Free Microsoft AZ-400 Practice Questions & Answers 2026 Part2

Question #1

You use Azure Pipelines to build and test code.You need to analyze the agent pool usage.What are two ways to achieve the goal? Each correct answer presents a complete solution.Note: Each correct selection is worth one point.

A. Query the PipelineRun/PipelineRuns endpoint

B. Review the historical graph for the agent pools

C. Query the TaskAgentPoolSizeSnapshot/TaskAgentPoolSizeSnapshots endpoint

D. Review the Pipeline duration report

View answer

Correct Answer: BC

Question #2

You plan to create an image that will contain a .NET Core application.You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)You need to ensure that the image is as small as possible when the image is built.Which line should you modify in the file?

A.

B.

C.

D.

View answer

Correct Answer: D

Question #3

Your company uses the following resources:Windows Server 2022 container images hosted in an Azure Container Registry.Azure virtual machines that run the latest version of UbuntuAn Azure Log Analytics workspaceMicrosoft Entra IDAn Azure key vaultFor which two resources can you receive vulnerability assessments in Microsoft Defender for Cloud? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

A. the Azure Log Analytics workspace

B. the Azure key vault

C. the Azure virtual machines that run the latest version of Ubuntu

D. Microsoft Entra ID

E. The Windows Server 2022 container images hosted in the Azure Container Registry

View answer

Correct Answer: CE

Question #4

You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named Cluster1 and an Azure Monitor workspace named WS1. WS1 uses the Azure Monitor managed service for Prometheus.You need to send the metrics data of Cluster1 to WS1.Which two actions should you perform? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

A. Integrate Microsoft Entra ID and AKS

B. Install the metrics add-on

C. Create a managed identity

D. Disable the snapshot controller

E. Configure a Microsoft Defender for Cloud security profile

View answer

Correct Answer: BC

Question #5

You have an Azure DevOps project named Project1 that uses an Azure Pipelines pipeline to build, test, and deploy an app named Appl.You have a credential named credl.You need to ensure that credl can be used to deploy builds of Appl to production The solution must ensure that credl is available for use only by specific users and pipelines in Project 1.What should you do?

A. reate cred 1 as a secret variable in a variable group

B. dd credl to an Azure key vault

C. dd credl as a variable to a template pipeline

D. reate a deployment gate for the pipelines that deploy builds of Appl to production

View answer

Correct Answer: A

Question #6

You have a web app named Appl.You need to recommend a deployment strategy for App1 that meets the following requirements:* Ensures that you can deploy new builds of App1 without exposing new functionalities to all users* Ensures that you can target a specific subsection of users to test the new functionalities What should you include in the recommendation?

A. rogressive exposure deployment

B. lue/green deployment

C. eature toggles

D. /B testing

View answer

Correct Answer: C

Question #7

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to update the Azure DevOps strategy of your company.You need to identify the following issues as they occur during the company's development process:Licensing violationsProhibited librariesSolution: You implement continuous integration.Does this meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #8

You plan to provision a self-hosted Linux agent Which authentication mechanism should you use to register the self-hosted agent? Note: PAT Supported only on Azure Pipelines and TFS 2017 and newer. After you choose PAT, paste the PAT token you created into the command prompt window. Use a personal access token (PAT) if your Azure DevOps Server or TFS instance and the agent machine are not in a trusted domain. PAT authentication is handled by your Azure DevOps Server or TFS instance instead of the domain controller. https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/v2-linux https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/v2-linux?view=azure-devops

A. SSH key

B. personal access token (PAT)

C. Alternate credentials

D. certificate

View answer

Correct Answer: B

Question #9

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You manage a project in Azure DevOps.You need to prevent the configuration of the project from changing over time.Solution: Perform a Subscription Health scan when packages are created.Does this meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #10

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish ifthe solution satisfies the requirements.You run the Register-AzureRmAutomationDscNode command in your company's environment.You need to make sure that your company's test servers remain correctly configured, regardless of configuration drift.Solution: You set the -ConfigurationMode parameter to ApplyOnly.Does the solution meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #11

You have an Azure App Service app named App1.You need to identify when App1 was offline. The solution must minimize administrative effort.Which troubleshooting category in App Service diagnostics should you use?

A. Availability and Performance

B. Configuration and Management

C. Diagnostic Tools

D. Navigator

View answer

Correct Answer: A

Question #12

You manage source code control and versioning by using GitHub.A large file it committed to a repository accidentally.You need to reduce the size of the repository. The solution must remove the file from the repository.What should you use?

A. bfg

B. 1fs

C. gvfs

D. init

View answer

Correct Answer: A

Question #13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You manage a project in Azure DevOps.You need to prevent the configuration of the project from changing over time.Solution: Implement Continuous Assurance for the project.Does this meet the goal?

A. Yes

B. No

View answer

Correct Answer: A

Question #14

You have an app named App1 that uses Application Insights to monitor application performance.You need to analyze how often a page in App1 is accessed.Which pane in Application Insights should you use?

A. Events

B. Sessions

C. Impact

D. Users

View answer

Correct Answer: A

Question #15

Your company is planning on using the Azure DevOps set of tools. They currently use Jenkins when it comes to Continuous Integration. Which of the following tool within Azure DevOps could be used to replace the Jenkins tool?

A. Azure Repos

B. Azure Artifacts

C. Azure Boards

D. Azure Build Pipelines

View answer

Correct Answer: D

Question #16

Which of the following can be used in Azure DevOps to ensure that tests that provide different outcomes even though changes did not occur don’t impact the build of code within the pipeline?

A. Gates

B. Container jobs

C. Flaky test management

D. Manual approvals

View answer

Correct Answer: C

Question #17

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You manage a project in Azure DevOps.You need to prevent the configuration of the project from changing over time.Solution: Implement Continuous Integration for the project.Does this meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #18

You have an Azure DevOps release pipeline named Pipeline1. You plan to use Pipelinel to deploy infrastructure as code (laC) resources to Azure. You need to create templates to define which resources to deploy. Which template formats should you use?

A. Azure Resource Manager (ARM) only

B. Bicep only

C. XML only

D. Azure Resource Manager (ARM) and Bicep only

E. Azure Resource Manager (ARM), Bicep

View answer

Correct Answer: D

Question #19

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish ifthe solution satisfies the requirements.You run the Register-AzureRmAutomationDscNode command in your company's environment.You need to make sure that your company's test servers remain correctly configured, regardless of configuration drift.Solution: You set the -ConfigurationMode parameter to ApplyAndAutocorrect.Does the solution meet the goal?

A. Yes

B. No

View answer

Correct Answer: A

Question #20

Your team needs to setup a build pipeline within an Azure DevOps project. With each build, you also need to get an idea with regards to the technical debt of the codebase. Which of the following tool can help in this regard?

A. SonarQube

B. Jenkins

C. Azure Artifacts

D. Azure Boards

View answer

Correct Answer: A

Question #21

You are in the process of building a mobile app aimed at Android and iOS devices.All work items and release cycles are managed via Azure DevOps.You want to make sure that crash reports for issue analysis is collected, and that beta releases are distributed to your testers. Also, you want to ensure that user feedback on the functionality of new apps is received.Which of the following must be part of your solution?

A. The Microsoft Test & Feedback extension

B. OWASP ZAP

C. TFS Integration Platform

D. Code Style

View answer

Correct Answer: A

Question #22

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unit solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear if the review screen.You use an Azure Pipelines pipeline to build and release web apps.You need to configure the pipeline to meet the following requirements:* Only run when there is a change in the/webapp folder.* Only run when a pr is created.Solution: You configure the pipeline definition by using the following elements.Does this meet the goal?

A. o

B. es

View answer

Correct Answer: A

Question #23

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to update the Azure DevOps strategy of your company.You need to identify the following issues as they occur during the company's development process:Licensing violationsProhibited librariesSolution: You implement continuous deployment.Does this meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #24

You have an Azure DevOps project named Project1 and an Azure subscription named Sub1.You need to prevent releases from being deployed unless the releases comply with the Azure Policy rules assigned to Sub1.What should you do in the release pipeline of Project1?

A. Add a deployment gate

B. Modify the Deployment queue settings

C. Configure a deployment trigger

D. Create a pipeline variable

View answer

Correct Answer: A

Question #25

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to update the Azure DevOps strategy of your company.You need to identify the following issues as they occur during the company's development process:Licensing violationsProhibited librariesSolution: You implement continuous integration.Does this meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #26

Your company makes use of Azure SQL Database Intelligent Insights and Azure Application Insights for monitoring purposes.You have been tasked with analyzing the monitoring using ad-hoc queries. You need to utilize the correct query language.Solution: You use the Contextual Query Language (CQL).Does the solution meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #27

You have an Azure Resource Manager template that deploys a multi-tier application. You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application. What should you use? When you need to pass a secure value (like a password) as a parameter during deployment, you can retrieve the value from an Azure Key Vault. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID. The key vault can exist in a different subscription than the resource group you are deploying to.

A. an Azure Resource Manager parameter file

B. an Azure Storage table

C. an Appsettings

D. Azure Key Vault

E. a Web

View answer

Correct Answer: D

Question #28

Which of the following feature from within Azure Web Apps can be used to cater to Blue/Green deployments?

A. Local cache

B. Private endpoint

C. Deployment slots

D. Azure Logic Apps

View answer

Correct Answer: C

Question #29

You have an Azure web app named webapp1 that uses the .NET Core runtime stack. You have an Azure Application Insights resource named AppInsights1. Webapp1 sends telemetry data to AppInsights1.You need to ensure that webapp1 sends the telemetry data at a fixed sampling rate.What should you do?

A. From the code repository of webapp1, modify the ApplicationInsights

B. From the code repository of webapp1, modify the Startup

C. From AppInsights1, modify the Usage and estimated costs settings

D. From AppInsights1, configure the Continuous export settings

View answer

Correct Answer: B

Question #30

You need to consider the underlined segment to establish whether it is accurate.The Burnup widget measures the elapsed time from creation of work items to their completion.Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

A. No adjustment required

B. Lead time

C. Test results trend

D. Burndown

View answer

Correct Answer: B

Question #31

You have created an Azure DevOps project for a new application that will be deployed to a number of Windows Server 2016 Azure virtual machines.You are preparing a deployment solution that allows for the virtual machines to maintain a uniform configuration, and also keep administrative effort with regards to configuring the virtual machines to a minimum.Which of the following should be part of your solution? (Choose two.)

A. Azure Resource Manager templates

B. The PowerShell Desired State Configuration (DSC) extension for Windows

C. Azure pipeline deployment groups

D. The Custom Script Extension for Windows

E. Azure pipeline stage templates

View answer

Correct Answer: AB

Question #32

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You plan to update the Azure DevOps strategy of your company.You need to identify the following issues as they occur during the company's development process:Licensing violationsProhibited librariesSolution: You implement continuous deployment.Does this meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #33

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish ifthe solution satisfies the requirements.You run the Register-AzureRmAutomationDscNode command in your company's environment.You need to make sure that your company's test servers remain correctly configured, regardless of configuration drift.Solution: You set the -ConfigurationMode parameter to ApplyAndMonitor.Does the solution meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

Question #34

Which of the following in Azure pipelines allows you to reference secrets defined in an Azure Key vault?

A. Task groups

B. Deployment groups

C. Variable groups

D. Service connections

View answer

Correct Answer: C

Question #35

You have been tasked with strengthening the security of your team's development process.You need to suggest a security tool type for the Continuous Integration (CI) phase of the development process.Which of the following is the option you would suggest?

A. Penetration testing

B. Static code analysis

C. Threat modeling

D. Dynamic code analysis

View answer

Correct Answer: B

Question #36

Your company makes use of Azure SQL Database Intelligent Insights and Azure Application Insights for monitoring purposes.You have been tasked with analyzing the monitoring using ad-hoc queries. You need to utilize the correct query language.Solution: You use the Transact-SQL.Does the solution meet the goal?

A. Yes

B. No

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free Microsoft AZ-400 Practice Questions & Answers 2026 Part2

View The Updated AZ-400 Exam Questions

View The Updated Microsoft Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free Microsoft AZ-400 Practice Questions & Answers 2026 Part2

View The Updated AZ-400 Exam Questions

View The Updated Microsoft Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now