You have app named App1. You have a Log Analytics workspace named Workspace1 that contains two tables named Events and Logs. App1 manage eventsin multiple locations and writes logs to Workspace1.
You need to query Workspace1 for all log entries related to Asia that occurred during the last two days.
In which order should you arrange the query statements?
You store source code in a Git repository in Azure repos. You use a third-party continuous integration (CI) tool to control builds.
What will Azure DevOps use to authenticate with the tool?
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have an on-premises web server named Server1.
You need to ensure that you can build .NET apps and deploy the apps to Server1 by using Azure Pipelines.
Solution: You deploy Managed DevOps Pools and select the Ubuntu Server 22.04 LTS - x64 Gen 2 image.
Does this meet the goal?
You have a project in Azure DevOps that uses packages from multiple public feeds. Some of the feeds are unreliable.
You need to consolidate the packages into a single feed.
Which threeactions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You are creating a NuGet package.
You plan to distribute the package to your development team privately.
You needto share the package and test that the package can be consumed.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You are monitoring the health and performance of an Azure web app by using Azure Application Insights.
You need to ensure that an alert is sent when the web app has a sudden rise in performance issues and failures.
What shouldyou use?
You plan to publish build artifacts by using an Azure pipeline.
You need to create an. artifactignore file that meets the following requirements:
• Includes all files in the build output folder and all subfolders
• Excludesfiles that have the .dll extension
What should you include in the file?
Your company uses cloud-hosted Jenkins for builds.
You need to ensure that Jenkins can retrieve source code fromAzure Repos.
Which three actions should you perform? Each correct answer presents part of the solution
NOTE: Each correct answer selection is worth one point
You have an Azure subscription that contains two resource groups named Contoso RG and Contoso Dev, an Azure data factory named Contoso Data Factory, and a release pipeline
in Azure Pipelines named Pipeline1.
You plan to deploy Contoso Data Factory to ContosoRG by using Pipeline1.
You add the Azure Resource Manager (ARM) template deployment task shown the following exhibit.
You plan to deploy a solution that will include multiple microservices.
You need to recommend a deployment strategy for the microservices. The solution must meet the following requirements:
• Enable users to test new features by using aspecific URL.
• Minimize the effort required to promote a test version to production.
• Minimize the effort required to revert production code to the previous version.
Which strategy should you recommend?
Your company develops an app for OS. All users ofthe app have devices that are members of a private distribution group in Microsoft Visual Studio App Center.
You plan to distribute a new release of the app.
You need to identify which certificate file you require to distribute the new release from App Center.
Which file type should you upload to App Center?
You manage projects by using Azure Boards.
You have a current work item name item A that is dependent on a work item named item3.
You need to define the dependency for item A.
What should you do in the web portal for Azure DevOps?
Your company has a project in Azure DevOps.
You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault.
You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege.
What should you include in the recommendation? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE:Each correct selection isworth one point.
You have multiple teams that work on multiple projects in Azure DevOps.
You need to plan and manage the consumers and producers for each project. Thesolution must provide an overview of all the projects.
What should you do?
You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an AzureSQL database named DB1.
You need to create a release pipeline that uses the Azure SQL Database Deployment task to update DB1.
Which artifact should you deploy?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might nothave a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an approval process that contains a condition. The condition requiresthat releases be approved by a team leader before they are deployed.
You have a policy stating that approvals must occur within eight hours.
You discover that deployment fail if the approvals take longer than two hours.
You need to ensure that the deployments only fail if the approvals take longer than eight hours.
Solution: From Post-deployment conditions, you modify the Timeout setting for post-deployment approvals.
Does this meet the goal?
NO: 14
Your company isbuilding a new solution in Java.
The company currently uses a SonarQube server to analyze the code of .NET solutions.
You need to analyze and monitor the code quality of the Java solution.
Which task types should you add to the build pipeline?
You have anAzure Pipelines pipeline named Pipeline1 that has the following YAML definition.
NOTE: Each correct selection is worth one point.
You have an Azure Pipelines pipeline named Pipeline1 and a user named User1. Pipeline1 contains a temporary final stage named final1. You need to ensure that User1 can delete final1 when testing is complete. The solution must follow the principle of least privilege. At which level should you grant permissions to User1?
You are automatingthe testing process for your company.
You need to automate UI testing of a web application.
Which framework should you use?
You plan to use Azure KubernetesService (AKS) to host containers deployed from images hosted in a Docker Trusted Registry.
You need to recommend a solution for provisioning and connecting to AKS. The solution must ensure that AKS is RBAC-enaWed and uses a custom service principal.
Whichthree commands should you recommend be run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the coned order.
You are finalizing a release in GitHub.
You need to apply the following labels to the release:
Name
Release v3.0
Release date
How should you complete the get command? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
Your company has a project in Azure DevOps.
You need to ensure that when there are multiple builds pending deployment only the most recent build is deployed.
What should you use?
You have project in Azure DevOps.
You create the following template named Template1.yml.
You create the following pipeline named File1.yml.
You need to ensure that Template1.yaml runs before File1.yml.
How should you update File1.yml?
You use GitHub for source control and Azure Boards for project management. GitHub and Azure Boards are integrated.
You plan to create a pull request in GitHub.
You need to automatically link the request to an existing Azure Boards work item by using the text of AB#
To which two elements can you add the text? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
: 213
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant.
You are configuring a build pipeline in Azure Pipelines that will include a task named Task1. Task1 will authenticate by using an Azure AD service principal.
Which three values should you configure for Task1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Your company uses Git as a source code control system for a complex app named App1.
You plan to add a new functionality to App1.
You need to design a branching model for the new functionality.
Which branch lifetime and branch time should you use in the branching model? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to use an Azure Pipelines pipeline to build and test an app and test the database of the app. The solution must meet the following requirements.
• The test stages must be run in parallel.
• The Publish_Test_Results stage must always be run.
• The test stages mustbe run after successful completion of the build stage.
• The PubHsh_Test_ftesuHs stage must be run after completion of all the test stages.
Solution: You include the following elements in the YAML definition of the pipeline.
Does this meet the goal?
You are configuring a release pipeline in Azure DevOps as shown in the exhibit.
Use thedrop-down menus to select the answer choice that answers each question based on the information presented in the graphic.
NOTE:Each correct selection is worth one point.
You havean Azure subscription that contains the resources shown in the following table.
Project1 produces 9pm packages that are published to Feed 1. Feed1 is consumed by multiple projects.
You need to ensure that only tested packages are available for consumption. The solution must minimize development effort.
What should you do?
You have an Azure DevOps organization named Contoso.
You have 10 Azure virtual machines that run Windows Server 2019. The virtual machines host an application that you build and deploy by using AzurePipelines. Each virtual machine has the Web Server (IIS) role installed and configured.
You need to ensure that the web server configurations pin the virtual machines is maintained automatically. The solution must provide centralized management of the configuration settings and minimize management overhead.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You have an Azure subscription.
You need to create a storage account by using a Bicep file.
How should you complete the file? To answer, select the appropriateoptions in the answer area.
NOTE: Each correct selection is worth one point.
As part of your application build process, you need to deploy a group of resources to Azure by using an Azure Resource Manager template located on GitHub.
Which three action should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
In Azure DevOps, you create Project3.
You need to meet the requirements of the project.
What should you do first?
You need to configure Azure Automation for the computers in Pool7.
Whichthree actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them m the correct order.
You need to implement Project6.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them m the correct order.
You need to implement Project4.
What should you do first?
You need to implement the code flow strategy for Project2 in Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange in the correct order.
You need to configure Azure Automation for the computer in Group7.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You need to implement the code flow strategy for Project2 in Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list ofactions to the answer area and arrange them in the correct order.
You add the virtual machines as managed nodes in Azure Automation State Configuration.
You need to configure the computer in Group7.
What should you do?
You need to recommend a procedure to implement the build agent for Project1.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions tothe answer area and arrange them in the correct order.
How should you configure the filters for the Project5 trigger? To answer, select the appropriate option in the answer area.
NOTE: Each correct selectionis worth one point.
You need to configure a cloud service to store the secrets required by the mobile applications to call the share.
What should you include in thesolution? To answer, select the appropriate options m the answer area, NOTE: Each correct selection is worth one point.
Which branching strategy should you recommend for the investment planning applications suite?
What should you use to implementthe code quality restriction on the release pipeline for the investment planning applications suite?
ION NO: 7
You have Azure Pipelines and GitHub integrated as a source code repository.
The build pipeline has continuous integration enabled.
You plan to trigger an automated build whenever code changes are committed to the repository.
You need to ensure that the system will wait until a build completes before queuing another build.
What should you implement?
How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection a worth one point.
To resolve the current technical issue, what should you do to theRegister-AzureRmAutomationDscNodecommand?
You are using GitHub asa source code repository.
You create a client-side Git hook on the commit-msg event. The hook requires that each commit message contain a custom work item tag.
You need to make a commit that does not have a work item tag.
Which git commit parameter shouldyou use?
Where should the build and release agents for the investment planning application suite run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
How should you confrere the release retention policy for the investment planning depletions suite? To answer, select the appropriate options in the answer area.
NOTE: Eachcorrect selection is worth one point.
You have a project in Azure DevOps.
You plan to deploy a self-hosted agent by using an unattended configuration script.
Which two values should you define in the configuration script? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth onepoint.
HOTSPOT
You have an Azure virtual machine named VM1 that runs Linux.
You plan to deploy the Desired State Configuration (DSC) extension to VM1.
You need to grant the Log Analytics agent the appropriate directory permissions.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth onepoint.
How should youconfigure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
HOTSPOT
You are using PowerShell to administer Azure Log Analytics workspaces.
You need to list the available workspaces and their properties.
How should you complete the command? To answer, select the appropriate optionsin the answer area.
NOTE: Each correct selection is worth one point.
Which package feed access levels should be assigned to the Developers and Team Leaders groups for the investment planning applications suite? To answer, drag the appropriate access levels to the correct groups. Each access level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE:Each correct selection is worth one point.
You need to perform the GitHub code migration. The solution must support the planned changes for the DevOps environment.
What should you use?
You plan to deploy a new database environment. The solution must meet the technical requirements. You need to prepare the database for the deployment. How should you formatthe export?
You need to configure the alert for VM1.The solution must meet the technical requirements.
Which two settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE:Each correct selection is worth one point.
You need to meet the technical requirements for controlling access to Azure DevOps.
What should you use?
You need to configure Azure Pipelines to control App2 builds.
Which authentication method should you use?
You need to configure authentication for App1. The solution must support the planned changes.
Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
You need to meet the technical requirements for monitoring App1.
What should you use?
You are configuring the Azure DevOps dashboard. The solution must meet the technical requirements.
Which widget should you use for each metric? To answer, drag the appropriate widgets to the correct metrics. Each widgetmay be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE:Each correct selection is worth one point.
You need to the merge the POC branch into the main branch. The solution must meet the technical requirements.
Which command should you run?
Task 12
You need to create a personal access token (PAT) named Token! that has only the following capabilities
• Read write, andmanage code
• Read and execute builds
• Read releases
Token1 must expire in 60 days.
Task 10
You need to create a variable group named varGroup1 that will contain the following variables and default values:
• username: Userl-48901628
• password: aFpJ2j+6M!
The PASSWORD variable must be secret.
Task 6
For Project 1. you need to create a service connection that can be used to deploy resources to the RGHod489Q1628 resource group.
The service connection must use the ManagedJd1 identity and workload identity federation.
Task 8
In Project1, you need to create a service hook that will integrate with Azure Storage.
Use the queue1 queue from the storage48901628 storage account.
Task 1
You need to ensure that an Azure Web App named az400-38443478-main can retrieve secrets from an Azure key vault named az400-3844J478-kv1 byusing a system managed identity The solution must use the principle of least privilege.
You plan to deploy a website that will be hosted in two Azure regions.
You need to create an Azure Traffic Manager profile named az40011566895n1-tm in a resource group named RG1lod11566895. The solution must ensure that users will always connect to a copy of the website that is in the same country.
To complete this task, sign in to the Microsoft Azure portal.
Task 2
You need to log all audit events for the Azure DevOps organization in the Log Analytics! Logs Analytics workspace.
You need to ensure that an Azure web app named az400-9940427-main supports rolling upgrades. The solution must ensure that only 10 percent of users who connect to az400-9940427-main use update versions of the app.
The solution must minimize administrative effort.
To complete this task, sign in to the Microsoft Azure portal.
Task 6
You have an Azure function hosted in an App Service plan named az400-38443478-funct
You need to configure az400 38443478-funcl lo update the functions automatically whenever new code is committedto the main branch of
NOTE: Access to GitHub is blocked in the exam environment. Access to GitHub is NOT required to complete the task successfully.
Task 7
Initialize the default main branch, if it does not exist already
In the User 1-42147509 organization, you need to install the Microsoft Security DevOps extension.
Next, create a new starter pipeline named starter1 that will use the following starter code.
Ensure that starter! includes a task that executes the extension and uses the following input*:
• Command: run
• Policy aruredevops
• Publish: true
Save the pipeline to anew branch named starter
Task 1
Navigate to select Start Free, and specify the following credentials:
• UserUsefl-42147509@ExamUsers.com
• Password: eWrSalD2!
Use the default setting to sign up for Azure DevOps and create an Azure DevOps organization. Once the organization is created. creates private project named Project1.
You need to add an external userthat has an email address of Usfrr2-42147S09@ExamUsers.com as a stakeholder of the User1 -42147509 Azure DevOps organization.
The user must be added to the most restrictive Azure DevOps group.
To complete this task, sign in to the Azure DevOps portal asUserl-42147509©ExamUsers.com.
You need to create a virtual machine template in an Azure DevTestLabs environment named az400-9940427-dtl1. The template must be based on Windows Server 2016 Datacenter. Virtual machines created from the template must include the selenium tool and the Google Chrome browser.
To complete this task, sign in to the Microsoft Azure portal.
You need to create a notification if the peak average response time of an Azure web app named az400-9940427-main is more than five seconds when evaluated during a five-minute period. The notification must trigger the webhook.
To complete this task, sign in to the Microsoft Azure portal.
You need to prepare a network security group (NSG) named az400-9940427-nsg1 to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet.
To complete this task, sign in to the Microsoft Azure portal.
Task 3
You need to create a new team dashboard named Dashboard1 for the default project team of Project1. The dashboard must display the members of the team
You have a web app that connects to an Azure SQL Database named db1.
You need to configure db1 to send Query Store runtime statistics to Azure Log Analytics.
To complete this task, sign in to the Microsoft Azure portal.
You plan to deploy a runbook that will create Azure AD user accounts.
You need to ensure that runbooks can run the AzurePowerShell cmdlets for Azure Active Directory.
To complete this task, sign in to the Microsoft Azure portal.
Task 3
Initialize the default main branch, if it floes not already exist.
You need to protect the main branch of the Project l repository to ensure that all changes are processed by using a pull request that has traceability to a work item.
Task 8
Initialize the default main branch,if it does not exist already.
In Project 1, you need to create a new Azure Pipelines YAML pipeline by using the ASP.NET template.
The pipeline must use Azure Repos as the hosting platform and must be created in a new branch named azure-pipelines.
You plan to deploy a template named D:\Deploy.json to a resource group named Deploy-lod9940427.
You need to modify the template to meet the following requirements, and then to deploy the template:
The address space must be reduced to support only 256 total IP addresses.
The subnet address space must be reduced to support only 64 total IP addresses.
To complete this task, sign in to the Microsoft Azure portal.
Task 9
In Project1, you need to create a variable group named varGroup1 that will contain the following variables:
serverNane: server1 dbName: db1
You need to ensure that the webhook is called every time a repository named az40010480345acr1 receives a new version of an image named dotnetapp.
To complete this task, sign in to the Microsoft Azure portal.
SIMULATION
You need to create and configure an Azure Storage account named az400lod11566895stor in a resource group named RG1lod11566895 to store the boot diagnostics for avirtual machine named VM1.
To complete this task, sign in to the Microsoft Azure portal.
Task 7
You need to prepare a network security group (NSG) named az400 38443478 nsgl to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet
You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity.
Thesolution must use the principle of least privilege.
To complete this task, sign in to the Microsoft Azure portal.
Task 2
For the RG1 lod42147S09 resource group, you need to create an action group named DevOpsAGthat can be triggered in any region by using Alerts.
The action group must email two users named admin1 @contoso.com and admin2@contoso.com and notify members of the Owner role for the resource.
Use only the common alert schema for notifying the resource owners.
Task 7
You need to create a pipeline to deploy a Docker image. The commit must be created in a new branch named azure-pipelines.
The pipeline must be created by using the predefined Docker template.
You manage a website that uses an Azure SQL Database named db1 in a resource group named RG1lod11566895.
You need tomodify the SQL database to protect against SQL injection.
To complete this task, sign in to the Microsoft Azure portal.
You need to create an instance of Azure Application Insights named az400-9940427-main and configure the instance to receive telemetry data from an Azure web app named az400-9940427-main.
To complete this task, sign in to the Microsoft Azure portal.
Task 4
For Project1, you need to create a self-hosted agent pod named Pool1.
All the pipelines in Project1 must have access to Pool1.
You have an Azure functionhosted in an App Service plan named az400-9940427-func1.
You need to configure az400-9940427-func1 to upgrade the functions automatically whenever new code is committed to the master branch of
To complete this task, sign in to the Microsoft Azure portal.
Task 4
Youneed to configure a virtual machine template in a DevTest Labs environment named az400-38443478-dtl1. The operating system must be based on Windows Server 2016 Datacenter. Virtual machines created from the DevTest Lab must include the Selenium tool and theGoogle Chrome browser.
You need to create an instance of Azure Application Insights named az400-9940427-main and configure the instance to receive telemetry data from an Azure web app named az400-9940427-main.
To complete this task, sign in to the Microsoft Azure portal.