Free AZ-400 Questions for Microsoft Designing and Implementing Microsoft DevOps Solutions AZ-400 Exam as PDF & Practice Test Engine

  • Exam Code/Number: AZ-400
  • Exam Name/Title: Designing and Implementing Microsoft DevOps Solutions
  • Certification Provider: Microsoft
  • Corresponding Certification: Microsoft Azure
  • Exam Questions: 625
  • Updated On: Aug 21, 2026
You plan to create alerts that will be triggered based on the page load performance of a home page.
You have the Application Insights log query shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation:
Timeline Description automatically generated with low confidence

Box 1: percentile_duration_95
Box 2: success
For example -
requests
| project name, url, success
| where success == " False "
This will return all the failed requests in my App Insights within the specified time range.
Reference:
https://devblogs.microsoft.com/premier-developer/alerts-based-on-analytics-query-using-custom-log-search/
You have an Azure subscription that contains the resources shown in the following table.

Project1 produces 9pm packages that are published to Feed 1. Feed1 is consumed by multiple projects.
You need to ensure that only tested packages are available for consumption. The solution must minimize development effort.
What should you do?
Correct Answer: D Vote an answer
You are integrating an Azure Boards project and a GitHub repository.
You need to authenticate Azure Boards to GitHub.
Which two authentication methods can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Correct Answer: A,E Vote an answer
You need to configure a virtual machine named VM1 to securely access stored secrets in an Azure Key Vault named az400-11566895-kv.
To complete this task, sign in to the Microsoft Azure portal.
Correct Answer:
See solution below.
Explanation:
You can usea system-assigned managed identity for a Windows virtual machine (VM) to access Azure Key Vault.
Sign in to Azure portal
Locate virtual machine VM1.
Select Identity
Enable the system-assigned identity for VM1 by setting the Status to On.

Note:Enabling a system-assigned managed identity is a one-click experience. You can either enable it during the creation of a VM or in the properties of an existing VM.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-nonaad
You manage projects by using Azure Boards. You manage project code by using GitHub. You have a work itemthat has an ID of 456. You need to link work item 456 to a new pull request.
What are two ways to achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct solution is worth one point.
Correct Answer: C,D Vote an answer
You have a Microsoft Entra tenant named Tenant! that is linked to an Azure subscription named Sub1.
You need to deploy five Azure subscriptions by using a Bicep file. The solution must ensure that the subscriptions are linked to Tenant1.
Which target scope should you use?
Correct Answer: C Vote an answer
Task 9
Initialize the default main branch, if it does not exist already.
You need to create a pipeline that will execute a .NET Core build task for the src directory.
The pipeline code must be stored in a new branch named azure-pipelinesT.
The pipeline must run automatically when a pull request against the mam branch is created or updated.
Correct Answer:
See explanation below
Explanation:
Task 9: Initialize the main branch (if it doesn't exist) and create a pull request-triggered pipeline for .
NET Core build
Step 1: Initialize the main Branch
* In your Azure DevOps Project (Project1), navigate to Repos .
* In the left menu, click Files .
* If you see a message like "This repository is empty," click Initialize .
* Create a README.md file (or another file) and set the default branch name to main.
* Click Initialize .
If the main branch already exists, you can skip this step.
Step 2: Create a New Branch for the Pipeline
* In Repos > Files , click on the Branches tab.
* Click New branch .
* Enter:
* Branch name: azure-pipelinesT
* Based on: main
* Click Create .
This creates a new branch named azure-pipelinesT from main.
Step 3: Create the Pipeline YAML File in the New Branch
* Switch to the azure-pipelinesT branch.
* In Files , click New file .
* Name the file: azure-pipelines.yml.
Step 4: Write the YAML Pipeline for .NET Core Build
Here's a sample YAML file:
trigger: none
pr:
branches:
include:
- main
pool:
vmImage: ' windows-latest '
variables:
buildConfiguration: ' Release '
steps:
- task: UseDotNet@2
displayName: ' Install .NET Core SDK '
inputs:
packageType: ' sdk '
version: ' 8.x ' # Or specify the exact version of .NET Core SDK you need installationPath: $(Agent.ToolsDirectory)/dotnet
- script: dotnet build src --configuration $(buildConfiguration)
displayName: ' Build .NET Core project '
This pipeline:
* Runs only when a pull request is created or updated targeting the main branch.
* Uses the windows-latest agent.
* Installs the .NET SDK and builds the project in the src directory.
Step 5: Commit the Pipeline File
* In the bottom commit message box:
* Message: Add PR-triggered pipeline for .NET Core build
* Ensure the branch is set to azure-pipelinesT .
* Click Commit .
Step 6: Create the Pipeline in Azure DevOps
* In the left menu, click Pipelines .
* Click New pipeline .
* Select:
* Azure Repos Git .
* Select your repository.
* Choose Existing Azure Pipelines YAML file .
* In the branch selector, choose the azure-pipelinesT branch.
* Select the YAML file path (azure-pipelines.yml).
* Click Continue and Run to validate.
Step 7: Test the Pipeline Trigger
* Create a new branch (e.g., feature/test-pr).
* Push a commit and create a pull request targeting main.
* Verify that the pipeline runs automatically for this PR in Pipelines .
You need to ensure that the https://contoso.com/statushook webhook is called every time a repository named az40010480345acr1 receives a new version of an image named dotnetapp.
To complete this task, sign in to the Microsoft Azure portal.
Correct Answer:
See solution below.
Explanation:
* Sign in to the Azure portal.
* Navigate to the container registry az40010480345acr1.
* Under Services, select Webhooks.
* Select the existing webhook https://contoso.com/statushook, and double-click on it to get its properties.
* For Trigger actions select image push
Example web hook:

Reference:
http s ://docs.m i crosoft.com/ en-us/azure/container-registry/container-registry-w ebhook
You need to configure access to Azure DevOps agent pools to meet the following requirements:
Use a project agent pool when authoring build or release pipelines.
View the agent pool and agents of the organization.
Use the principle of least privilege.
Which role memberships are required for the Azure DevOps organization and the project? To answer, drag the appropriate role memberships to the correct targets. Each role membership may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation:
Graphical user interface, application Description automatically generated

Box 1: Reader
Members of the Reader role can view the organization agent pool as well as agents. You typically use this to add operators that are responsible for monitoring the agents and their health.
Box 2: Service account
Members of the Service account role can use the organization agent pool to create a project agent pool in a project. If you follow the guidelines above for creating new project agent pools, you typically do not have to add any members here.
Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/pools-queues
You need to ensure that an Azure web app named az400-9940427-main supports rolling upgrades. The solution must ensure that only 10 percent of users who connect to az400-9940427-main use update versions of the app.
The solution must minimize administrative effort.
To complete this task, sign in to the Microsoft Azure portal.
Correct Answer:
See solution below.
Explanation:
Set up staging environments in Azure App Service
1. Open Microsoft Azure Portal
2. Log into your Azure account, select your app ' s resource page, in the left pane, selectDeployment slots > Add Slot.

3. In the Add a slot dialog box, give the slot a name, and select whether to clone an app configuration from another deployment slot. Select Add to continue.

4. After the slot is added, select Close to close the dialogbox. The new slot is now shown on the Deployment slots page. By default, Traffic % is set to 0 for the new slot, with all customer traffic routed to the production slot.
5. Select the new deployment slot to open that slot ' s resource page.

6. Change TRAFFIC % to 10
References:
https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots
Your company plans to implement a new compliance strategy that will require all Azure web apps to be backed up every five hours.
You need to back up an Azure web app named az400-11566895-main every five hours to an Azure Storage accountin your resource group.
To complete this task, sign in to the Microsoft Azure portal.
Correct Answer:
See solution below.
Explanation:
With the storage account ready, you can configure backs up in the web app or App Service.
Open the App Serviceaz400-11566895-main, which you want to protect, in the Azure Portal and browse to Settings > Backups. Click Configure and a Backup Configuration blade should appear.
Select the storage account.
Click + to create a private container. You could name this container after the web app or App Service.
Select the container.
If you want to schedule backups, then set Scheduled Backup to On and configure a schedule: every five hours Select your retention. Note that 0 means never delete backups.
Decide if at least onebackup should always be retained.
Choose if any connected databases should be included in the web app backup.
Click Save to finalize the backup configuration.

Reference:
https://petri.com/backing-azure-app-service
You plan to use a NuGet package in a project in Azure DevOps. The NuGet package is in a feed that requires authentication.
You need to ensure that the project can restore the NuGet package automatically.
What should the project use to automate the authentication?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
You have the repositories shown in the following table.

You need to migrate the contents of the GitHub repository to the Azure Repos repository. The solution must ensure that the Azure Repos repository only contains branches and history from the GitHub repository.
Which three commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.
Correct Answer:

Explanation:
How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection a worth one point.
Correct Answer:

Explanation:

Scenario: Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.
In order to use App Center, you need to opt in to the service(s) that you want to use, meaning by default no services are started and you will have to explicitly call each of them when starting the SDK.
Insert the following line to start the SDK in your app ' s App Delete class in the didFinishLaunchingWithOptions method.
MSAppCenter.start( " {Your App Secret} " , withServices: [MSAnalytics.self, MSCrashes.self]) References: https://docs.microsoft.com/en-us/appcenter/sdk/getting-started/ios
0
0
0
10