Courseiva
Design and implement build and release pipelineshardMultiple SelectObjective-mapped

AZ-400 Practice Question: Design and implement build and release pipelines

Which THREE factors should you consider when designing a release pipeline for a critical production application? (Choose three.)

⚠ Common exam trap

It's easy for candidates to confuse security best practices (like service principal least privilege) with release pipeline design factors, or they mistakenly think a single environment is acceptable for critical apps, ignoring the necessity of staging and rollback capabilities.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Rollback strategy

A release pipeline for a critical production application must include a rollback strategy (e.g., deployment slots or redeploying a previous artifact) to recover quickly from failed releases, deployment health monitoring (e.g., Application Insights, Azure Monitor) to detect issues early and trigger rollbacks or alerts, and approval gates before production deployment to ensure manual or automated checks are passed. These three factors together minimize downtime and ensure controlled, safe releases.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Use of service principal with least privilege

    Why it's wrong here

    While a service principal with least privilege is a critical security best practice for authenticating Azure DevOps to Azure resources, it is an implementation detail of authentication rather than a core factor that shapes the overall release pipeline design.

  • Rollback strategy

    Why this is correct

    A rollback strategy is essential because even with thorough testing in lower environments, production failures can still occur; a well-defined process to revert to the last known good artifact, whether through redeployment or automated restore, minimizes mean time to recovery (MTTR) and reduces customer impact.

  • Single environment deployment

    Why it's wrong here

    Designing for a single environment deployment is insufficient because release pipelines typically progress through dev, test, and production environments to incrementally validate changes; relying on one environment eliminates the staging and approval phases that reduce deployment risk.

  • Deployment health monitoring

    Why this is correct

    Deployment health monitoring involves tracking telemetry, logs, and key metrics such as error rates, response times, and resource utilization after deployment to detect anomalies; this gives teams immediate signals of a bad release and can trigger automated rollbacks or alerts for swift corrective action.

  • Approval gates before production deployment

    Why this is correct

    Approval gates before production deployment require designated stakeholders to review and manually approve the release, providing an essential control point for compliance verification, risk assessment, and business sign-off, especially in regulated industries where automated deployment must be coupled with human oversight.

Visual reference

Client DHCP Server 1 Discover (broadcast) 2 Offer (IP: 192.168.1.10) 3 Request (I accept) 4 Acknowledge (lease confirmed) DORA — the four-step DHCP lease process

Go deeper

Related to this question

About these practice questions

Courseiva writes every AZ-400 question from scratch — 823 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AZ-400 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-400 exam.