Microsoft AZ-400 Exam Questions
Designing and Implementing Microsoft DevOps Solutions (Page 13 )

Updated On: 23-Apr-2026
View Related Case Study

DRAG DROP (Drag and Drop is not supported)

You need to implement the code flow strategy for Project2 in Azure DevOps.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Create a repository
A Git repository, or repo, is a folder that you've told Git to help you track file changes in. You can have any number of repos on your computer, each stored in their own folder.

Step 2: Create a fork

Step 3: Add a build policy for the fork
Build policies help teams protect their important branches of development. Policies enforce your team's code quality and change management standards.

Scenario:
Implement a code flow strategy for Project2 that will:
Enable Team2 to submit pull requests for Project2.

Enable Team2 to work independently on changes to a copy of Project2.

Ensure that any intermediary changes performed by Team2 on a copy of Project2 will be subject to the same restrictions as the ones defined in the build policy of Project2.


Reference:

https://docs.microsoft.com/en-us/azure/devops/repos/git/manage-your-branches



View Related Case Study

DRAG DROP (Drag and Drop is not supported)

You need to configure Azure Automation for the computers in Pool7.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Create a Desired State Configuration (DSC) configuration file that has an extension of .ps1.

Step 2: Run the Import-AzureRmAutomationDscConfiguration Azure Powershell cmdlet The Import-AzureRmAutomationDscConfiguration cmdlet imports an APS Desired State Configuration (DSC) configuration into Azure Automation. Specify the path of an APS script that contains a single DSC configuration.

Example:
PS C:\>Import-AzureRmAutomationDscConfiguration -AutomationAccountName "Contoso17"- ResourceGroupName "ResourceGroup01" -SourcePath "C:\DSC\client.ps1" -Force

This command imports the DSC configuration in the file named client.ps1 into the Automation account named Contoso17. The command specifies the Force parameter. If there is an existing DSC configuration, this command replaces it.

Step 3: Run the Start-AzureRmAutomationDscCompilationJob Azure Powershell cmdlet The Start-AzureRmAutomationDscCompilationJob cmdlet compiles an APS Desired State Configuration (DSC) configuration in Azure Automation.


Reference:

https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/import- azurermautomationdscconfiguration https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/start- azurermautomationdsccompilationjob



You have an Azure Resource Manager template that deploys a multi-tier application.

You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application.

What should you use?

  1. Azure Key Vault
  2. a Web.config file
  3. an Appsettings.json file
  4. an Azure Storage table
  5. an Azure Resource Manager parameter file

Answer(s): A

Explanation:

When you need to pass a secure value (like a password) as a parameter during deployment, you can retrieve the value from an Azure Key Vault. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID. The key vault can exist in a different subscription than the resource group you are deploying to.


Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault-parameter



You have an Azure DevOps organization named Contoso, an Azure DevOps project named Project1, an Azure subscription named Sub1, and an Azure key vault named vault1.

You need to ensure that you can reference the values of the secrets stored in vault1 in all the pipelines of Project1. The solution must prevent the values from being stored in the pipelines.

What should you do?

  1. Create a variable group in Project1.
  2. Add a secure file to Project1.
  3. Modify the security settings of the pipelines.
  4. Configure the security policy of Contoso.

Answer(s): A

Explanation:

Use a variable group to store values that you want to control and make available across multiple pipelines.


Reference:

https://docs.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups



DRAG DROP (Drag and Drop is not supported)

You are configuring an Azure DevOps deployment pipeline. The deployed application will authenticate to a web service by using a secret stored in an Azure key vault.

You need to use the secret in the deployment pipeline.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Create a service principal in Microsoft Entra ID.
You will need a service principal to deploy an app to an Azure resource from Azure Pipelines.

Step 2: Configure an access policy in the key vault.
You need to secure access to your key vaults by allowing only authorized applications and users. To access the data from the vault, you will need to provide read (Get) permissions to the service principal that you will be using for authentication in the pipeline.
Select Access policy and then select + Add Access Policy to setup a new policy.



Step 3: Add an Azure Resource Manager service connection to the pipeline You need to authorize the pipeline to deploy to Azure:
1. Select Pipelines | Pipelines,
2. Go to Releases under Pipelines and then select and Edit your pipeline.
3. Under Tasks, notice the release definition for Dev stage has a Azure Key Vault task. This task downloads Secrets from an Azure Key Vault. You will need to point to the subscription and the Azure Key Vault resource.
4. Click Manage, this will redirect to the Service connections page.



5.Click on New Service connection -> Azure Resource Manager -> Service Principal (manual). Fill the information from previously created service principal.


Reference:

https://azuredevopslabs.com/labs/vstsextend/azurekeyvault/



Viewing page 13 of 72
Viewing questions 61 - 65 out of 355 questions


AZ-400 Exam Discussions & Posts

What the AZ-400 Exam Tests and How to Pass It

The Designing and Implementing Microsoft DevOps Solutions exam is designed for professionals who function as DevOps engineers, combining people, process, and technologies to continuously deliver business value. Candidates for this Microsoft certification are typically responsible for designing and implementing strategies for collaboration, code, infrastructure, source control, security, compliance, continuous integration, testing, delivery, monitoring, and feedback. Organizations hire individuals with this credential to bridge the gap between development and operations teams, ensuring that software delivery is efficient, secure, and reliable. Achieving this certification demonstrates that a professional possesses the technical expertise to manage the end-to-end lifecycle of software development within the Microsoft Azure ecosystem. It is a critical benchmark for those aiming to prove their competency in modern DevOps practices and cloud-native application management.

What the AZ-400 Exam Covers

The exam evaluates a candidate's ability to design and implement processes and communications, which is foundational for establishing a culture of shared responsibility. You will be tested on your capacity to design and implement a source control strategy, ensuring that version control systems are utilized effectively across development teams. Furthermore, the exam requires proficiency in designing and implementing build and release pipelines, which are the core mechanisms for automating software deployment. Developing a security and compliance plan is another critical domain, where you must demonstrate how to integrate security practices directly into the DevOps workflow. Finally, the exam covers the implementation of an instrumentation strategy, ensuring that applications and infrastructure are properly monitored to provide actionable feedback. Our practice questions are structured to mirror these domains, allowing you to test your knowledge across each specific area of the curriculum.

The domain focused on designing and implementing build and release pipelines is often considered the most technically demanding aspect of the exam. Candidates must move beyond theoretical knowledge and demonstrate a deep understanding of how to configure continuous integration and continuous delivery (CI/CD) workflows that handle complex dependencies and multi-stage deployments. This requires familiarity with YAML-based pipeline definitions, artifact management, and the integration of various testing frameworks into the automated release process. Success in this area depends on your ability to troubleshoot pipeline failures and optimize deployment speeds, which necessitates hands-on experience with Azure DevOps or GitHub Actions.

Are These Real AZ-400 Exam Questions?

Our platform provides practice questions that are sourced and verified by the community, consisting of IT professionals and recent test-takers who have sat for the actual exam. Because these questions are community-verified, they reflect the types of scenarios and technical challenges that appear on the real exam. If you've been searching for AZ-400 exam dumps or braindump files, our community-verified practice questions offer something more valuable — each question is verified and explained by IT professionals who recently passed the exam. We do not provide leaked or confidential content, but rather a repository of knowledge built by those who have successfully navigated the certification process. This approach ensures that you are studying with materials that are relevant to the current exam objectives.

Community verification works through a collaborative process where users actively participate in the review of each question. When a user encounters a question, they can discuss the answer choices, flag potentially incorrect information, and share context from their own recent exam experience. This peer-review mechanism helps clarify complex topics and ensures that the explanations provided are accurate and up-to-date. By engaging with these discussions, you gain insights into the reasoning behind specific answers, which is far more effective for long-term retention than simply memorizing content.

How to Prepare for the AZ-400 Exam

Effective exam preparation requires a combination of theoretical study and practical application within a sandbox or real Azure environment. You should prioritize official Microsoft documentation to understand the core concepts, as the exam tests your ability to apply knowledge to specific business scenarios rather than rote memorization. Building a consistent study schedule that allocates time for each of the five major exam domains will help you cover the material comprehensively without feeling overwhelmed. Every practice question includes a free AI Tutor explanation that breaks down the reasoning behind the correct answer — so you understand the concept, not just the answer. This tool is designed to help you identify knowledge gaps and reinforce your understanding of complex DevOps principles.

A common mistake candidates make is relying solely on memorization, which often leads to failure when faced with scenario-based questions that require critical thinking. To avoid this, focus on understanding the "why" behind each configuration or process, rather than just the "how." Time management is also a critical skill during the certification exam; practicing with timed sets of questions will help you get accustomed to the pace required to complete the exam within the allotted time. Ensure you are comfortable with the interface and the types of questions you might encounter, such as case studies or drag-and-drop tasks, to reduce anxiety on the day of the test.

What to Expect on Exam Day

On the day of your certification exam, you can expect a rigorous assessment that evaluates your technical proficiency through various question formats. These typically include multiple-choice questions, scenario-based questions that require you to select the best solution for a given business problem, and potentially interactive elements like drag-and-drop or ordering tasks. The exam is administered by Microsoft's authorized testing partners, such as Pearson VUE, and is conducted under strict proctored conditions to ensure the integrity of the certification process. You will be allotted a specific amount of time to complete the exam, and it is important to manage your time carefully across the different sections. Familiarizing yourself with the exam environment beforehand can help you focus entirely on the technical content during the test.

Who Should Use These AZ-400 Practice Questions

These practice questions are intended for DevOps engineers, cloud architects, and system administrators who are preparing for the AZ-400 certification exam. Ideally, candidates should have several years of experience working with Azure and a solid understanding of DevOps principles, including CI/CD, infrastructure as code, and security integration. This exam is a significant step for professionals looking to validate their skills and advance their careers in cloud-native development and operations. By using our resources for your exam prep, you can systematically build the confidence needed to succeed. Passing this certification exam serves as a professional endorsement of your ability to design and implement robust DevOps solutions in a real-world environment.

To get the most out of these practice questions, avoid simply reading the correct answer and moving on to the next item. Instead, engage deeply with the AI Tutor explanation to understand the underlying logic, and read the community discussions to see how other professionals approach the same problem. If you get a question wrong, flag it and revisit it after you have reviewed the relevant documentation to ensure you have mastered the concept. This iterative process of testing, reviewing, and refining your knowledge is the most effective way to prepare. Browse the questions above and use the community discussions and AI Tutor to build real exam confidence.

Updated on: 27 April, 2026

AI Tutor AI Tutor 👋 I’m here to help!