AZ-400 Config management strategies Practice Question
You are designing a release pipeline for a microservices application. Which two strategies can you use to manage configuration across different environments? (Choose two.)
⚠ Common exam trap
Candidates often confuse pipeline definition techniques (like multi-stage YAML with stage-level variables) with configuration management strategies, or incorrectly assume XML transformations are applicable to modern microservices deployments that use JSON, YAML, or environment variables instead of web.config files.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use variable groups linked to Azure Key Vault.
Options A and B are correct because variable groups provide a centralized and secure way to manage configuration across multiple environments and pipelines. Option A uses Azure Key Vault for secrets, integrating with access policies and rotation, while option B stores non-sensitive environment-specific settings. Option C is incorrect because XML transformation targets web.config files, which are legacy .NET artifacts and not typical for modern microservices that use JSON, YAML, or environment variables. Option D is incorrect because stage-level variables are scoped to a single pipeline definition and do not offer a reusable, centralized configuration mechanism across different environments or pipelines; variable groups are designed for that purpose.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use variable groups linked to Azure Key Vault.
Why this is correct
Linking variable groups to Azure Key Vault is the recommended way to manage secrets and non-sensitive configuration centrally; it stores values securely in Key Vault, supports access control, auditing, and automatic rotation, and references them in pipelines without exposing secrets in source control.
- ✓
Use environment-specific variable groups.
Why this is correct
Environment-specific variable groups allow you to define separate variable sets for each deployment environment, such as dev, test, and production, without duplicating pipelines or baking environment values into code, making configuration management scalable and maintainable.
- ✗
Use XML transformation tasks for web.config.
Why it's wrong here
XML transformation tasks for web.config are a legacy tool for ASP.NET Framework applications only; they cannot handle JSON or environment variables, do not integrate with Azure Key Vault or secret management, and are therefore not a modern or comprehensive configuration management strategy.
- ✗
Use multi-stage YAML pipelines with stage-level variables.
Why it's wrong here
Using multi-stage YAML pipelines with stage-level variables is primarily a pipeline organization technique; it still hardcodes variable values in the pipeline definition, lacks secure secret handling, and does not provide a centralized, auditable configuration management solution compared to variable groups or Key Vault.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-400 exam frequently reuses these exact scenarios with slightly different constraints.
✓Use variable groups linked to Azure Key Vault.Correct answer▾
Why this is correct
Linking variable groups to Azure Key Vault is the recommended way to manage secrets and non-sensitive configuration centrally; it stores values securely in Key Vault, supports access control, auditing, and automatic rotation, and references them in pipelines without exposing secrets in source control.
✗Use XML transformation tasks for web.config.Wrong answer — click to see why▾
Why this is wrong here
XML transformation is for config files, not a variable management strategy.
✗Use multi-stage YAML pipelines with stage-level variables.Wrong answer — click to see why▾
Why this is wrong here
This is a valid approach but the question asks for 'strategies' and the two most common are variable groups and Key Vault.
Analysis generated from the official AZ-400blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Introduction to DevOps and Azure DevOps
Key term
Pipeline
A pipeline is an automated series of steps that takes code from development to production, ensuring quality and speed.
Key term
Environment
An environment is a dedicated set of computing resources, configurations, and services used to develop, test, or host software applications in a controlled and repeatable way.
About these practice questions
This AZ-400 question is part of Courseiva's 823-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-400 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-400 exam.