AZ400 quiz 3

You intend to make use of Azure Artifacts to share packages that you wrote, tested, validated, and deployed.

You want to use a solitary feed to release several builds of each package. You have to make sure that the release of packages that are in development is restricted.

Which of the following actions should you take?

• A. You should make use of static code analysis.

• B. You should make use of views.

• C. You should make use of dynamic code analysis.

• D. You should make use of upstream sources.

Answer explanation

Feed views enable developers to share a subset of package-versions with their consumers. A common use of feed views is to share package versions that have been tested and validated but hold back on packages that are still under development and/or didn't meet a certain quality bar.

You need to consider the underlined segment to establish whether it is accurate.

To find when common open source libraries are added to the code base, you should add Jenkins to the build pipeline.

Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

• A. No adjustment required.

• B. SourceGear Vault

• C. WhiteSource

• D. OWASP ZAP

Your company has an Azure DevOps project, which includes a build pipeline that makes use of roughly fifty open source libraries.

You have been tasked with making sure that you are able to scan project for common security weaknesses in the open source libraries. Which of the following actions should you take?

• A. You should create a build task and use the WhiteSource Bolt service.

• B. You should create a deployment task and use the WhiteSource Bolt service.

• C. You should create a build task and use the Chef service.

• D. You should create a deployment task and use the Chef service.

Answer explanation

WhiteSource integrates with your CI servers, build tools and repositories to detect all open source components in your software, without ever scanning your code. It provides you with real-time alerts on vulnerable or problematic components, generates comprehensive up-to-date reports in one-click and enables you to streamline your entire open source management process with automated policies.

You need to consider the underlined segment to establish whether it is accurate.

Black Duck can be used to make sure that all the open source libraries conform to your company's licensing criteria.

Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

• A. No adjustment required.

• B. Maven

• C. Bamboo

• D. CMAKE

You have an Azure subscription that contains resources in several resource groups.

You need to design a monitoring strategy that will provide a consolidated view. The solution must support the following requirements:

✑ Support role-based access control (RBAC) by using Azure Active Directory (Azure AD) identifies.

✑ Include visuals from Azure Monitor that are generated by using the Kusto query language.

✑ Support documentation written in markdown.

✑ Use the latest data available for each visual.

What should you use to create the consolidated view?

• A. Azure Monitor

• B. Microsoft Power BI

• C. Azure Data Explorer

• D. Azure dashboards

You are automating the testing process for your company. You need to automate UI testing of a web application.

Which framework should you use?

• A. JaCoco

• B. Selenium

• C. Xamarin.UITest

• D. Microsoft.CodeAnalysis

Answer explanation

Correct Answer: B

Performing user interface (UI) testing as part of the release pipeline is a great way of detecting unexpected changes, and need not be difficult. Selenium can be used to test your website during a continuous deployment release and test automation.

You are building an ASP.NET Core application.

You plan to create an application utilization baseline by capturing telemetry data.

You need to add code to the application to capture the telemetry data. The solution must minimize the costs of storing the telemetry data. Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point

• A. Add the <InitialSamplingPercentage>99</InitialSamplingPercentage> parameter to the ApplicationInsights.config file.

• B. From the code of the application, enable adaptive sampling.

• C. From the code of the application, add Azure Application Insights telemetry.

• D. Add the <MaxTelemetryItemsPerSecond>5</MaxTelemetryItemsPerSecond> parameter to the ApplicationInsights.config file.

• E. From the code of the application, disable adaptive sampling.

You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 and an Azure Standard Load Balancer named LB1. LB1 distributes incoming requests across VMSS1 instances.

You use Azure DevOps to build a web app named App1 and deploy App1 to VMSS1. App1 is accessible via HTTPS only and configured to require mutual authentication by using a client certificate.

You need to recommend a solution for implementing a health check of App1. The solution must meet the following requirements:

✑ Identify whether individual instances of VMSS1 are eligible for an upgrade operation.

✑ Minimize administrative effort.

What should you include in the recommendation?

• A. an Azure Load Balancer health probe

• B. Azure Monitor autoscale

• C. the Custom Script Extension

• D. the Application Health extension

You have a build pipeline in Azure Pipelines that occasionally fails.

You discover that a test measuring the response time of an API endpoint causes the failures. You need to prevent the build pipeline from failing due to the test.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Set Flaky test detection to Off.

• B. Clear Flaky tests included in test pass percentage.

• C. Enable Test Impact Analysis (TIA).

• D. Manually mark the test as flaky.

• E. Enable test slicing.

Answer explanation

Correct Answer: BD

D: You can mark or unmark a test as flaky based on analysis or context, by choosing Flaky.

To configure flaky test management, choose Project settings, and select Test management in the Pipelines section. B:

Slide the On/Off button to On.

Your company hosts a web application in Azure. The company uses Azure Pipelines for the build and release management of the application. Stakeholders report that the past few releases have negatively affected system performance.

You configure alerts in Azure Monitor.

You need to ensure that new releases are only deployed to production if the releases meet defined performance baseline criteria in the staging environment first.

What should you use to prevent the deployment of releases that fall to meet the performance baseline?

• A. an Azure Scheduler job

• B. a trigger

• C. a gate

  D. an Azure function

• D. an Azure function

Answer explanation

Gates allow automatic collection of health signals from external services, and then promote the release when all the signals are successful at the same time or stop the deployment on timeout. Typically, gates are used in connection with incident management, problem management, change management, monitoring, and external approval systems.