AZ-400 practice questions 251–260

1. Question 251 · 540 in bank

   You have a GitHub repository. You need to ensure that all the code in the repository is scanned for vulnerabilities. What should you use?

   • ADependabot alerts
   • Bbranch protection rules
   • CCodeQL actions
   • DGitHub Advisory Database databases

   Show answer

   Answer: C

   Explanation

   Dependabot is complementary to CodeQL. While CodeQL detects security issues in your own code, Dependabot detects vulnerabilities that originate from your project’s dependencies. A recent example was Log4j, which introduced a number of upstream impacts for package registries and dependencies. Since Log4j is widely used across apps and websites to help log activity in applications and websites, this incident meant a lot of people were suddenly forced to quickly update their Log4j versions to avoid any potential issues. Source: https://github.blog/2022-04-22-5-simple-things-every-developer-can-do-to-ship-more-secure-code/#:~:text=Dependabot%20is%20complementary%20to%20CodeQL,for%20package%20registries%20and%20dependencies.

   Source: Adapted from community discussion — yana_b

   Next question

2. Question 252 · 540 in bank

   DRAG DROP - You create a Git repository named Repo1 in Azure Repos. You need to configure Repo1 to meet the following requirements: • Work items must be linked to a pull request. • Pull requests must have a minimum of two reviewers. • Pull requests must complete a code review by using a third-party tool. The solution must minimize administrative effort. Which type of policy should you use for each requirement? To answer, drag the appropriate policy types to the correct requirements. Each type policy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Work items must be linked to a pull request: Use a Branch policy. In Azure Repos, you can enforce linking work items to pull requests by configuring a branch policy. Pull requests must complete a code review by a third-party tool: Use a Status policy. Status checks are used to enforce external services (like third-party tools) to report their findings or results back to Azure Repos before a pull request can be completed. Pull requests must have a minimum of two reviewers: Use a Branch policy. In Azure Repos, you can enforce a minimum number of reviewers for pull requests by setting a branch policy. So, the answers are: Branch Status Branch

   Source: Adapted from community discussion — wolfyzawolf

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 253 · 540 in bank

   You have a 1-TB Azure Repos repository named repo1. You need to clone repo1. The solution must meet the following requirements: • You must be able to search the commit history of the /src directory • The amount of time it takes to clone the repository must be minimized Which command should you run?

   • Agit clone –-depth-1 git@ssh.dev.azure.com:v3/org/Project1/repo1
   • Bgit clone –-filter=blob:none git@ssh.dev.azure.com:v3/org/Project1/repo1
   • Cgit clone git@ssh.dev.azure.com.com:v3/org/Project1/repo1
   • Dgit clone –-filter=true:0 git@ssh.dev.azure.com:v3/org/Project1/repo1

   Show answer

   Answer: B

   Explanation

   Answer B - git clone --filter=blob:none ... Why ? You need to see the commit history, so you cannot used depth 1 (A) because that will fetch only latest commit. You need to minimize time, so you should not pull everything (C). If you have the commit history you can pull files later on a per need basis. Option D is incorrect syntax.

   Source: Adapted from community discussion — xRiot007

   Next question

4. Question 254 · 540 in bank

   Select 2

   You use GitHub for source control. You are evaluating whether to use proxying to add a private upstream MyGet package feed to your MyGet feed. What are two possible advantages of this approach? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Aminimizes the impact of upstream source availability issues
   • Bminimizes latency when accessing the package
   • Cprovides automatic authentication
   • Dminimizes the impact on your storage quota

   Show answer

   Answer: CD

   Explanation

   Anwers is correct, see link from Hector1812: Benefits: (C) Cupstream packages do not count against your MyGet storage quota (D) authentication against upstream, private MyGet feeds happens automatically

   Source: Adapted from community discussion — Technik

   Next question

5. Question 255 · 540 in bank

   You manage source code control and versioning by using GitHub. A large file is committed to a repository accidentally. You need to reduce the size of the repository. The solution must remove the file from the repository. What should you use?

   • Abfg
   • Blfs
   • Cgvfs
   • Dinit

   Show answer

   Answer: A

   Explanation

   A. bfg Explanation: BFG Repo-Cleaner is a simpler, faster alternative to git-filter-branch for cleansing bad data out of your Git repository history. It can be used to remove unwanted large files from your repository history, which can help to reduce the size of the repository. This tool will help you to remove the large file that was committed accidentally. Please note that once the file is removed with BFG, it's important to make sure that all clones of the repository are updated, because the history has been rewritten.

   Source: Adapted from community discussion — itexamsmicrosoft

   Next question

6. Question 256 · 540 in bank

   DRAG DROP - You have a GitHub repository. You need to configure Dependabot dependency scanning. The solution must meet the following requirements: • Automatically open a pull request to resolve an alert. • Automatically open a pull request when a dependency is updated. What should you enable for each requirement? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   According the documentation security and version updates open automatically pull requests only. I would say: Security updates Version updates P.M. Although the sentence "Automatically open a pull request when a dependency is updated" doesn't make sense because a pull request is opened in order to update a dependency and Not after it's updated -> "When Dependabot identifies an outdated dependency, it raises a pull request to update the manifest to the latest version of the dependency" https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates

   Source: Adapted from community discussion — Atina6

   

   Next question

7. Question 257 · 540 in bank

   DRAG DROP - You have a large repository named Repo1 that contains a directory named directory1. You plan to modify files in directory1. You need to create a clone of Repo1. The solution must minimize the amount of transferred data. How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct solution should be: scalar clone (Repo1 is a "large repository", so scalar is more appropriate) git sparse-checkout (to be able to see additional directories beyond the root of the repo since 'scalar clone' without any additional parameters has sparse-checkout enabled to minimize data transferred) Source: https://github.com/microsoft/git/blob/665fcd50013e4847ea0f9522dd6db8ef3de820ad/contrib/scalar/docs/getting-started.md#creating-a-new-scalar-clone

   Source: Adapted from community discussion — kdawg96

   

   Next question

8. Question 258 · 540 in bank

   You have a project in Azure DevOps. You need to implement a new branching solution. The solution must ensure that all pull requests meet the following requirements: • Include linked work items. • Pass build validation policies. • Require at least three reviewers. What should you include in the solution?

   • Abranch policies
   • Bpull request templates
   • Cbranch security
   • Dpull request permissions

   Show answer

   Answer: A

   Next question

9. Question 259 · 540 in bank

   HOTSPOT - Your company uses GitHub for source control. GitHub repositories store source code and store process documentation. The process documentation is saved as Microsoft Word documents that contain simple flow charts stored as .bmp files. You need to optimize the integration and versioning of the process documentation and the flow charts. The solution must meet the following requirements: ✑ Store documents as plain text. ✑ Minimize the number of files that must be maintained. ✑ Simplify the modification, merging, and reuse of flow charts. Simplify the modification, merging, and reuse of documents.

   

   Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Markdown (.md) Github understands several text formats, including .txt and .md. .md stands for a file written in Markdown. Box 2: Mermaid diagrams - Mermaid lets you create diagrams and visualizations using text and code. It is a Javascript based diagramming and charting tool that renders Markdown-inspired text definitions to create and modify diagrams dynamically. Reference: https://ourcodingclub.github.io/tutorials/git/ https://mermaid-js.github.io/mermaid/#/

   Source: Adapted from community discussion — zellck

   

   Next question

10. Question 260 · 540 in bank

    Select 2

    You use Git for source control. You need to commit a 3-GB ZIP file that contains virtual machines used for testing. The solution must meet the following requirements: • The file must be versioned. • The file must be associated with the corresponding code commits. Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    • AInstall the git-fat extension and associate the extension to ZIP files.
    • BInstall the Git LFS extension and associate the extension to ZIP files.
    • CInstall the git-stash extension and associate the extension to ZIP files.
    • DUse GZip to compress the file before committing the file.
    • EStore files in Azure Storage and enable blob versions.

    Show answer

    Answer: BE

    Explanation

    Answer: B & E Explanation: Git LFS (Large File Storage): This extension is specifically designed for handling large files within a Git repository. It stores the file contents in a separate backend (e.g., GitHub LFS servers), while only storing a pointer to the file within the Git repository itself. This significantly reduces the repository size and improves versioning performance. Associating the ZIP file extension with Git LFS ensures automatic handling of large files. Azure Storage with Blob Versions: This approach stores the actual 3GB ZIP file in Azure Storage, not the Git repository. By enabling blob versions, you maintain version history for the file, allowing you to revert to previous versions if needed. This solution keeps the Git repository lightweight while maintaining version control for the large file.

    Source: Adapted from community discussion — Rafi786_khan

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-400 practice, question 251. 540 questions available.