Practice Free AZ-400 Exam Online Questions
DRAG DROP
You have web app named App1 that uses Application Insights in Azure Monitor to Store log data. App1 has users in multiple locations.
You need to query App1 requests from London and Paris that return error.
The solution must meet the following requirements:
✑ Return the timestamp, url, result Code, and duration fields.
✑ Only requests made the last hour.
How shout you complete the query?


You have the services shown in the following table.

You manage a project by using Azure Boards.
You need to notify the services Of build Status changes.
Which services can be notified by using a web hook?
- A . Service1 only
- B . Service2 only
- C . Service1 and Service2 only
You have the services shown in the following table.

You manage a project by using Azure Boards.
You need to notify the services Of build Status changes.
Which services can be notified by using a web hook?
- A . Service1 only
- B . Service2 only
- C . Service1 and Service2 only
You have the services shown in the following table.

You manage a project by using Azure Boards.
You need to notify the services Of build Status changes.
Which services can be notified by using a web hook?
- A . Service1 only
- B . Service2 only
- C . Service1 and Service2 only
SIMULATION
Task 6
For Project 1. you need to create a service connection that can be used to deploy resources to the RGHod489Q1628 resource group.
The service connection must use the ManagedJd1 identity and workload identity federation.
Step 1: Understand the Requirements
You want to deploy resources in the RGHod489Q1628 resource group.
The service connection must:
Use the ManagedJd1 managed identity.
Use workload identity federation (OIDC-based authentication for enhanced security).
Step 2: Verify Prerequisites
You need to ensure:
The ManagedJd1 managed identity exists in your Azure subscription.
Your Azure DevOps project (Project1) is linked to an Azure Active Directory tenant (for OIDC support).
You have the Owner or User Access Administrator role on the RGHod489Q1628 resource group.
Step 3: Assign Role to Managed Identity
Go to the Azure Portal.
In the search bar, type Managed Identities and select Managed Identities.
Locate and click on the ManagedJd1 identity.
In the left menu, click Azure role assignments.
Click + Add role assignment.
Set the following:
Scope: Resource Group
Subscription: Your subscription
Resource Group: RGHod489Q1628
Role: Contributor (or appropriate role)
Click Save.
This step ensures ManagedJd1 has permissions to deploy resources to RGHod489Q1628.
Step 4: Create a Federated Credential for Workload Identity Federation In the Azure Portal, navigate to the ManagedJd1 managed identity. In the left menu, click Workload identity federation (preview).
Click + Add a federated credential.
Configure as follows:
Federated credential name: devops-oidc
Issuer: https://vstoken.actions.githubusercontent.com (or use the default https://pipelines.actions.githubusercontent.com for Azure DevOps)
Subject identifier: Use the following format for Azure DevOps:
css
Copy
system:azuredevops:{organizationName}:{projectName}
For example:
css
Copy
system:azuredevops:{YourOrganizationName}:{Project1}
Audience: api://AzureADTokenExchange
Click Add.
This federated credential establishes trust between your Azure DevOps project and the managed identity.
Step 5: Create a Service Connection in Azure DevOps
Go to your Azure DevOps project (Project1) in the browser.
In the left menu, click Project settings.
Under Pipelines, click Service connections.
Click New service connection.
Choose Azure Resource Manager.
Choose the authentication method:
Select Workload identity federation.
Configure the service connection:
Scope level: Resource Group.
Resource Group: RGHod489Q1628.
Subscription: Your subscription.
Authentication method: Managed Identity with workload identity federation.
Managed Identity: Enter the client ID or select ManagedJd1.
Service connection name: e.g., Project1-RGHod489Q1628-Conn.
Grant access permission to all pipelines (recommended).
Click Save.
Step 6: Validate the Service Connection
After creation, click on the new service connection to Verify it.
Ensure the connection test is successful.
You can now use this service connection in your pipelines for deploying resources to RGHod489Q1628.
You have an Azure subscription.
You create two Bicep templates named Template1 and Template2 that will be used to create a virtual machine and a website.
You need to create a template named Template3 that will reuse logic from Template1 and Template2.
What should you define first?
- A . parameters
- B . modules
- C . resources
- D . outputs
You have an Azure subscription.
You create two Bicep templates named Template1 and Template2 that will be used to create a virtual machine and a website.
You need to create a template named Template3 that will reuse logic from Template1 and Template2.
What should you define first?
- A . parameters
- B . modules
- C . resources
- D . outputs
Your company uses Azure DevOps for the build pipelines and deployment pipelines of Java-based projects.
You need to recommend a strategy for managing technical debt.
Which action should you include in the recommendation?
- A . Configure post-deployment approvals in the deployment pipeline.
- B . Integrate Azure DevOps and Sonar Rube.
- C . Integrate Azure DevOps and Azure Dev Test Labs.
B
Explanation:
You can manage technical debt with Sonar Rube and Azure DevOps.
Note: Technical debt is the set of problems in a development effort that make forward progress on customer value inefficient. Technical debt saps productivity by making code hard to understand, fragile, time-consuming to change, difficult to validate, and creates unplanned work that blocks progress. Unless they are managed, technical debt can accumulate and hurt the overall quality of the software and the productivity of the development team in the long term
SonarQube an open source platform for continuous inspection of code quality to perform automatic reviews with static analysis of code to:
Detect Bugs
Code Smells
Security Vulnerabilities
Centralize Quality
What’s covered in this lab
Reference: https://azuredevopslabs.com/labs/vstsextend/sonarqube/
DRAG DROP
You are implementing a new project in Azure DevOps.
You need to assess the performance of the protect.
The solution must identity the following metrics:
• How long it takes to complete a work item
* The percentage of defects found in production
Which DevOps KPI should you review for each metric? To answer drag the appropriate KPIs to the correct metric. Each KPI may be used once, more than once, or not at all. You may need to drag the spirt bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have an on-premises web server named Server1.
You need to ensure that you can build .NET apps and deploy the apps to Server1 by using Azure Pipelines.
Solution: You deploy a virtual machine scale set and select the [small disk] Windows Server 2019 Datacenter – x64 Gen 1 image.
Does this meet the goal?
- A . Yes
- B . No
