Free Demo Questions

Test Online Free Microsoft AZ-400 Exam Questions and Answers

Practice a live sample before buying full access. This page keeps the free AZ-400 question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.

Updated Apr 24, 2026 263 Questions 18 Pages
Page 8 of 18
Question 106 Written Answer
HOTSPOT
Your company uses Team Foundation Server 2013 (TFS 2013).
You plan to migrate to Azure DevOps.
You need to recommend a migration strategy that meets the following requirements:
✑ Preserves the dates of Team Foundation Version Control changesets
✑ Preserves the changes dates of work items revisions
✑ Minimizes migration effort
✑ Migrates all TFS artifacts
What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Answer:


Explanation:
Box 1: Upgrade TFS to the most recent RTM release.
One of the major prerequisites for migrating your Team Foundation Server database is to get your database schema version as close as possible to what is currently deployed in Azure Devops Services.
Box 2: Use the TFS Database Import Service
In Phase 3 of your migration project, you will work on upgrading your Team Foundation Server to one of the supported versions for the Database Import Service in Azure Devops Services.
References: Team Foundation Server to Azure Devops Services Migration Guide
Question 107 Written Answer
CORRECT TEXT
You have a web app that connects to an Azure SQL Database named db1.
You need to configure db1 to send Query Store runtime statistics to Azure Log Analytics.
To complete this task, sign in to the Microsoft Azure portal.

Answer: To enable streaming of diagnostic telemetry for a single or a pooled database, follow these steps:
Question 108 Written Answer
DRAG DROP
You need to increase the security of your team's development process.
Which type of security tool should you recommend for each stage of the development process? To answer, drag the appropriate security toots to the correct stages. Each security tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


Answer:


Explanation:
https://docs.microsoft.com/en-us/azure/devops/migrate/security-validation-cicd-pipeline?view=azure-devops&viewFallbackFrom=vsts So:
PR: Static Code Analysis
CI: Static Code Analysis
CD: PenTest
Question 109 Selectable Answer
You have a GitHub repository.
You create a new repository in Azure DevOps.
You need to recommend a procedure to clone the repository from GitHub to Azure DevOps.
What should you recommend?

Answer:
Question 110 Written Answer
HOTSPOT
You have the Azure DevOps pipeline shown in the following exhibit.



Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.


Answer:


Explanation:
Box 1: 1
The Cloud agent job only.
Box 2: 4
The pipelines has the four tasks: NuGet restore, Compile Application, Copy Files, and Publish Artifact.
Question 111 Written Answer
DRAG DROP
You need to recommend a procedure to implement the build agent for Project1.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


Answer:


Explanation:
Scenario:



Step 1: Sign in to Azure Devops by using an account that is assigned the Administrator service connection security role.
Note: Under Agent Phase, click Deploy Service Fabric Application. Click Docker Settings and then click Configure Docker settings. In Registry Credentials Source, select Azure Resource Manager Service Connection. Then select your Azure subscription.
Step 2: Create a personal access token..
A personal access token or PAT is required so that a machine can join the pool created with the Agent Pools (read, manage) scope.
Step 3: Install and register the Azure Pipelines agent on an Azure virtual machine.
By running a Azure Pipeline agent in the cluster, we make it possible to test any service, regardless of type.
References:
https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-tutorial-deploy-container-app-with-cicd-vsts
https://mohitgoyal.co/2019/01/10/run-azure-devops-private-agents-in-kubernetes-clusters/
Question 112 Selectable Answer
Your company uses Azure DevOps for the build pipelines and deployment pipelines of Java based projects. You need to recommend a strategy for managing technical debt.
Which two actions should you include in the recommendation? Each correct answer presents part of the solution
NOTE: Each correct selection is worth one point.

Answer:
Question 113 Selectable Answer
You are designing a configuration management solution to support five apps hosted on Azure App Service.
Each app is available in the following three environments: development, test, and production.
You need to recommend a configuration management solution that meets the following requirements:
✑ Supports feature flags
✑ Tracks configuration changes from the past 30 days
✑ Stores hierarchically structured configuration values
✑ Controls access to the configurations by using role-based access control (RBAC) permission
✑ Stores shared values as key/value pairs that can be used by all the apps
Which Azure service should you recommend as the configuration management solution?

Answer:
Explanation:
The Feature Manager in the Azure portal for App Configuration provides a UI for creating and managing the feature flags that you use in your applications.
App Configuration offers the following benefits:
✑ A fully managed service that can be set up in minutes
✑ Flexible key representations and mappings
✑ Tagging with labels
✑ Point-in-time replay of settings
✑ Dedicated UI for feature flag management
✑ Comparison of two sets of configurations on custom-defined dimensions
✑ Enhanced security through Azure-managed identities
✑ Encryption of sensitive information at rest and in transit
✑ Native integration with popular frameworks
App Configuration complements Azure Key Vault, which is used to store application secrets.
Reference: https://docs.microsoft.com/en-us/azure/azure-app-configuration/overview
Question 114 Selectable Answer
You have a GitHub Enterprise account.
You need to enable push protection for secret scanning of the account repositories.
What should you do first?

Answer:
Question 115 Written Answer
HOTSPOT
You need to configure a cloud service to store the secrets required by the mobile applications to call the share.
What should you include in the solution? To answer, select the appropriate options m the answer ate», NOTE: Each correct selection is worth one point.


Answer:


Explanation:
Every request made against a storage service must be authorized, unless the request is for a blob or container resource that has been made available for public or signed access. One option for authorizing a request is by using Shared Key.
Scenario: The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS.
The investment planning applications suite will include one multi-tier web application and two iOS mobile application. One mobile application will be used by employees; the other will be used by customers.
References: https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key
Question 116 Selectable Answer
You are using GitHub as a source code repository.
You create a client-side Git hook on the commit-msg event. The hook requires that each commit message contain a custom work item tag.
You need to make a commit that does not have a work item tag.
Which git commit parameter should you use?

Answer:
Explanation:
The commit-msg hook is invoked by git-commit and git-merge, and can be bypassed with the --no-verify option.
Reference: https://git-scm.com/docs/githooks
Question 117 Selectable Answer
You need to perform the GitHub code migration. The solution must support the planned changes for the DevOps environment.
What should you use?

Answer:
Explanation:
Woodgrove Bank plans to implement the following changes to the DevOps environment:
✑ Migrate all the source code from TFS1 to GitHub.
The Git-TFS tool is a two-way bridge between Team Foundation Version Control and Git, and can be used to perform a migration.
Reference: https://docs.microsoft.com/en-us/devops/develop/git/migrate-from-tfvc-to-git
Question 118 Written Answer
CORRECT TEXT
You need to ensure that Microsoft Visual Studio 2017 can remotely attach to an Azure Function named fa-11566895.
To complete this task, sign in to the Microsoft Azure portal.

Answer: Enable Remote Debugging
Before we start a debugging session to our Azure Function app we need to enable the functionality.
✑ Navigate in the Azure portal to your function app fa-11566895
✑ Go to the “Application settings”
✑ Under “Debugging” set Remote Debugging to On and set Remote Visual Studio version to 2017.
Question 119 Written Answer
DRAG DROP
You have a project in Azure DevOps that uses packages from multiple public feeds. Some of the feeds are unreliable.
You need to consolidate the packages into a single feed.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


Answer:


Explanation:
Step 1: Create a NuGet package.
NuGet and Maven are public package managers that support multiple feeds.
Step 2: Create an Azure Artifacts feed that uses upstream sources
If you want to use packages from multiple feeds, use upstream sources to bring packages from multiple feeds together into a single feed.
Step 3: Create a Microsoft Visual Studio project that includes all the packages Consume NuGet packages from upstream sources: Now you can open Visual Studio and install packages from the upstream sources you just configured.
Question 120 Selectable Answer
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed.
You haw a pokey stating that approvals must occur within eight hours.
You discover that deployments only if the approvals take longer than two hours.
You need to ensure that the deployments only fail if the approvals take longer than hours.
Solution From Post -deployment conditions, you modify the Timeout setting for post-deployment approvals.
Does this meet the goal?

Answer:
Showing page 8 of 18