Microsoft AZ-400 Quiz 12 Topic 5 Questions 56-60

Question: 1

You have a brand policy in a project in Azure DevOps. The policy requires that code always builds successfully.

You need to ensure that a specific user can always merge change to the master branch, even if the code fails to compile. The solution must use the principle of least privilege.

What should you do?

AFrom the Security setting of the repository, modify the access control tor the user.

BFrom the Security settings of the branch, modify the access control for the user.

CAdd the user to the Build Administrators group,

DAdd the user to the Project Administrators group

Show Answer

Question: 2

You have an Azure DevOps organization named Contoso and an Azure subscription.

You use Azure DevOps to build and deploy a web app named App1. Azure Monitor is configured to generate an email notification in response to alerts generated whenever App1 generates a server-side error.

You need to receive notifications in Microsoft Teams whenever an Azure Monitor alert is generated.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

ACreate an Azure logic app that has an HTTP request trigger.

BModify the Diagnostics settings in Azure Monitor.

CModify an action group in Azure Monitor.

DCreate an Azure Monitor workbook.

ECreate an Azure logic app that has an Azure DevOps trigger.

Show Answer

Question: 3

Your company has an Azure DevOps project,

The source code for the project is stored in an on-premises repository and uses on an on-premises build

server.

You plan to use Azure DevOps to control the build process on the build server by using a self-hosted agent.

You need to implement the self-hosted agent.

You download and install the agent on the build server.

Which two actions should you perform next? Each correct answer presents part of the solution.

AFrom Azure, create a shared access signature (SAS).

BFrom the build server, create a certificate, and then upload the certificate to Azure Storage.

CFrom the build server, create a certificate, and then upload the certificate to Azure Key Vault.

DFrom DevOps, create a personal access token (PAT).

EFrom the build server, run config.cmd.

Show Answer

Question: 4

You use a Git repository in Azure Repos to manage the source code of a web application. Developers commit changes directly to the master branch.

You need to implement a change management procedure that meets the following requirements:

The master branch must be protected, and new changes must be built in the feature branches first.

Changes must be reviewed and approved by at least one release manager before each merge.

Changes must be brought into the master branch by using pull requests.

What should you configure in Azure Repos?

Abranch policies of the master branch

BServices in Project Settings

CDeployment pools in Project Settings

Dbranch security of the master branch
Branch policies help teams protect their important branches of development. Policies enforce your team's
code quality and change management standards.

Show Answer

Question: 5

SIMULATION

You need to prepare a network security group (NSG) named az400-9940427-nsg1 to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet.

To complete this task, sign in to the Microsoft Azure portal.

A1. Open Microsoft Azure Portal and Log into your Azure account.
2. Select network security group (NSG) named az400-9940427-nsg1
3. Click Advanced
4. Click Advanced

5. Change the following settings:
*Destination Port range: 8080
*Protocol. TCP
*Action: Allow
Note: By default, Azure DevOps Server uses TCP Port 8080.

B1. Open Microsoft Azure Portal and Log into your Azure account.
2. Select network security group (NSG) named az400-9940427-nsg1
3. Select Settings, Outbound security rules, and click Add
4. Click Advanced

4. Change the following settings:
*Destination Port range: 8080
*Protocol. TCP
*Action: Allow
Note: By default, Azure DevOps Server uses TCP Port 8080.

Show Answer

Microsoft AZ-400 Quiz:12 Topic:5 Questions:56-60