Free Microsoft AZ-400 Practice Exam with Questions & Answers | Set: 4

Name: How to Pass AZ-400 Exams
Brand: Examstrack
SKU: az-400
Price: 34.5 USD
Availability: InStock

Questions 31

You have a brand policy in a project in Azure DevOps. The policy requires that code always builds successfully.

You need to ensure that a specific user can always merge change to the master branch, even if the code fails to compile. The solution must use the principle of least privilege.

What should you do?

Options:

From the Security setting of the repository, modify the access control tor the user.

From the Security settings of the branch, modify the access control for the user.

Add the user to the Build Administrators group,

Add the user to the Project Administrators group

Microsoft AZ-400 Premium Access

Rafael

03-Jun-2026

examstrack's support team is the best! Their guidance was crucial for my AZ-400 success.

Questions 32

You have an Azure subscription that contains an Azure Container Apps instance named AppServicel. AppServicel is deployed to multiple Azure regions.

You have a containerized application named App1. App1 is a platform as a service (PaaS) solution that will have customers worldwide.

You plan to deploy App1 to AppService1 and will use a blue-green deployment strategy.

You need to recommend a solution that meet the following requirements:

• Automatically routes traffic between each deployment with minimal manual intervention

• Supports dynamic application settings and feature flags

• Minimizes administrative effort

What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-400 Question 32

Options:

Questions 33

You are monitoring the health and performance of an Azure web app by using Azure Application Insights. You need to ensure that an alert is sent when the web app has a sudden rise in performance issues and failures. What should you use?

Options:

Application Insights Profiler

Continuous export

Smart Detection

custom events

usage analysis

Questions 34

You have an Azure solution that contains a build pipeline in Azure Pipelines. You experience intermittent delays before the build pipeline starts. You need to reduce the time it takes to start the build pipeline. What should you do?

Options:

Split the build pipeline into multiple stages.

Purchase an additional parallel job.

Create a new agent pool.

Enable self-hosted build agents.

Questions 35

You plan to deploy a runbook that will create Azure AD user accounts.

You need to ensure that runbooks can run the AzurePowerShell cmdlets for Azure Active Directory.

To complete this task, sign in to the Microsoft Azure portal.

Options:

Answer:

See solution below.

Explanation:

Azure Automation now ships with the Azure PowerShell module of version 0.8.6, which introduced the ability to non-interactively authenticate to Azure using OrgId (Azure Active Directory user) credential-based authentication. Using the steps below, you can set up Azure Automation to talk to Azure using this authentication type.

Step 1: Find the Azure Active Directory associated with the Azure subscription to manage:

1. Log in to the Azure portal as the service administrator for the Azure subscription you want to manage using Azure Automation. You can find this user by logging in to the Azure portal as any user with access to this Azure subscription, then clicking Settings, then Administrators.

2. Note the name of the directory associated with the Azure subscription you want to manage. You can find this directory by clicking Settings, then Subscriptions.

Step 2: Create an Azure Active Directory user in the directory associated with the Azure subscription to manage:

You can skip this step if you already have an Azure Active Directory user in this directory. and plan to use this OrgId to manage Azure.

1. In the Azure portal click on Active Directory service.

2. Click the directory name that is associated with this Azure subscription.

3. Click on the Users tab and then click the Add User button.

4. For type of user, select “New user in yourorganization.” Enter a username for the user to create.

5. Fill out the user’s profile. For role, pick “User.” Don’t enable multi-factor authentication. Multi-factor accounts cannot be used with Azure Automation.

6. Click Create.

7. Jot down the full username (including part after @ symbol) and temporary password.

Step 3: Allow this Azure Active Directory user to manage this Azure subscription.

1. Click on Settings (bottom Azure tab under StorSimple)

2. Click Administrators

3. Click the Add button. Type the full user name (including part after @ symbol) of the Azure Active Directory user you want to set up to manage Azure. For subscriptions, choose the Azure subscriptions you want this user to be able to manage. Click the check mark.

Step 4: ConfigureAzure Automation to use this Azure Active Directory user to manage this Azure subscription

Create an Azure Automation credential asset containing the username and password of the Azure Active Directory user that you have just created. You can create a credential asset in Azure Automation by clicking into an Automation Account and then clicking the Assets tab, then the Add Setting button.

Note: Once you have set up the Azure Active Directory credential in Azure and Azure Automation, you can now manage Azure from Azure Automation runbooks using this credential.

[References:, https://azure.microsoft.com/sv-se/blog/azure-automation-authenticating-to-azure-using-azure-active-directory/, , ]

Questions 36

You have an Azure DevOps organization named Contoso.

You need to recommend an authentication mechanism that meets the following requirements:

• Supports authentication from Get

• Minimizes the need to provide credentials during authentication

What should you recommend?

Options:

managed identities in Azure Active Directory (Azure AD)

personal access tokens (PATs) in Azure DevOps

user accounts in Azure Active Directory (Azure AD)

Alternate credentials in Azure DevOps

Questions 37

Your company plans to deploy an application to the following endpoints:

• Ten virtual machines hosted in Azure.

• Ten virtual machines hosted in an on-premises data center environment

All the virtual machines have the- Azure Pipelines agent.

You need to implement a release strategy for deploying the application to the endpoints.

What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate components to the correct endpoint.

Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or soon to view content

NOTE: Each correct selection n worth one point.

AZ-400 Question 37

Options:

Questions 38

You are designing YAML-based Azure pipelines for the apps shown in the following table

AZ-400 Question 38

You need to configure the YAML strategy value for each app. The solution must minimize app downtime. Which value should you configure for each app? To answer, select the appropriate options in the answer area.

AZ-400 Question 38

Options:

Questions 39

You have an Azure DevOps pipeline that is used to deploy a Node.js app.

You need to ensure that the dependencies are cached between builds.

How should you configure the deployment YAML? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE Each correct selection is worth one point.

AZ-400 Question 39