Free AZ-400 Exam Braindumps (page: 34)

Page 33 of 128

HOTSPOT (Drag and Drop is not supported)
Your company is creating a suite of three mobile applications.

You need to control access to the application builds. The solution must be managed at the organization level. What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Microsoft Visual Studio App Center distribution Groups
Distribution Groups are used to control access to releases. A Distribution Group represents a set of users that can be managed jointly and can have common access to releases. Example of Distribution Groups can be teams of users, like the QA Team or External Beta Testers or can represent stages or rings of releases, such as Staging.

Box 2: Shared
Shared distribution groups are private or public distribution groups that are shared across multiple apps in a single organization. Shared distribution groups eliminate the need to replicate distribution groups across multiple apps.

Note: With the Deploy with App Center Task in Visual Studio Team Services, you can deploy your apps from Azure DevOps (formerly known as VSTS) to App Center. By deploying to App Center, you will be able to distribute your builds to your users.


Reference:

https://docs.microsoft.com/en-us/appcenter/distribution/groups



You have an Azure DevOps organization named Contoso that contains a project named Project1.
You provision an Azure key vault named Keyvault1.

You need to reference Keyvault1 secrets in a build pipeline of Project1. What should you do first?

  1. Add a secure file to Project1.
  2. Create an XAML build service.
  3. Create a variable group in Project1.
  4. Configure the security policy of Contoso.

Answer(s): C

Explanation:

Before this will work, the build needs permission to access the Azure Key Vault. This can be added in the Azure Portal. Open the Access Policies in the Key Vault and add a new one. Choose the principle used in the DevOps build.


Reference:

https://docs.microsoft.com/en-us/azure/devops/pipelines/release/azure-key-vault



DRAG DROP (Drag and Drop is not supported)
You have a tenant in Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra. The tenant contains three groups named Group1, Group2, and Group3.

You create a new project in Azure DevOps named Project1.

You need to secure the service connections for Project1. The solution must meet the following requirements:

•The members of Group1 must be able to share and unshare a service connection with other projects.
•The members of Group2 must be able to rename a service connection and update the description.
•The members of Group3 must be able to use the service connection within build or release pipelines.
•The principle of least privilege must be followed.

Which permission should you grant to each group? To answer, drag the appropriate permissions to the correct groups. Each permission may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have the following Azure policy.

You assign the policy to the Tenant root group. What is the effect of the policy?

  1. prevents all HTTP traffic to existing Azure Storage accounts
  2. ensures that all traffic to new Azure Storage accounts is encrypted
  3. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the Internet
  4. ensures that all data for new Azure Storage accounts is encrypted at rest

Answer(s): B

Explanation:

Denies non HTTPS traffic.






Post your Comments and Discuss Microsoft AZ-400 exam with other Community members:

AZ-400 Exam Discussions & Posts