSPOT - Your company has an Azure subscription. The company requires that all resource groups in the subscription have a tag named organization set to a value of Contoso. You need to implement a policy to meet the tagging requirement. How should you complete the policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: " Microsoft.Resources/subscriptions/resourceGroups" Box 2: "Deny", Sample - Enforce tag and its value on resource groups }, "policyRule": { "if": { "allOf": [ { "field": "type", "equals": "Microsoft.Resources/subscriptions/resourceGroups" }, { "not": { "field": "[concat('tags[',parameters('tagName'), ']')]", "equals": "[parameters('tagValue')]" } } ] }, "then": { "effect": "deny" } } } } Reference: https://docs.microsoft.com/en-us/azure/governance/policy/samples/enforce-tag-on-resource-groups

   Source: Adapted from community discussion — TosO

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 168 · 540 in bank

   You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication. What should you do first?

   • ACreate a conditional access policy in Azure AD.
   • BRegister GitHub in Azure AD.
   • CCreate an Azure Active Directory B2C (Azure AD B2C) tenant.
   • DModify the Security settings of the GitHub organization.

   Show answer

   Answer: B

   Explanation

   Given answer is correct. Azure AD Enterprise Apps Market Place: Azure Active Directory> Enterprise Applications> New Application> Search and use Github

   Source: Adapted from community discussion — qrkon

   References

   • Microsoft Learn

   Next question

9. Question 169 · 540 in bank

   You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. You need to prevent releases from being deployed unless the releases comply with the Azure Policy rules assigned to Sub1. What should you do in the release pipeline of Project1?

   • AAdd a deployment gate.
   • BModify the Deployment queue settings.
   • CConfigure a deployment trigger.
   • DCreate a pipeline variable.

   Show answer

   Answer: A

   References

   • Microsoft Learn

   Next question

10. Question 170 · 540 in bank

    DRAG DROP - You have an Azure Kubernetes Service (AKS) implementation that is RBAC-enabled. You plan to use Azure Container Instances as a hosted development environment to run containers in the AKS implementation. You need to configure Azure Container Instances as a hosted environment for running the containers in AKS. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Step 1: Create a YAML file. If your AKS cluster is RBAC-enabled, you must create a service account and role binding for use with Tiller. To create a service account and role binding, create a file named rbac-virtual-kubelet.yaml Step 2: Run kubectl apply. Apply the service account and binding with kubectl apply and specify your rbac-virtual-kubelet.yaml file. Step 3: Run helm init. Configure Helm to use the tiller service account: helm init --service-account tiller You can now continue to installing the Virtual Kubelet into your AKS cluster. Reference: https://docs.microsoft.com/en-us/azure/aks/virtual-kubelet

    Source: Adapted from community discussion — TosO

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-400 practice, question 161. 540 questions available.