AZ-400 Practice Test 35 — 15 Questions

Question 1

Your organization uses Azure Pipelines to build and deploy a .NET Core application to Azure App Service. The build pipeline takes 15 minutes. You want to implement continuous integration (CI) triggers but only for changes to the 'src' folder. The repository is in Azure Repos. How should you configure the trigger?

Accepted Answer

Set trigger: paths: include: - 'src/*'. Option C is correct because specifying paths in the trigger filters CI builds to only that path. Option A is incorrect because it excludes a path. Option B is incorrect because the branch filter is not needed and path is not specified. Option D is incorrect because batch changes are not relevant.

Answer

Set trigger: paths: exclude: - 'src/*'

Answer

Set trigger: branches: include: - main

Answer

Set trigger: batch: true

Question 2

You have an Azure DevOps pipeline that deploys to multiple environments. You need to ensure that approvals are required before production deployment. Which pipeline configuration should you use?

Accepted Answer

Define an environment with required approvers for the production stage. Option C is correct because environment-level approvals gate the deployment. Option A is wrong because branch policies do not control approvals. Option B is wrong because stage-level approvals can be used but environment approvals are more granular. Option D is wrong because manual triggers do not enforce approvals.

Answer

Set the pipeline trigger to 'Manual' only

Answer

Add a 'Manual Intervention' task in the pipeline

Answer

Configure branch policies on the main branch

Question 3

Which TWO features of Azure Pipelines help you manage build artifacts across stages? (Choose two.)

Accepted Answer

Download Pipeline Artifact task. Options A and D are correct. A allows sharing artifacts between stages. D allows downloading artifacts from a previous stage. B is wrong because variables are not artifacts. C is wrong because build tags are for filtering, not artifact management.

Answer

Pipeline variables

Answer

Release gates

Answer

Build tags

Question 4

You are designing a release pipeline for a containerized application deployed to Azure Kubernetes Service (AKS). You want to implement a strategy where the new version is deployed to a small subset of pods first, and if healthy, gradually rolled out to all pods. Which Kubernetes deployment strategy should you use?

Accepted Answer

Canary deployment. Option B is correct because a canary deployment releases the new version to a subset of pods and gradually increases traffic. Option A is wrong because rolling update gradually replaces pods but doesn't use traffic splitting for validation. Option C is wrong because blue-green switches all traffic at once. Option D is wrong because recreate deletes all old pods before creating new ones.

Answer

Rolling update

Answer

Blue-green deployment

Answer

Recreate deployment

Question 5

The exhibit shows a parameters file for an ARM template deployment. During a release pipeline, the deployment fails with the error 'The provided value for the template parameter 'sku' is not valid'. The ARM template defines the 'sku' parameter as an allowed value set of ['F1', 'D1', 'B1', 'S1']. What could be the issue?

Accepted Answer

The parameter file contains an extra space or hidden character in the 'sku' value.. Option A is correct because the error indicates that the provided value 'S1' is not in the allowed values, but the exhibit shows 'S1', which should be valid. However, the error could occur if the parameter file has a typo or extra whitespace that makes it invalid. Option B is wrong because the parameter file is properly formatted. Option C is wrong because the schema version is correct. Option D is wrong because the parameter file does not include 'sku' in the wrong section.

Answer

The parameter file is missing the '$schema' property.

Answer

The 'sku' parameter is defined in the 'variables' section instead of 'parameters'.

Answer

The ARM template expects a different API version for the resource.

Question 6

You are designing a release pipeline for a microservices application deployed to Azure Kubernetes Service (AKS). You need to implement a strategy that minimizes downtime during updates by gradually shifting traffic to the new version while monitoring for errors. Which deployment strategy should you use?

Accepted Answer

Canary deployment. Option C is correct because canary deployment gradually shifts traffic and allows monitoring. Option A is wrong because rolling replacement updates pods incrementally but doesn't shift traffic gradually. Option B is wrong because blue-green deploys a full new environment and switches all traffic, not gradual. Option D is wrong because recreate replaces all pods at once, causing downtime.

Answer

Recreate deployment

Answer

Blue-green deployment

Answer

Rolling update

Question 7

Refer to the exhibit. You deploy this Bicep template to create an Azure App Service with a custom container. The deployment succeeds, but the container fails to start with an error 'Container didn't respond to HTTP pings'. What is the most likely missing configuration?

Accepted Answer

The template is missing the 'healthCheckPath' property in siteConfig.. Option D is correct because the container needs a health check path; the default is '/', but the container may expect a different path. Option A is wrong because the docker image is specified. Option B is wrong because the storage setting is not critical. Option C is wrong because the app setting is present.

Answer

The container image is not publicly accessible.

Answer

The WEBSITES_ENABLE_APP_SERVICE_STORAGE should be set to 'true'.

Answer

The template is missing the app setting 'WEBSITES_PORT'.

Question 8

Your team uses a YAML-based build pipeline in Azure Pipelines. You need to ensure that the pipeline runs automatically when a pull request is created against the main branch, but only if the changes include modifications to the 'src/' directory. Which trigger configuration should you use?

Accepted Answer

trigger: none; pr: branches: include: - main paths: include: - src/*. Option B is correct because the 'pr' trigger with path filters ensures the pipeline runs on PRs only when changes match the specified paths. Option A is wrong because it triggers on all PRs without filtering. Option C is wrong because branch filters alone do not filter by path. Option D is wrong because 'trigger' is for CI builds, not PR triggers.

Answer

trigger: - main; pr: none

Answer

trigger: none; pr: - main

Answer

pr: - main; trigger: - main

Question 9

Which THREE factors should you consider when designing a release pipeline for a critical production application? (Choose three.)

Accepted Answer

Rollback strategy. Options A, B, and D are correct. A: Approval gates ensure controlled deployments. B: Rollback strategy is essential for failures. D: Monitoring deployment health is crucial. Option C is wrong because least privilege is a security principle, not specific to release pipeline design. Option E is wrong because single environment is not a factor; you typically have multiple environments.

Answer

Use of service principal with least privilege

Answer

Single environment deployment

Question 10

Your team uses Azure Pipelines for CI/CD. The pipeline builds a Docker image and pushes it to Azure Container Registry (ACR). You need to ensure that only the main branch triggers a build of the Docker image. What should you configure in the pipeline YAML?

Accepted Answer

Set 'trigger: branches: include: - main'. Option A is correct because the 'trigger' section with branch inclusion filters which branches trigger the pipeline. Option B is incorrect because it triggers on any branch. Option C is incorrect because the 'pr' trigger is for pull requests. Option D is incorrect because the condition evaluates at runtime, not at trigger time.

Answer

Set 'pr: branches: include: - main'

Answer

Add a condition: 'eq(variables['Build.SourceBranch'], 'refs/heads/main')' to the job.

Answer

Set 'trigger: branches: include: - *'

Question 11

You have a pipeline that uses Azure Repos Git. You need to enforce that all commits to the main branch are associated with a work item. Which branch policy should you enable?

Accepted Answer

Require linked work items. Option B is correct because 'Require linked work items' enforces that each commit or PR has a work item. Option A is wrong because it only requires comments. Option C is wrong because it only checks build status. Option D is wrong because it limits who can push, not work item linking.

Answer

Limit merge types

Answer

Require a minimum number of reviewers

Answer

Check for comment resolution

Question 12

The pipeline fails because the artifact is empty. What is the most likely cause?

Accepted Answer

The build output is not copied to the staging directory. Option A is correct because the build output is not copied to the staging directory. Option B is wrong because the pattern is likely correct. Option C is wrong because the task name is correct. Option D is wrong because the artifact name is valid.

Answer

The projects pattern '**/*.csproj' does not match any files

Answer

The task 'PublishBuildArtifacts@1' is misspelled

Answer

The artifact name 'drop' is invalid

Question 13

Your team uses Azure Pipelines and wants to automatically create a release every time a build succeeds on the main branch. Which trigger should you configure?

Accepted Answer

Build completion trigger in the release pipeline. Option D is correct because the build completion trigger in a release pipeline automatically creates a release when a build completes. Option A is wrong for a release pipeline. Option B is wrong because CI triggers are for build pipelines. Option C is wrong because scheduled triggers run at specific times, not on build completion.

Answer

Pull request trigger in the build pipeline

Answer

Continuous integration (CI) trigger in the release pipeline

Answer

Scheduled trigger in the release pipeline

Question 14

Your pipeline builds a .NET application and runs unit tests. You notice that the pipeline takes too long because it restores NuGet packages on every run. You want to cache the NuGet packages to speed up subsequent builds. Which task should you use?

Accepted Answer

Cache@2 (CacheBeta). Option C is correct because the Cache task (CacheBeta@2) is designed to cache dependencies like NuGet packages. Option A is wrong because the NuGet task has a restore command but no caching. Option B is wrong because the Copy Files task is for copying files. Option D is wrong because the PowerShell task can be used but is not the built-in caching solution.

Answer

NuGetCommand@2 with the restore command

Answer

CopyFiles@2

Answer

PowerShell@2 to manually download and cache

Question 15

Which THREE components are required to implement a self-hosted agent pool in Azure Pipelines?

Accepted Answer

The Azure Pipelines agent software installed on the machine.. Options A, B, and C are correct. A self-hosted agent requires a virtual machine to run the agent, the agent software installed, and a personal access token (PAT) to register the agent with Azure DevOps. Option D is wrong because a service connection is not needed for the agent registration. Option E is wrong because a YAML pipeline is not required to set up the agent.

Answer

An Azure Resource Manager service connection.

Answer

A YAML pipeline definition.