Microsoft Azure Certified DevOps Engineer AZ-400

Question #: 288
Topic #: 2
You have multiple teams that work on multiple projects in Azure DevOps.

You need to plan and manage the consumers and producers for each project. The solution must provide an overview of all the projects.

What should you do?

A. Add a Predecessor or Successor link to the feature or user story for the items of each project.
B. Add a Parent or Child link to the feature or user story for the items of each project.
C. Install the Dependency Tracker extension and create dependencies for each project.
D. Create a custom query to show the consumers and producers and add a widget to a dashboard.

Selected Answer: C

Question #: 289
Topic #: 6
You have a GitHub repository that is integrated with Azure Boards. Azure Boards has a work item that has the number 715.

You need to ensure that when you commit source code in GitHub, the work item is updated automatically.

What should you include in the commit comments?

A. the URL of the work item
B. AB#715
C. @715
D. #715

Selected Answer: B

Question #: 290
Topic #: 9
You plan to deploy a solution that will include multiple microservices.

You need to recommend a deployment strategy for the microservices. The solution must meet the following requirements:

• Enable users to test new features by using a specific URL.
• Minimize the effort required to promote a test version to production.
• Minimize the effort required to revert production code to the previous version.

Which strategy should you recommend?

A. A/B
B. feature toggle
C. progressive exposure
D. blue/green

Selected Answer: D

Question #: 291
Topic #: 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company uses Azure DevOps to manage the build and release processes for applications.
You use a Git repository for applications source control.
You need to implement a pull request strategy that reduces the history volume in the master branch.
Solution: You implement a pull request strategy that uses a three-way merge.
Does this meet the goal?

A. Yes
B. No

Selected Answer: B

Question #: 292
Topic #: 1
You are in the process of building a mobile app aimed at Android and iOS devices.
All work items and release cycles are managed via Azure DevOps.
You want to make sure that crash reports for issue analysis is collected, and that beta releases are distributed to your testers. Also, you want to ensure that user feedback on the functionality of new apps is received.
Which of the following must be part of your solution?

A. The Microsoft Test & Feedback extension.
B. OWASP ZAP
C. TFS Integration Platform
D. Code Style

Selected Answer: A

Question #: 293
Topic #: 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You plan to update the Azure DevOps strategy of your company.
You need to identify the following issues as they occur during the company’s development process:
✑ Licensing violations
✑ Prohibited libraries
Solution: You implement continuous deployment.
Does this meet the goal?

A. Yes
B. No

Selected Answer: B

Question #: 296
Topic #: 9
You manage a project by using Azure Boards. You manage the project code by using GitHub.

You have three work items that have IDs of 456, 457, and 458.

You need to create a pull request that will be linked to all the work items. The solution must set the state of work item 456 to done.

What should you add to the commit message?

A. Done #456, #457, #458
B. Fixes #456, #457, #458
C. Fixes #AB456, #A8457, #A8458
D. #AB456, #AB457, #AB458
Completed #AB456

Selected Answer: C

Question #: 297
Topic #: 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an approval process that contains a condition. The condition requires that releases be approved by a team leader before they are deployed.
You have a policy stating that approvals must occur within eight hours.
You discover that deployment fail if the approvals take longer than two hours.
You need to ensure that the deployments only fail if the approvals take longer than eight hours.
Solution: From Post-deployment conditions, you modify the Timeout setting for post-deployment approvals.
Does this meet the goal?

A. Yes
B. No

Selected Answer: B

Question #: 298
Topic #: 6
You are creating a dashboard in Azure Boards.

You need to visualize the time from when work starts on a work item until the work item is closed.

Which type of widget should you use?

A. cycle time
B. velocity
C. cumulative flow
D. lead time

Selected Answer: A

Question #: 299
Topic #: 7
You need to recommend a Docker container build strategy that meets the following requirements:
✑ Minimizes image sizes
✑ Minimizes the security surface area of the final image
What should you include in the recommendation?

A. multi-stage builds
B. PowerShell Desired State Configuration (DSC)
C. Docker Swarm
D. single-stage builds

Selected Answer: A

Question #: 304
Topic #: 6
You manage a project by using Azure Boards. You manage the project code by using GitHub.

You have three work items that have IDs of 456, 457, and 458.

You need to create a pull request that will be linked to all the work items. The solution must set the state of work item 456 to done.

What should you add to the commit message?

A. Fixes #456, #457, #458
B. Fixes #AB456, #AB457, #AB458
C. #456, #457, #458
Completed #456
D. #AB456, #AB457, #AB458

Selected Answer: D

Question #: 305
Topic #: 9
You plan to deploy a solution that will include multiple microservices.

You need to recommend a deployment strategy for the microservices. The solution must meet the following requirements:

• Enable testing and monitoring of changes during a gradual rollout.
• Control the number of users that will receive new code releases.

Which strategy should you recommend?

A. progressive exposure
B. A/B
C. feature toggle
D. blue/green

Selected Answer: A

Question #: 306
Topic #: 7
You plan to create an image that will contain a .NET Core application.
You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)

You need to ensure that the image is as small as possible when the image is built.
Which line should you modify in the file?

A. 1
B. 3
C. 4
D. 7

Selected Answer: C

Question #: 308
Topic #: 8
You have a free tier of an Azure DevOps organization named Contoso. Contoso contains 10 private projects. Each project has multiple jobs with no dependencies. The build process requires access to resource files located in an on-premises file system.
You frequently run the jobs on five self-hosted agents but experience long build times and frequently queued builds.
You need to minimize the number of queued builds and the time it takes to run the builds.
What should you do?

A. Configure the pipelines to use the Microsoft-hosted agents.
B. Register additional self-hosted agents.
C. Purchase self-hosted parallel jobs.
D. Purchase Microsoft-hosted parallel jobs.

Selected Answer: B

Question #: 309
Topic #: 2
Your company has multiple microservices-based apps that use the following tracing libraries:

• OpenTelemetry
• OpenCensus
• OpenTracing
• Honeycomb
• Jaeger

The company purchases an Azure subscription and implements Application Insights in Azure Monitor.

You plan to centralize distributed tracing for the apps.

You need to identify which libraries can integrate directly with Application Insights.

Which two libraries should you identify? Each correct answer presents a complete solution.

NOTE: Each correct solution is worth one point.

A. Honeycomb
B. OpenTracing
C. Jaeger
D. OpenTelemtry
E. OpenCensus

Selected Answer: DE

Question #: 310
Topic #: 6
You manage code by using GitHub.

You plan to ensure that all GitHub Actions are validated by a security team.

You create a branch protection rule requiring that code changes be reviewed by code owners.

You need to create the CODEOWNERS file.

Where should you create the file?

A. .github/actions/
B. .github/
C. .git/
D. .github/workflows/

Selected Answer: B

Question #: 311
Topic #: 5
You use GitHub for source control and Microsoft Teams for collaboration.

You need to send a notification to a Teams channel for each commit. The solution must minimize development effort.

What should you do?

A. Use Azure Automation to connect to the GitHub Actions API and send a message to the Teams channel.
B. Use the Microsoft Teams for GitHub app and configure a subscription to receive notifications in the Teams channel.
C. Use GitHub Actions with a dispatch to send a message to the Teams channel by using the Teams API.
D. Use Azure Functions to connect to the GitHub REST API and send a message to the Teams channel.

Selected Answer: B

Question #: 312
Topic #: 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a project in Azure DevOps for a new web application.
You need to ensure that when code is checked in, a build runs automatically.
Solution: From the Triggers tab of the build pipeline, you select Batch changes while a build is in progress.
Does this meet the goal?

A. Yes
B. No

Selected Answer: B

Question #: 313
Topic #: 4
You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication.
What should you do first?

A. Create a conditional access policy in Azure AD.
B. Register GitHub in Azure AD.
C. Create an Azure Active Directory B2C (Azure AD B2C) tenant.
D. Modify the Security settings of the GitHub organization.

Selected Answer: B

Question #: 316
Topic #: 9
You use Azure Pipelines to build and test code.

You need to analyze the agent pool usage.

What are two ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Review the historical graph for the agent pools.
B. Review the Pipeline duration report.
C. Query the TaskAgentPoolSizeSnapshot/TaskAgentPoolSizeSnapshots endpoint.
D. Query the PipelineRun/PipelineRuns endpoint.

Selected Answer: AC

Question #: 317
Topic #: 2
You have an Azure web app named webapp1 that uses the .NET Core runtime stack. You have an Azure Application Insights resource named AppInsights1. Webapp1 sends telemetry data to AppInsights1.

You need to ensure that webapp1 sends the telemetry data at a fixed sampling rate.

What should you do?

A. From the code repository of webapp1, modify the ApplicationInsights.config file.
B. From the code repository of webapp1, modify the Startup.cs file.
C. From AppInsights1, modify the Usage and estimated costs settings.
D. From AppInsights1, configure the Continuous export settings.

Selected Answer: B

Question #: 318
Topic #: 5
You manage source code control and versioning by using GitHub.

You need to ensure that a PowerShell script is executed automatically before rebase operations are performed.

What should you use?

A. a package
B. GitHub Copilot
C. a webhook
D. a gist

Selected Answer: C

Question #: 319
Topic #: 4
You have an Azure DevOps project named Project1 and an Azure subscription named Sub1.
You need to prevent releases from being deployed unless the releases comply with the Azure Policy rules assigned to Sub1.
What should you do in the release pipeline of Project1?

A. Add a deployment gate.
B. Modify the Deployment queue settings.
C. Configure a deployment trigger.
D. Create a pipeline variable.

Selected Answer: A

Question #: 324
Topic #: 6
You manage a project by using Azure Boards. You manage the project code by using GitHub.

You have three work items that have IDs of 456, 457, and 458.

You need to create a pull request that will be linked to all the work items. The solution must set the state of work item 456 to done.

What should you add to the commit message?

A. Done #456, #457, #458
B. #AB456, #AB457, #AB458
C. #456, #457, #458
Completed #456
D. #AB456, #AB457, #AB458
Completed #AB456

Selected Answer: D

Question #: 325
Topic #: 7
You have 50 Node.js-based projects that you scan by using WhiteSource. Each project includes Package.json, Package-lock.json, and Npm-shrinkwrap.json files.
You need to minimize the number of libraries reports by WhiteSource to only the libraries that you explicitly reference.
What should you do?

A. Configure the File System Agent plug-in.
B. Add a devDependencies section to Package-lock.json.
C. Configure the Artifactory plug-in.
D. Delete Package-lock.json.

Selected Answer: B

Question #: 326
Topic #: 8
You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure SQL database named DB1.
You need to create a release pipeline that uses the Azure SQL Database Deployment task to update DB1.
Which artifact should you deploy?

A. a BACPAC
B. a DACPAC
C. an LDF file
D. an MDF file

Selected Answer: C

Question #: 330
Topic #: 6
You have an Azure subscription that contains an Azure container registry. The container registry contains an ACR Tasks task named Task1. Task1 is configured to run once every five days.

You need to trigger Task1 to run immediately.

Which command should you run?

A. az acr task run
B. az acr build
C. az acr taskrun
D. az acr run

Selected Answer: A

Question #: 331
Topic #: 9
You use an Azure Pipelines pipeline to build and deploy an app.

You have a custom test task that has the following inputs:

• testResultsFiles: **/TEST-*.trx
• searchFolder: $(System.DefaultWorkingDirectory)
• mergeTestResults: true

Which format should you use for the input data of testResultsFiles?

A. VSTest
B. NUnit
C. CTest
D. JUnit

Selected Answer: B

Question #: 332
Topic #: 7
Your company deploys applications in Docker containers.
You want to detect known exploits in the Docker images used to provision the Docker containers.
You need to integrate image scanning into the application lifecycle. The solution must expose the exploits as early as possible during the application lifecycle.
What should you configure?

A. a task executed in the continuous integration pipeline and a scheduled task that analyzes the image registry
B. manual tasks performed during the planning phase and the deployment phase
C. a task executed in the continuous deployment pipeline and a scheduled task against a running production container
D. a task executed in the continuous integration pipeline and a scheduled task that analyzes the production container

Selected Answer: A

Question #: 333
Topic #: 4
You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.
You need to ensure that all the open source libraries comply with your company’s licensing standards.
Which service should you use?

A. Ansible
B. Maven
C. WhiteSource Bolt
D. Helm

Selected Answer: C

Question #: 334
Topic #: 6
You manage a project by using Azure Boards. You manage the project code by using GitHub.

You have three work items that have IDs of 456, 457, and 458.

You need to create a pull request that will be linked to all the work items. The solution must set the state of work item 456 to done.

What should you add to the commit message?

A. #AB456, #AB457, #AB458
Completed #AB456
B. #456, #457, #458
Completed #456
C. Done #AB456, #AB457, #AB458
D. #AB456, #AB457, #AB458
Verifies #AB456

Selected Answer: A

Question #: 335
Topic #: 9
You use an Azure Pipelines pipeline to build, test, and deploy an app named App1.

You need to reduce how long it takes to complete unit and integration tests for App1. The solution must ensure that the code coverage testing ratio is maintained.

What should you do?

A. Enable flaky test management.
B. Purchase additional parallel jobs.
C. Enable Test Impact Analysis (TIA).
D. Add an agent pool.

Selected Answer: C

Question #: 336
Topic #: 2
You use Azure Pipelines to build and deploy an app named App1.

You plan to monitor App1 by using Application Insights.

You create an Application Insights instance named AI1.

You need to configure App1 to use AI1.

Which file should you modify?

A. appsettings.json
B. launchSettings.json
C. startup.cs
D. project.json

Selected Answer: C

Question #: 337
Topic #: 8
Your company has a project in Azure DevOps for a new web application.
The company uses ServiceNow for change management.
You need to ensure that a change request is processed before any components can be deployed to the production environment.
What are two ways to integrate ServiceNow into the Azure DevOps release pipeline? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Define a deployment control that invokes the ServiceNow REST API.
B. Define a pre-deployment gate before the deployment to the Prod stage.
C. Define a deployment control that invokes the ServiceNow SOAP API.
D. Define a post-deployment gate after the deployment to the QA stage.

Selected Answer: AB

Question #: 338
Topic #: 5
You use GitHub to host container packages that use Semantic Versioning (SemVer).

You have an app named App1. The current version of App1 is 11.2.0.

You change the code of App1 to fix a bug that was introduced in version 10.5.1.

Which version number should you assign to the release?

A. 10.5.1-PATCH
B. 11.2.1
C. 10.5.2
D. 10.6.0

Selected Answer: B

Question #: 339
Topic #: 7
Your company has a hybrid cloud between Azure and Azure Stack.
The company uses Azure DevOps for its full CI/CD pipelines. Some applications are built by using Erlang and Hack.
You need to ensure that Erlang and Hack are supported as part of the build strategy across the hybrid cloud. The solution must minimize management overhead.
What should you use to execute the build pipeline?

A. a Microsoft-hosted agent
B. Azure DevOps self-hosted agents on Azure DevTest Labs virtual machines.
C. Azure DevOps self-hosted agents on Hyper-V virtual machines
D. Azure DevOps self-hosted agents on virtual machines that run on Azure Stack

Selected Answer: D

Question #: 340
Topic #: 4
You are designing the security validation strategy for a project in Azure DevOps.
You need to identify package dependencies that have known security issues and can be resolved by an update.
What should you use?

A. Octopus Deploy
B. Jenkins
C. Gradle
D. SonarQube

Selected Answer: D

Question #: 343
Topic #: 9
You have an app that is deployed to two environments named Production-A and Production-B by using Azure Pipelines.

You need to configure a release pipeline that will mark the app as complete and ready for release into the Production-B environment. The solution must meet the following requirements:

• Ensure that there are no active Azure Monitor alerts in the Production-A environment before the app is marked as complete.
• Minimize administrative effort.

What should you do?

A. To the Production-B environment stage, add a pre-deployment gate that will query Azure Monitor.
B. To the Production-A environment stage, add a post-deployment gate that will query Azure Monitor.
C. To the Production-A environment stage, add a post-deployment approval.
D. To the Production-A environment stage, add a pre-deployment gate that will query Azure Monitor.

Selected Answer: B

Question #: 344
Topic #: 6
You manage projects by using Azure Boards.

You have a current work item name itemA that is dependant on a work item named itemB.

You need to define the dependency for itemA.

What should you do in the web portal for Azure DevOps?

A. Add a Parent link to the user story of itemA.
B. From Backlogs, open the context menu, select Add link, and then select itemA. Set Link type to Successor and add the ID of itemB.
C. From itemA, open the Links tab, and then select Add link. Set Link type to References and add the ID of itemB.
D. From Backlogs, open he context menu, select Add link, and then select itemA. Set Link type to References and add the ID of itemB.

Selected Answer: B

Question #: 345
Topic #: 4
You administer an Azure DevOps project that includes package feeds.
You need to ensure that developers can unlist and deprecate packages. The solution must use the principle of least privilege.
Which access level should you grant to the developers?

A. Collaborator
B. Contributor
C. Owner

Selected Answer: B

Question #: 346
Topic #: 7
Your company has an Azure DevOps project,
The source code for the project is stored in an on-premises repository and uses on an on-premises build server.
You plan to use Azure DevOps to control the build process on the build server by using a self-hosted agent.
You need to implement the self-hosted agent.
You download and install the agent on the build server.
Which two actions should you perform next? Each correct answer presents part of the solution.

A. From Azure, create a shared access signature (SAS).
B. From the build server, create a certificate, and then upload the certificate to Azure Storage.
C. From the build server, create a certificate, and then upload the certificate to Azure Key Vault.
D. From DevOps, create a personal access token (PAT).
E. From the build server, run config.cmd.

Selected Answer: DE

Question #: 347
Topic #: 8
Your company develops an application named App1 that is deployed in production.
As part of an application update, a new service is being added to App1. The new service requires access to an application named App2 that is currently in development.
You need to ensure that you can deploy the update to App1 before App2 becomes available. You must be able to enable the service in App1 once App2 is deployed.
What should you do?

A. Implement a feature flag.
B. Create a fork in the build.
C. Create a branch in the build.
D. Implement a branch policy.

Selected Answer: A

Question #: 350
Topic #: 8
You have a private distribution group that contains provisioned and unprovisioned devices.
You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.
What should you do?

A. Request the Apple ID associated with the user of each device.
B. Register the devices on the Apple Developer portal.
C. Create an active subscription in App Center Test.
D. Add the device owner to the organization in App Center.

Selected Answer: B

Question #: 351
Topic #: 7
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant.
You are configuring a build pipeline in Azure Pipelines that will include a task named Task1. Task1 will authenticate by using an Azure AD service principal.
Which three values should you configure for Task1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. the tenant ID
B. the subscription ID
C. the client secret
D. the app ID
E. the object ID

Selected Answer: ACD

Question #: 352
Topic #: 6
You manage projects by using Azure Boards.

You have a current work item name itemA that is dependant on a work item named itemB.

You need to define the dependency for itemA.

What should you do in the web portal for Azure DevOps?

A. From itemA, open the Links tab, and then select Add link. Set Link type to Related and add the ID of itemB.
B. From Backlogs, open the context menu, select Add link, and then select itemA. Set Link type to Successor and add the ID of itemB.
C. From itemA, open the Links tab, and then select Add link. Set Link type to References and add the ID of itemB.
D. From Queries, open the context menu, select Add link, and then select Existing Item. Set Link type to Affected By and add the ID of itemB.

Selected Answer: B

Question #: 353
Topic #: 9
You manage package feeds by using Azure Artifacts.

You plan to create a new package feed that will include the following views:

• @Local
• @Latest
• @Release
• @Prerelease

Which view should you create manually?

A. @Local
B. @Latest
C. @Release
D. @Prerelease

Selected Answer: B

Question #: 354
Topic #: 5
You manage code by using GitHub.

You need to ensure that repository owners are notified if a new vulnerable dependency or malware is found in their repository.

What should you do?

A. Configure CodeQL scanning actions.
B. Configure Dependabot alerts.
C. Configure branch protection rules for each repository.
D. Subscribe all the repository owners to the GitHub Advisory Database.

Selected Answer: B

Question #: 357
Topic #: 9
You plan to create an image that will contain a .NET Core application.

You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.)

You need to ensure that the image is as small as possible when the image is built.

Which line should you modify in the file?

A. 1
B. 3
C. 4
D. 7

Selected Answer: C

Question #: 358
Topic #: 6
You have the services shown in the following table.

You manage a project by using Azure Boards.

You need to notify the services of build status changes.

Which services can be notified by using a webhook?

A. Service1 only
B. Service2 only
C. Service1 and Service2

Selected Answer: C

Question #: 359
Topic #: 5
You have a public GitHub repository named Public1.

A commit is made to Public1. The commit contains a pattern that matches a regular expression.

Who is notified first when the commit is made?

A. the administrator of the GitHub organization
B. the committer
C. the owner of Public1
D. the secret scanning partner

Selected Answer: D

Question #: 360
Topic #: 4
Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.
You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.
What should you use?

A. Microsoft Visual SourceSafe
B. Code Style
C. Black Duck
D. Jenkins

Selected Answer: C

Question #: 361
Topic #: 8
You are developing an iOS application by using Azure DevOps.
You need to test the application manually on 10 devices without releasing the application to the public.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Create a Microsoft Intune device compliance policy.
B. Deploy a certificate from an internal certification authority (CA) to each device.
C. Register the application in the iTunes store.
D. Onboard the devices into Microsoft Intune.
E. Distribute a new release of the application.
F. Register the IDs of the devices in the Apple Developer portal.

Selected Answer: EF

Question #: 364
Topic #: 9
You have an Azure subscription that includes an app named App1.

You have an Azure DevOps project that contains two environments named Staging and Production.

You use Azure Pipelines to deploy App1.

You need to validate the performance of App1 in the Staging environment before it is deployed to Production. The solution must minimize administrative effort.

What should you do in the Azure DevOps project?

A. In the production branch policy, add a status check to query Azure Monitor Alerts for active alerts.
B. In the Production environment, add a check to query Azure Monitor Alerts for active alerts.
C. In the Production environment stage, add a post-deployment approval for the Azure Monitor Alerts group.
D. In the Staging environment add a check to query Azure Monitor Alerts for active alerts.

Selected Answer: B

Question #: 365
Topic #: 2
You have an Azure subscription that contains a Log Analytics workspace named WS1 and a virtual machine named VM1.

You need to install the Microsoft Enterprise Cloud Monitoring extension on VM1.

Which two values are required to configure the extension? Each correct answer presents part of the solution.

NOTE: Each correct answer is worth one point.

A. the secret key of WS1
B. the ID of the subscription
C. the system-assigned managed identity of VM1
D. the ID of WS1
E. the resource ID of VM1

Selected Answer: DE

Question #: 366
Topic #: 7
You need to execute inline testing of an Azure DevOps pipeline that uses a Docker deployment model. The solution must prevent the results from being published to the pipeline.
What should you use for the inline testing?

A. a single stage Dockerfile
B. an Azure Kubernetes Service (AKS) pod
C. a multi-stage Dockerfile
D. a Docker Compose file

Selected Answer: C

Question #: 367
Topic #: 8
You have a private distribution group that contains provisioned and unprovisioned devices.
You need to distribute a new iOS application to the distribution group by using Microsoft Visual Studio App Center.
What should you do?

A. Select Register devices and sign my app.
B. Create an active subscription in App Center Test.
C. Create an unsigned build.
D. Add the device owner to the collaborators group.

Selected Answer: A

Question #: 368
Topic #: 5
You have a GitHub repository.

You need to ensure that all the code in the repository is scanned for vulnerabilities.

What should you use?

A. Dependabot alerts
B. branch protection rules
C. CodeQL actions
D. GitHub Advisory Database databases

Selected Answer: C