DevOps Engineer Expert (AZ-400) - Full Practice Exam 1

1. A bad change has already been merged into a shared branch. The team wants to undo its effect while preserving an auditable history and avoiding rewriting colleagues' commits. Which operation is generally appropriate?
2. A build must reach a private internal dependency that public hosted agents cannot access. Which agent design should the team evaluate?
3. A canary release should stop expanding if error rate and latency exceed acceptable thresholds. What should inform the release gate?
4. A cleanup job must run after a test stage even when the tests fail. Which pipeline design addresses this requirement?
5. A deployment pipeline authenticates to Azure. The team wants to avoid maintaining a long-lived client secret where supported. Which service-connection authentication approach should it use?
6. A deployment pipeline only needs to manage one application resource group. What permission scope best follows least privilege?
7. A deployment stage must run only after the build and test stage succeeds. What should the pipeline express?
8. A developer accidentally pushes a credential. Secret scanning detects it. Which immediate response is necessary in addition to repository cleanup?
9. A feature is deployed but must remain hidden until a controlled business rollout. The team wants to enable it without rebuilding the application. Which approach fits?
10. A function's branching logic needs rapid deterministic validation before packaging. Which test category is the most direct fit?
11. A high-volume application generates excessive telemetry. The team wants to control ingestion while retaining a useful view of distributed operations. Which approach should it evaluate?
12. A pipeline must deploy to a named environment and record deployment history associated with that environment. Which Azure Pipelines job type is designed for this?
13. A pipeline needs distinct nonsecret configuration values for test and production. Which approach is appropriate?
14. A pipeline needs to identify known vulnerabilities in third-party libraries used by an application. Which security check is the direct fit?
15. A pipeline repeatedly downloads identical dependencies and spends most of its time restoring them. Which optimization should be evaluated first?
16. A product team wants to reduce the time from a code change being committed to that change running in production. Which metric should it track?
17. A production branch must prevent ordinary direct pushes and require a successful validation build before merging. Which TWO policies should be configured? Select TWO.
18. A production environment requires approval by the operations owner before deployment. Where should the team configure an enforceable environment gate?
19. A public library release introduces an intentional backward-incompatible API change under Semantic Versioning. Which version component should normally increase?
20. A release increases checkout latency. Operations needs correlated requests, dependencies, and exceptions to locate the regression. Which instrumentation should it use?
21. A release must introduce a database field used by a new app version while old instances still run during rollout. Which database change sequence best preserves compatibility?
22. A release should initially serve a small portion of real production traffic and expand only if measured health is acceptable. Which deployment strategy fits?
23. A repository contains large binary design assets that make ordinary clones expensive. The team still needs versioned references to those files. Which Git extension should it evaluate?
24. A repository requires two reviewers and successful CI. A developer wants to merge an urgent fix without those checks. Which process should the team design in advance?
25. A service must be verified against its real database and message-broker contracts in a controlled environment. Which test type best fits?
26. A team achieves high line coverage but important failure behavior still breaks. What should it conclude?
27. A team has many partially completed items and long waits between development and testing. Which process improvement best targets flow rather than merely starting more work?
28. A team increases deployment frequency, but production failures also increase. Which additional metric helps assess the delivery-quality tradeoff?
29. A team must identify the exact source revision used for a production release. Which Git construct is a suitable immutable reference when governed against later movement?
30. A team practices trunk-based development and wants fast integration. Which branch behavior best supports this goal?
31. A team wants a fully prepared new production environment and a controlled traffic switch from the old environment, with rollback possible. Which deployment strategy fits?
32. A team wants a managed package feed that can serve internal packages and approved external dependencies through upstream sources. Which Azure DevOps capability fits?
33. A team wants automated detection of supported security weaknesses in source code before release. Which check should be added?
34. A team wants to measure how quickly changes reach production and how quickly disrupted service is restored. Which TWO metrics directly address these goals? Select TWO.
35. A test intermittently fails because it depends on timing against a shared external service. What is the best long-term response?
36. A troubleshooting script prints every environment variable in a deployment job. Some variables contain secrets. What should be changed?
37. An App Service release must be warmed up before production traffic moves to it. The supported plan includes deployment slots. Which sequence fits?
38. An external system should react when a supported Azure DevOps event occurs. The team wants event-driven integration rather than repeatedly polling for all changes. Which capability fits?
39. An organization must retain release artifacts long enough for audit and rollback while controlling storage cost. Which strategy fits?
40. An untrusted pull request can run build code. Why should its jobs not use a privileged persistent deployment agent without isolation?
41. Architecture decisions and operating procedures must be versioned with a project and reviewed over time. Which documentation approach is suitable?
42. Before applying an infrastructure change, reviewers want to see the expected resource additions, modifications, and deletions. Which ARM/Bicep capability should the pipeline use?
43. Developers use GitHub pull requests while product owners use Azure Boards. They need work items linked to related commits and pull requests. What should be configured?
44. Infrastructure definitions must be reviewed, deployed consistently, and reproduced for new environments. Which approach fits?
45. Production and staging must deploy the same tested binary. Which release process best preserves artifact integrity?
46. Requests cross several services. Which telemetry practice makes it possible to follow one operation across those boundaries?
47. Several pipelines need centrally managed shared values, including secrets retrieved from a supported Key Vault integration. Which Azure Pipelines feature should be evaluated?
48. Twenty application repositories must share a common pipeline validation sequence while supplying their own service names. Which approach reduces duplication?
49. Two successful pipeline runs could deploy concurrently to the same production environment and interfere with one another. Which environment control should the team evaluate?
50. Two test suites are independent and have no shared mutable fixtures. The pipeline has enough agent capacity. Which change can reduce elapsed validation time?

Comments — 0