AZ-400.prepaway.premium.exam.126q: AZ-400 Microsoft Azure DevOps Solutions Version 4.0

Question Set 1 QUESTION 1 You use Azure Artifacts to host NuGet packages that you create. You need to make one of the packages available to anonymous users outside your organization. The solution must minimize the nu ...

Question Set 1 QUESTION 1 You use Azure Artifacts to host NuGet packages that you create. You need to make one of the packages available to anonymous users outside your organization. The solution must minimize the number of publication points. What should you do? A. Change the feed URL of the package B. Create a new feed for the package C. Promote the package to a release view. D. Publish the package to a public NuGet repository. Correct Answer: B Section: [none] Explanation Explanation/Reference: Explanation: Azure Artifacts introduces the concept of multiple feeds that you can use to organize and control access to your packages. Packages you host in Azure Artifacts are stored in a feed. Setting permissions on the feed allows you to share your packages with as many or as few people as your scenario requires. Feeds have four levels of access: Owners, Contributors, Collaborators, and Readers. References: https://docs.microsoft.com/en-us/azure/dev ps/artifacts/feeds/feed-permissions? view=vsts&tabs=new-nav QUESTION 2 Your company plans to use an agile approach to software development. You need to recommend an application to provide communication between members of the development team who work in locations around the world. The a lications must meet the following requirements: Provide the ability to isolate the e bers of different project teams into separate communication channels and to keep a history of the chats within those channels. Be available on Windows 10, Mac OS, iOS, and Android operating systems. Provide the ability to add external contractors and suppliers to projects. Integrate directly with Azure DevOps. What should you recommend? A. Microsoft Project B. Bamboo C. Microsoft Lync D. Microsoft Teams E. Octopus Correct Answer: D Section: [none] Explanation Explanation/Reference: Explanation: Within each team, users can create different channels to organize their communications by topic. Eachchannel can include a couple of users or scale to thousands of users. Microsoft Teams works on Android, iOS, Mac and Windows systems and devices. It also works in Chrome, Firefox, Internet Explorer 11 and Microsoft Edge web browsers. The guest-access feature in Microsoft Teams allows users to invite people outside their organizations to join internal channels for messaging, meetings and file sharing. This capability helps to facilitate businessto-business project management. Teams integrates with Azure DevOps. Note: Slack would also be a correct answer, but it is not an option here. References: https://searchunifiedcommunications.techtarget.com/definition/Microsoft-Teams QUESTION 3 DRAG DROP You need to recommend project metrics for dashboards in Azure DevOps. Which chart widgets should you recommend for each metric? To answer, drag the appropriate chart widgets to the correct metrics. Each chart widget may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place: Correct Answer: Section: [none] Explanation Explanation/Reference: Explanation: Box 1: Lead time Lead time measures the total time elapsed from the creation of work items to their completion. Box 2: Cycle time Cycle time measures the time it takes for your team to complete work items once they begin actively working on them. Box 3: Burndown Burndown charts focus on remaining work within a specific time period. Incorrect Answers: Velocity provides a us ful metric for these activities: Support sprint planning Forecast future sprints and the backlog items that can be completedA guide for det mining how well the team estimates and meets their planned commitments References: https://docs.microsoft.com/en-us/azure/devops/report/dashboards/velocity-guidance?view=vsts https://docs.microsoft.com/en-us/azure/devops/report/dashboards/cycle-time-and-lead-time?view=vsts https://docs.microsoft.com/en-us/azure/devops/report/dashboards/configure-burndown-burnup-widgets? view=vsts QUESTION 4 You manage build pipelines and deployment pipelines by using Azure DevOps.Your company has a team of 500 developers. New members are added continually to the team. You need to automate the management of users and licenses whenever possible. Which task must you perform manually? A. modifying group memberships B. adding users C. assigning entitlements D. procuring licenses Correct Answer: D Section: [none] Explanation Explanation/Reference: Incorrect Answers: A: You can seamlessly replace existing solutions with group-based licensing to more easily manage licenses in Azure DevOps. You can use Group rules. C: Member Entitlement Management APIs allow managing Entitlements that include - License Extensions Project/Team memberships References: https://docs.microsoft.com/en-us/azure/devops/organizati ns/accounts/migrate-to-group-based-resourcemanagement?view=vsts&tabs=new-nav https://docs.microsoft.com/en-us/rest/api/azure/devops/memberentitlementmanagement/?view=azure-devops-rest-5.0 QUESTION 5 DRAG DROP You need to increase the security of your tea ’s development process. Which type of security tool should you reco end for each stage of the development process? To answer, drag the appropriate security tools to the correct targets. Each security tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place: Correct Answer: Section: [none] ExplanationExplanation/Reference: Explanation: Box 1: Threat modeling Threat modeling’s motto should be, “The earlier the better, but not too late and never ignore.” Box 2: Static code analysis Validation in the CI/CD begins before the developer commits his or her code. Static code analysis tools in theIDE provide the first line of defense to help ensure that security vulnerabilities are not introduced into the CI/CD process. Box 3: Penetration testing Once your code quality is verified, and the application is deployed to a lower environment like development or QA, the process should verify that there are not any security vulnerabilities in the running application. This can be accomplished by executing automated penetration test against the running application to scan it for vulnerabilities. References: https://docs.microsoft.com/en-us/azure/devops/articles/security-validation-cicd-pipeline?view=vsts QUESTION 6 HOTSPOT Your company uses Team Foundation Server 2013 (TFS 2013). You plan to migrate to Azure DevOps. You need to recommend a migration strategy that meets the following requirements: Preserves the dates of Team Foundation Version Control changesets Preserves the changes dates of work items revisions Minimizes migration effort Migrates all TFS artifacts What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: Section: [none] Explanation Explanation/Reference: Explanation: Box 1: Upgrade TFS to the most recent RTM release. One of the major prerequisites for migrating your Team Foundation Server database is to get your database schema version as close as possible to what is currently deployed in Azure Devops Services. Box 2: Use the TFS Database Import Service In Phase 3 of your migration project, you will work on upgrading your Team Foundation Server to one of the supported versions for the Database Import Service in Azure Devops Services.QUESTION 7 You are developing a multi-tier application. The application will use Azure App Service web apps as the front end and an Azure SQL database as the back end. The application will use Azure functions to write some data to Azure Storage. You need to send the Azure DevOps team an email message when the front end fails to return a status code of 200. Which feature should you use? A. Service Map in Azure Log AnalyticsB. Availability tests in Azure Application Insights C. Profiler in Azure Application Insights D. Application Map in Azure Application Insights Correct Answer: D Section: [none] Explanation Explanation/Reference: Explanation: Application Map helps you spot performance bottlenecks or failure hotspots across all components of your distributed application. Each node on the map represents an application component or its dependencies; and has health KPI and alerts status. Incorrect Answers: A: Service Map automatically discovers application components on Windows and Linux systems and maps the communication between services. You can use it to view your servers as you think of them--interconnected systems that deliver critical services. Service Map shows connections between servers, processes, and ports across any TCPconnected architecture with no configuration required, other than installation of an agent. References: https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-map QUESTION 8 During a code review, you discover many quality issues. Many modules contain unused variables and empty catch blocks. You need to recommend a solution to improve the quality of the code. What should you recommend? A. In a Grunt build task, select Enabled from Control Options. B. In a Maven build task, select Run PMD. C. In a Xcode build task, select Use xcpretty from Advanced. D. In a Gradle build task, select Run Checkstyle. Correct Answer: B Section: [none] Explanation Explanation/Reference: Explanation: PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. There is an Apache Mav n PMD Plugin which allows you to automatically run the PMD code analysis tool on your project's source code and generate a site report with its results. Incorrect Answe s: C: xcpretty is a fast and flexible formatter for