You use Azure Pipelines to manage build pipelines, GitHub to store source code, and Dependabot to manage dependencies.You have an app named App1.Dependabot detects a dependency in App1 that requires an update.What should you do first to apply the update?
Answer(s): B
DependaBot is a useful tool to regularly check for dependency updates. By helping to keep your project up to date, DependaBot can reduce technical debt and immediately apply security vulnerabilities when patches are released. How does DependaBot work?1. DependaBot regularly checks dependencies for updates2. If an update is found, DependaBot creates a new branch with this upgrade and Pull Request for approval3. You review the new Pull Request, ensure the tests passed, review the code, and decide if you can merge the change
https://samlearnsazure.blog/2019/12/20/github-using-dependabot/
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You manage a project in Azure DevOps.You need to prevent the configuration of the project from changing over time.Solution: Add a code coverage step to the build pipelines.Does this meet the goal?
Instead implement Continuous Assurance for the project.
https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You manage a project in Azure DevOps.You need to prevent the configuration of the project from changing over time.Solution: Implement Continuous Integration for the project.Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You manage a project in Azure DevOps.You need to prevent the configuration of the project from changing over time.Solution: Implement Continuous Assurance for the project.Does this meet the goal?
Answer(s): A
The basic idea behind Continuous Assurance (CA) is to setup the ability to check for "drift" from what is considered a secure snapshot of a system. Support for Continuous Assurance lets us treat security truly as a 'state' as opposed to a 'point in time' achievement. This is particularly important in today's context when 'continuous change' has become a norm.There can be two types of drift:Drift involving 'baseline' configuration: This involves settings that have a fixed number of possible states(often pre-defined/statically determined ones). For instance, a SQL DB can have TDE encryption turned ON or OFF...or a Storage Account may have auditing turned ON however the log retention period may be less than 365 days.Drift involving 'stateful' configuration: There are settings which cannot be constrained within a finite set of well-known states. For instance, the IP addresses configured to have access to a SQL DB can be any (arbitrary) set of IP addresses. In such scenarios, usually human judgment is initially required to determine whether a particular configuration should be considered 'secure' or not. However, once that is done, it is important to ensure that there is no "stateful drift" from the attested configuration. (E.g., if, in a troubleshooting session, someone adds the IP address of a developer machine to the list, the Continuous Assurance feature should be able to identify the drift and generate notifications/alerts or even trigger 'auto- remediation' depending on the severity of the change).
DRAG DROP (Drag and Drop is not supported)You are planning projects for three customers. Each customer's preferred process for work items is shown in the following table.The customers all plan to use Azure DevOps for work item management.Which work item process should you use for each customer? To answer, drag the appropriate work item processes to the correct customers. Each work item process may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
Box 1: ScrumChoose Scrum when your team practices Scrum. This process works great if you want to track product backlog items (PBIs) and bugs on the Kanban board, or break PBIs and bugs down into tasks on the taskboard.Box 2: AgileChoose Agile when your team uses Agile planning methods, including Scrum, and tracks development and test activities separately. This process works great if you want to track user stories and (optionally) bugs on the Kanban board, or track bugs and tasks on the taskboard.Box 3: CMMIChoose CMMI when your team follows more formal project methods that require a framework for process improvement and an auditable record of decisions. With this process, you can track requirements, change requests, risks, and reviews.Incorrect Answers:XP:The work tracking objects contained within the default DevOps processes and DevOps process templates are Basic, Agile, CMMI, and ScrumXP (Extreme Programming) and DevOps are different things. They don't contradict with each other, they can be used together, but they have different base concepts inside them.
https://docs.microsoft.com/en-us/azure/devops/boards/work-items/guidance/choose-process?view=azure- devops
Post your Comments and Discuss Microsoft AZ-400 exam prep with other Community members: