You plan to provision a self-hosted Linux agent.Which authentication mechanism should you use to register the self-hosted agent?
Answer(s): A
Note: PAT Supported only on Azure Pipelines and TFS 2017 and newer. After you choose PAT, paste the PAT token you created into the command prompt window. Use a personal access token (PAT) if your Azure DevOps Server or TFS instance and the agent machine are not in a trusted domain. PAT authentication is handled by your Azure DevOps Server or TFS instance instead of the domain controller.
https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/v2-linux
DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains a project in Azure DevOps named Project1. In Microsoft Entra ID, you have three users that require access to Project1 as shown in the following table.You need to ensure that the users have the appropriate permissions. The solution must use the principle of least privilege.To which permission group in Azure DevOps should you add each user? To answer, drag the appropriate permission groups to the correct users. Each permission group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
Box 1: ReadersDefault repository permissionsBy default, members of the project Contributors group have permissions to contribute to a repository. This includes the ability to create branches, create tags, and manage notes.
https://docs.microsoft.com/en-us/azure/devops/repos/git/set-git-repository-permissions?view=azure-devops
DRAG DROP (Drag and Drop is not supported)You have a GitHub organization that contains three users named User1, User2, and User3. You have a project that contains a repository named repo1.You need to configure permissions for repo1. The solution must meet the following requirements:Ensure that User1 can actively push to repo1.Ensure that User2 can manage issues and pull requests for repo1.Ensure that User3 can manage repo1.Prevent User3 from accessing sensitive data in repo1.Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
Box 1: WriteEnsure that User1 can actively push to repo1.Write: Recommended for contributors who actively push to your projectBox 2: TriageEnsure that User2 can manage issues and pull requests for repo1.Triage: Recommended for contributors who need to proactively manage issues, discussions, and pull requests without write accessBox 3: MaintainEnsure that User3 can manage repo1.Prevent User3 from accessing sensitive data in repo1.Maintain: Recommended for project managers who need to manage the repository without access to sensitive or destructive actionsNote: Repository roles for organizationsYou can give organization members, outside collaborators, and teams of people different levels of access to repositories owned by an organization by assigning them to roles. Choose the role that best fits each person or team's function in your project without giving people more access to the project than they need.From least access to most access, the roles for an organization repository are:Read: Recommended for non-code contributors who want to view or discuss your project Triage: Recommended for contributors who need to proactively manage issues, discussions, and pull requests without write accessWrite: Recommended for contributors who actively push to your project Maintain: Recommended for project managers who need to manage the repository without access to sensitive or destructive actionsAdmin: Recommended for people who need full access to the project, including sensitive and destructive actions like managing security or deleting a repository
https://docs.github.com/en/organizations/managing-user-access-to-your-organizations-repositories/repository- roles-for-an-organization
You have an Azure key vault named KV1 and three web servers.You plan to deploy an app named App1 to the web servers.You need to ensure that App1 can retrieve a secret from KV1. The solution must meet the following requirements:Minimize the number of permission grants required.Follow the principle of least privilege.What should you include in the solution?
Answer(s): C
You plan to use Azure DevOps to build and deploy an app that will be hosted in a Kubernetes cluster.You need to scan the app image for vulnerabilities before the image is deployed to the cluster.What should you include in the solution?
Overview of Microsoft Defender for ContainersMicrosoft Defender for Containers is the cloud-native solution to improve, monitor, and maintain the security of your clusters, containers, and their applications.Defender for Containers assists you with four core aspects of container security:* Environment hardening - Defender for Containers protects your Kubernetes clusters whether they're running on Azure Kubernetes Service, Kubernetes on-premises/IaaS, or Amazon EKS. Defender for Containers continuously assesses clusters to provide visibility into misconfigurations and guidelines to help mitigate identified threats.* Vulnerability assessment - Vulnerability assessment and management tools for images stored in Azure Container Registry and Elastic Container Registry* Etc.Vulnerability assessmentDefender for Containers scans the container images in Azure Container Registry (ACR) and Amazon AWS Elastic Container Registry (ECR) to provide vulnerability reports for your container images, providing details for each vulnerability detected, remediation guidance, real-world exploit insights, and more.
https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-introduction
Post your Comments and Discuss Microsoft AZ-400 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-400 content, but please register or login to continue.