Download Microsoft.AZ-400.Dump4Pass.2024-01-26.198q.tqb

Download Exam

File Info

Exam Microsoft Azure DevOps Solutions
Number AZ-400
File Name Microsoft.AZ-400.Dump4Pass.2024-01-26.198q.tqb
Size 11 MB
Posted Jan 26, 2024
Download Microsoft.AZ-400.Dump4Pass.2024-01-26.198q.tqb

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Purchase

Coupon: MASTEREXAM
With discount: 20%






Demo Questions

Question 1

You are building a Microsoft ASP.NET application that requires authentication.  
You need to authenticate users by using Azure Active Directory (Azure AD).  
What should you do first?


  1. Assign an enterprise application to users and groups
  2. Create an app registration in Azure AD
  3. Configure the application to use a SAML endpoint
  4. Create a new OAuth token from the application
  5. Create a membership database in an Azure SQL database
Correct answer: B
Explanation:
Register your application to use Azure Active Directory. Registering the application means that your developers can use Azure AD to authenticate users and request access to user resources such as email, calendar, and documents.    Reference: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/developer-guidance-for-integrating-applications
Register your application to use Azure Active Directory. Registering the application means that your developers can use Azure AD to authenticate users and request access to user resources such as email, calendar, and documents.  
  
Reference: 
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/developer-guidance-for-integrating-applications



Question 2

You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity.    
The solution must use the principle of least privilege.  
To complete this task, sign in to the Microsoft Azure portal.


  1. See the explanation
Correct answer: A
Explanation:
1. In Azure portal navigate to the az400-9940427-main app.  2. Scroll down to the Settings group in the left navigation.  3. Select Managed identity.  4. Within the System assigned tab, switch Status to On. Click Save.              Reference: https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity
1. In Azure portal navigate to the az400-9940427-main app.  
2. Scroll down to the Settings group in the left navigation.  
3. Select Managed identity.  
4. Within the System assigned tab, switch Status to On. Click Save.  
        
    
Reference: 
https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity



Question 3

You have an Azure Resource Manager template that deploys a multi-tier application.    
You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application.  
What should you use?


  1. Azure Key Vault
  2. a Web.config file
  3. an Appsettings.json file
  4. an Azure Storage table
  5. an Azure Resource Manager parameter file
Correct answer: A
Explanation:
When you need to pass a secure value (like a password) as a parameter during deployment, you can retrieve the value from an Azure Key Vault. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID. The key vault can exist in a different subscription than the resource group you are deploying to.    Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault-parameter
When you need to pass a secure value (like a password) as a parameter during deployment, you can retrieve the value from an Azure Key Vault. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID. The key vault can exist in a different subscription than the resource group you are deploying to.  
  
Reference: 
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault-parameter



Question 4

Your company plans to implement a new compliance strategy that will require all Azure web apps to be backed up every five hours.    
You need to back up an Azure web app named az400-11566895-main every five hours to an Azure Storage account in your resource group.  
To complete this task, sign in to the Microsoft Azure portal.


  1. See the explanatiob
Correct answer: A
Explanation:
With the storage account ready, you can configure backs up in the web app or App Service.  1. Open the App Service az400-11566895-main, which you want to protect, in the Azure Portal and browse to Settings > Backups. Click Configure and a Backup  Configuration blade should appear.  2. Select the storage account.  3. Click + to create a private container. You could name this container after the web app or App Service.  4. Select the container.  5. If you want to schedule backups, then set Scheduled Backup to On and configure a schedule: every five hours 6. Select your retention. Note that 0 means never delete backups.  7. Decide if at least one backup should always be retained.  8. Choose if any connected databases should be included in the web app backup.  9. Click Save to finalize the backup configuration.            Reference: https://petri.com/backing-azure-app-service
With the storage account ready, you can configure backs up in the web app or App Service.  
1. Open the App Service az400-11566895-main, which you want to protect, in the Azure Portal and browse to Settings > Backups. Click Configure and a Backup  
Configuration blade should appear.  
2. Select the storage account.  
3. Click + to create a private container. You could name this container after the web app or App Service.  
4. Select the container.  
5. If you want to schedule backups, then set Scheduled Backup to On and configure a schedule: every five hours 
6. Select your retention. Note that 0 means never delete backups.  
7. Decide if at least one backup should always be retained.  
8. Choose if any connected databases should be included in the web app backup.  
9. Click Save to finalize the backup configuration.  
        
  
Reference: 
https://petri.com/backing-azure-app-service



Question 5

Your company has an Azure subscription named Subscription1. Subscription1 is associated to an Azure Active Directory tenant named contoso.com.    
You need to provision an Azure Kubernetes Services (AKS) cluster in Subscription1 and set the permissions for the cluster by using RBAC roles that reference the identities in contoso.com.    
Which three objects should you create in sequence? To answer, move the appropriate objects from the list of objects to the answer area and arrange them in the correct order.  


Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Step 1: Create an AKS cluster   Step 2: a system-assigned managed identity To create an RBAC binding, you first need to get the Azure AD Object ID.  1. Sign in to the Azure portal.  2. In the search field at the top of the page, enter Azure Active Directory.  3. Click Enter.  4. In the Manage menu, select Users.  5. In the name field, search for your account.  6. In the Name column, select the link to your account.  7. In the Identity section, copy the Object ID.            Step 3: a RBAC binding Reference:   https://docs.microsoft.com/en-us/azure/developer/ansible/aks-configure-rbac
Step 1: Create an AKS cluster 
  
Step 2: a system-assigned managed identity 
To create an RBAC binding, you first need to get the Azure AD Object ID.  
1. Sign in to the Azure portal.  
2. In the search field at the top of the page, enter Azure Active Directory.  
3. Click Enter.  
4. In the Manage menu, select Users.  
5. In the name field, search for your account.  
6. In the Name column, select the link to your account.  
7. In the Identity section, copy the Object ID.  
  
        
Step 3: a RBAC binding 
Reference:   
https://docs.microsoft.com/en-us/azure/developer/ansible/aks-configure-rbac



Question 6

You manage build and release pipelines by using Azure DevOps. Your entire managed environment resides in Azure.    
You need to configure a service endpoint for accessing Azure Key Vault secrets. The solution must meet the following requirements:   
  • Ensure that the secrets are retrieved by Azure DevOps.  
  • Avoid persisting credentials and tokens in Azure DevOps.    
How should you configure the service endpoint? To answer, select the appropriate options in the answer area.    
NOTE: Each correct selection is worth one point. 


Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Box 1: Azure Pipelines service connection   Box 2: Managed Service Identity Authentication The managed identities for Azure resources feature in Azure Active Directory (Azure AD) provides Azure services with an automatically managed identity in Azure AD. You can use the identity to authenticate to any service that supports Azure AD authentication, including Key Vault, without any credentials in your code.    Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/deploy/azure-key-vault   https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
Box 1: Azure Pipelines service connection   
Box 2: Managed Service Identity Authentication 
The managed identities for Azure resources feature in Azure Active Directory (Azure AD) provides Azure services with an automatically managed identity in Azure AD. You can use the identity to authenticate to any service that supports Azure AD authentication, including Key Vault, without any credentials in your code.  
  
Reference: 
https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/deploy/azure-key-vault   
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview



Question 7

Your company is creating a suite of three mobile applications.    
You need to control access to the application builds. The solution must be managed at the organization level.  
What should you use? To answer, select the appropriate options in the answer area.  
NOTE: Each correct selection is worth one point.    


Correct answer: To work with this question, an Exam Simulator is required.
Explanation:
Box 1: Microsoft Visual Studio App Center distribution Groups Distribution Groups are used to control access to releases. A Distribution Group represents a set of users that can be managed jointly and can have common access to releases. Example of Distribution Groups can be teams of users, like the QA Team or External Beta Testers or can represent stages or rings of releases, such as Staging.    Box 2: Shared Shared distribution groups are private or public distribution groups that are shared across multiple apps in a single organization. Shared distribution groups eliminate the need to replicate distribution groups across multiple apps.    Note: With the Deploy with App Center Task in Visual Studio Team Services, you can deploy your apps from Azure DevOps (formerly known as VSTS) to App Center. By deploying to App Center, you will be able to distribute your builds to your users.    Reference: https://docs.microsoft.com/en-us/appcenter/distribution/groups
Box 1: Microsoft Visual Studio App Center distribution Groups 
Distribution Groups are used to control access to releases. A Distribution Group represents a set of users that can be managed jointly and can have common access to releases. Example of Distribution Groups can be teams of users, like the QA Team or External Beta Testers or can represent stages or rings of releases, such as Staging.  
  
Box 2: Shared 
Shared distribution groups are private or public distribution groups that are shared across multiple apps in a single organization. Shared distribution groups eliminate the need to replicate distribution groups across multiple apps.    
Note: With the Deploy with App Center Task in Visual Studio Team Services, you can deploy your apps from Azure DevOps (formerly known as VSTS) to App Center. By deploying to App Center, you will be able to distribute your builds to your users.  
  
Reference: 
https://docs.microsoft.com/en-us/appcenter/distribution/groups



Question 8

You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1.    
You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines.    
What should you do?


  1. Create a variable group in Project1.
  2. Add a secure file to Project1.
  3. Modify the security settings of the pipelines.
  4. Configure the security policy of Contoso.
Correct answer: A
Explanation:
Use a variable group to store values that you want to control and make available across multiple pipelines.    Reference: https://docs.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups
Use a variable group to store values that you want to control and make available across multiple pipelines.  
  
Reference: 
https://docs.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups



Question 9

You use WhiteSource Bolt to scan a Node.js application.    
The WhiteSource Bolt scan identifies numerous libraries that have invalid licenses. The libraries are used only during development and are not part of a production deployment.    
You need to ensure that WhiteSource Bolt only scans production dependencies.    
Which two actions should you perform? Each correct answer presents part of the solution.    
NOTE: Each correct selection is worth one point.


  1. Run npm install and specify the --production flag.
  2. Modify the WhiteSource Bolt policy and set the action for the licenses used by the development tools to Reassign.
  3. Modify the devDependencies section of the project’s Package.json file.
  4. Configure WhiteSource Bolt to scan the node_modules directory only.
Correct answer: AD
Explanation:
A: To resolve NPM dependencies, you should first run "npm install" command on the relevant folders before executing the plugin. C: All npm packages contain a file, usually in the project root, called package.json – this file holds various metadata relevant to the project. This file is used to give information to npm that allows it to identify the project as well as handle the project's dependencies. It can also contain other metadata such as a project description, the version of the project in a particular distribution, license information, even configuration data – all of which can be vital to both npm and to the end users of the package.    Reference: https://whitesource.atlassian.net/wiki/spaces/WD/pages/34209870/NPM+Plugin   https://nodejs.org/en/knowledge/getting-started/npm/what-is-the-file-package-json
A: To resolve NPM dependencies, you should first run "npm install" command on the relevant folders before executing the plugin. 
C: All npm packages contain a file, usually in the project root, called package.json – this file holds various metadata relevant to the project. This file is used to give information to npm that allows it to identify the project as well as handle the project's dependencies. It can also contain other metadata such as a project description, the version of the project in a particular distribution, license information, even configuration data – all of which can be vital to both npm and to the end users of the package.  
  
Reference: 
https://whitesource.atlassian.net/wiki/spaces/WD/pages/34209870/NPM+Plugin   
https://nodejs.org/en/knowledge/getting-started/npm/what-is-the-file-package-json



Question 10

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.  
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.  
  
You plan to update the Azure DevOps strategy of your company.    
You need to identify the following issues as they occur during the company’s development process:   
  • Licensing violations  
  • Prohibited libraries    
Solution: You implement continuous integration. 
Does this meet the goal?


  1. Yes
  2. No
Correct answer: B
Explanation:
WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.    Reference: https://azuredevopslabs.com/labs/vstsextend/whitesource/
WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated definitive database of open source repositories.  
  
Reference: 
https://azuredevopslabs.com/labs/vstsextend/whitesource/









CONNECT US

Facebook

Twitter

PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount!



HOW TO OPEN VCEX FILES

Use ProfExam Simulator to open VCEX files