Practice Free AZ-400 Exam Online Questions
HOTSPOT
You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.
You need to ensure that the project can be scanned for known security vulnerabilities in the open source libraries.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation:
Box 1: A Build task
Trigger a build
You have a Java code provisioned by the Azure DevOps demo generator. You will use WhiteSource Bolt extension to check the vulnerable components present in this code.
✑ Go to Builds section under Pipelines tab, select the build definition WhiteSourceBolt and click on Queue to trigger a build.
✑ To view the build in progress status, click on ellipsis and select View build results.
Box 2: WhiteSource Bolt
WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source repositories.
References: https://www.azuredevopslabs.com/labs/vstsextend/whitesource/
HOTSPOT
You have a virtual machine that runs Windows Server 2022 and is managed by using PowerShell Desired State Configuration (PSDSC).
You have the following DSC configuration.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.


HOTSPOT
You have a virtual machine that runs Windows Server 2022 and is managed by using PowerShell Desired State Configuration (PSDSC).
You have the following DSC configuration.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.


HOTSPOT
Your company uses Azure DevOps for Get source control.
You have a project in Azure DevOps named Contoso App that contains the following repositories:
https://dev.azure.com/contoso/contoso-app/core-api
https://dev.azure.com/contoso/contoso-app/core-spa
https://dev.azure.com/contoso/contoso-app/core-db
You need to ensure that developers receive Slack notifications when there are pull requests created for Contoso App.
What should you run in Slack? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation:
Box 1: subscribe
To start monitoring all Get repositories in a project, use the following slash command inside a channel:
/azrepos subscribe [project ur1]
Box 2: https://dev.azure.com/contoso/contoso-app
You can also monitor a specific repository using the following command:
/azrepos subscribe [repository ur1]
The repository URL can be to any page within your repository that has your repository name.
For example, for Get repositories, use:
/azrepos subscribe https://dev.azure.com/myorg/myproject/_git/myrepository
Reference: https://docs.microsoft.com/en-us/azure/devops/repos/integrations/repos-slack
You have an Azure DevOps organization named Contoso and an Azure DevOps project named Project1.
You plan to use Microsoft-hosted agents to build container images that will host full Microsoft .NET Framework apps in a YAML pipeline in Project1.
What are two possible virtual machine images that you can use for the Microsoft-hosted agent pool? Each
correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
- A . vs2017-win2016
- B . ubuntu-16.04
- C . win1803
- D . macOS-10.13
- E . vs.2015-win2012r2
AE
Explanation:
https://github.com/microsoft/azure-pipelines-image-generation/blob/d80f81d6c98f8ce2c74b034309bb774ea8d31cfb/images/win/Vs2015-Server2012R2-Readme.md
https://github.com/actions/virtual-environments/blob/master/images/win/Windows2016-Readme.md
You have an Azure DevOps organization named Contoso and an Azure DevOps project named Project1.
You plan to use Microsoft-hosted agents to build container images that will host full Microsoft .NET Framework apps in a YAML pipeline in Project1.
What are two possible virtual machine images that you can use for the Microsoft-hosted agent pool? Each
correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
- A . vs2017-win2016
- B . ubuntu-16.04
- C . win1803
- D . macOS-10.13
- E . vs.2015-win2012r2
AE
Explanation:
https://github.com/microsoft/azure-pipelines-image-generation/blob/d80f81d6c98f8ce2c74b034309bb774ea8d31cfb/images/win/Vs2015-Server2012R2-Readme.md
https://github.com/actions/virtual-environments/blob/master/images/win/Windows2016-Readme.md
You have an Azure DevOps organization named Contoso and an Azure DevOps project named Project1.
You plan to use Microsoft-hosted agents to build container images that will host full Microsoft .NET Framework apps in a YAML pipeline in Project1.
What are two possible virtual machine images that you can use for the Microsoft-hosted agent pool? Each
correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
- A . vs2017-win2016
- B . ubuntu-16.04
- C . win1803
- D . macOS-10.13
- E . vs.2015-win2012r2
AE
Explanation:
https://github.com/microsoft/azure-pipelines-image-generation/blob/d80f81d6c98f8ce2c74b034309bb774ea8d31cfb/images/win/Vs2015-Server2012R2-Readme.md
https://github.com/actions/virtual-environments/blob/master/images/win/Windows2016-Readme.md
You are monitoring the health and performance of an Azure web app by using Azure Application Insights. You need to ensure that an alert is sent when the web app has a sudden rise in performance issues and failures.
What should you use?
- A . Application Insights Profiler
- B . Continuous export
- C . Smart Detection
- D . custom events
- E . usage analysis
C
Explanation:
Smart Detection automatically warns you of potential performance problems and failure anomalies in your web application. It performs proactive analysis of the telemetry that your app sends to Application Insights. If there is a sudden rise in failure rates, or abnormal patterns in client or server performance, you get an alert.
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/proactive-diagnostics
You are monitoring the health and performance of an Azure web app by using Azure Application Insights. You need to ensure that an alert is sent when the web app has a sudden rise in performance issues and failures.
What should you use?
- A . Application Insights Profiler
- B . Continuous export
- C . Smart Detection
- D . custom events
- E . usage analysis
C
Explanation:
Smart Detection automatically warns you of potential performance problems and failure anomalies in your web application. It performs proactive analysis of the telemetry that your app sends to Application Insights. If there is a sudden rise in failure rates, or abnormal patterns in client or server performance, you get an alert.
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/proactive-diagnostics
You are monitoring the health and performance of an Azure web app by using Azure Application Insights. You need to ensure that an alert is sent when the web app has a sudden rise in performance issues and failures.
What should you use?
- A . Application Insights Profiler
- B . Continuous export
- C . Smart Detection
- D . custom events
- E . usage analysis
C
Explanation:
Smart Detection automatically warns you of potential performance problems and failure anomalies in your web application. It performs proactive analysis of the telemetry that your app sends to Application Insights. If there is a sudden rise in failure rates, or abnormal patterns in client or server performance, you get an alert.
Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/proactive-diagnostics
