AZ-400 Sample Questions & Answers

A team is adopting trunk-based development using GitHub. To maintain code quality and prevent broken builds, they want to enforce that all pull requests targeting the main branch must pass a series of checks before they can be merged. These checks include a successful build, a minimum code coverage percentage, and a security scan. What GitHub feature should be configured on the main branch to enforce these requirements?

A DevOps engineer needs to write a Kusto Query Language (KQL) query in Log Analytics to investigate performance issues. The goal is to find the average request duration for all failed requests (resultCode starts with '5') in the requests table over the last 24 hours, summarized into 1-hour intervals. Which KQL query correctly accomplishes this?

A manufacturing company is modernizing its application deployment. The primary goal is to minimize downtime and risk when deploying new versions of their critical inventory management web app, which is hosted on Azure App Service. They want to route a small percentage of live traffic to the new version for a period of time to monitor its performance and stability before rolling it out to all users. Which deployment strategy should they implement?

True or False: When using GitHub Advanced Security, secret scanning is limited to detecting secrets only in the default branch of a repository.

A DevOps team manages multiple projects, each with its own Azure Pipeline. To ensure consistency and reduce redundant code, they want to create a reusable component that defines a sequence of steps for running integration tests. This component should be easily versioned and shared across different pipelines. Which Azure Pipelines feature is best suited for this purpose?

Case Study:

A healthcare technology company, HealthData Inc., is migrating its monolithic patient portal application to a microservices architecture on Azure Kubernetes Service (AKS). The company operates under strict regulatory compliance (HIPAA) and must maintain a high degree of security and traceability.

Current Situation:
The development team uses GitHub for source code management. The current CI/CD process is manual, slow, and error-prone. There is no automated security scanning, and secrets like database connection strings are stored in configuration files within the repositories. The operations team has limited Kubernetes experience, and developers need a way to test their services in isolated, production-like environments before merging code.

Requirements:

1. CI/CD Automation: Implement a fully automated build, test, and deployment pipeline using GitHub Actions.
2. Security: All container images must be scanned for vulnerabilities. Secrets must be removed from source code and managed securely. A full audit trail of all code changes and deployments is required.
3. Developer Environments: Provide developers with on-demand, self-service environments for testing pull requests.
4. Deployment Strategy: Deployments to the production AKS cluster must use a progressive exposure model to minimize risk.

Which proposed solution best addresses all of HealthData Inc.'s requirements?

A team is designing a package management strategy using Azure Artifacts. They produce several internal NuGet packages that are consumed by different applications. They need to create a feed that provides access to their own packages as well as packages from the official nuget.org repository. New applications should only use packages that have been vetted and approved by a quality assurance team. How should they configure their feeds to meet these requirements?

A DevOps engineer is optimizing a multi-stage YAML pipeline that builds, tests, and deploys a large application. The build and test stages take a significant amount of time. The engineer observes that several independent jobs within the test stage could run concurrently. What is the most effective way to configure the pipeline to run these test jobs in parallel?

A project requires a wiki to document its architecture, coding standards, and release procedures. The documentation will include complex diagrams to illustrate process flows and system interactions. The team wants to store these diagrams as text within the markdown files so they can be version-controlled and easily updated. Which syntax should the team use within the Azure DevOps wiki to embed these diagrams as code?

You are creating a Bicep template to deploy an Azure Web App. You need to ensure that the application setting ASPNETCORE_ENVIRONMENT is set based on an input parameter named environmentType. If environmentType is 'Production', the value should be 'Production'; otherwise, it should be 'Development'. Which Bicep expression should you use to define the value of this application setting?