Designing and Implementing Microsoft DevOps Solutions540 questions across 54 pages are complete and free, with no account or card.
540 questions in this bank
Free access · progress saved on this device
You manage source control by using GitHub. You have a file named Data.txt that contains sensitive data. A user pushes Data.txt to a repository. You need to purge the file from the repository. Which two commands can you use? Each correct answer presents a complete solution. NOTE: Each correct solution is worth one point.
Answer: C
You use GitHub Enterprise for source control repositories. The repositories store C# code. You need to enable CodeQL scanning for the repositories. What should you do?
Answer: D
D. Push a GitHub Actions workflow to all the repositories. Explanation: To enable CodeQL scanning, you need to create and configure a GitHub Actions workflow that performs the CodeQL analysis. This workflow must be added to each repository you want to scan. Dependabot security updates and alerts (options A and B) are related to dependency management, not CodeQL. While configuring a required workflow (option C) can enforce scanning, you must first deploy the workflow to the repositories (option D).
Source: Adapted from community discussion — fuchsm999
HOTSPOT - You have a GitHub repository that contains a workflow named WF1. WF1 is used to build code for an app named App1. You need to add a build status badge to the README.md file in the repository for App1. How should you complete the URL for the badge? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
You have a GitHub repository. You need to create a tag named v3.0.5 and ensure that the tag is available in the remote repository. Which two commands should you run? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Answer: BC
You have a GitHub repository. You need to ensure that all changes to code are validated by your company’s security department before the main branch is deployed. Which two actions can you perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Answer: DE
Sorry, the given answer is correct: D. E. Create a CODEOWNERS file. This defines who can approve changes to specific parts of the code, ensuring that necessary validations are performed by the security department or other relevant teams.
Source: Adapted from community discussion — Mattt
HOTSPOT - You have a .NET app named App1. You need to upload App1 to GitHub Packages. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
DRAG DROP - You have a GitHub repository named repo1 and an Azure key vault named kv1. In repo1, you plan to create a workflow named Workflow1 that will deploy a database server by using credentials stored in kv1. You need to ensure that Workflow1 can retrieve the credentials from kv1. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
DRAG DROP - You are developing a full Microsoft .NET Framework solution that includes unit tests. You need to configure SonarQube to perform a code quality validation of the C# code as part of the build pipelines. Which four tasks should you perform in sequence? To answer, move the appropriate tasks from the list of tasks to the answer area and arrange them in the correct order. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Step 1: Prepare Analysis Configuration Prepare Analysis Configuration task, to configure all the required settings before executing the build. This task is mandatory. In case of .NET solutions or Java projects, it helps to integrate seamlessly with MSBuild, Maven and Gradle tasks. Step 2: Visual Studio Build - Reorder the tasks to respect the following order: Prepare Analysis Configuration task before any MSBuild or Visual Studio Build task. Step 3: Visual Studio Test - Reorder the tasks to respect the following order: Run Code Analysis task after the Visual Studio Test task. Step 4: Run Code Analysis - Run Code Analysis task, to actually execute the analysis of the source code. This task is not required for Maven or Gradle projects, because scanner will be run as part of the Maven/Gradle build. Note: Reference: https://docs.sonarqube.org/display/SCAN/Analyzing+with+SonarQube+Extension+for+VSTS-TFS
Source: Adapted from community discussion — vglearn
Your company uses Azure DevOps for the build pipelines and deployment pipelines of Java-based projects. You need to recommend a strategy for managing technical debt. Which action should you include in the recommendation?
Answer: B
DRAG DROP - You need to find and isolate shared code. The shared code will be maintained in a series of packages. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Step 1: Create a dependency graph for the application By linking work items and other objects, you can track related work, dependencies, and changes made over time. All links are defined with a specific link type. For example, you can use Parent/Child links to link work items to support a hierarchical tree structure. Whereas, the Commit and Branch link types support links between work items and commits and branches, respectively. Step 2: Group the related components. Packages enable you to share code across your organization: you can compose a large product, develop multiple products based on a common shared framework, or create and share reusable components and libraries. Step 3: Assign ownership to each component graph Reference: https://docs.microsoft.com/en-us/azure/devops/boards/queries/link-work-items-support-traceability?view=azure-devops&tabs=new-web-for m https://docs.microsoft.com/en-us/visualstudio/releasenotes/tfs2017-relnote s
Source: Adapted from community discussion — motu
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
AZ-400 practice, question 261. 540 questions available.
Version 1.0.0. How we source questions
