Exam Syllabus: AZ-400 Microsoft CertifiedDevOps Engineer Expert
Topic Details
Configure processes and communications (10-15%)
- Plan and implement a structure for the flow of work and feedback cycles
Configure activity traceability and flow of work
- Identify appropriate metrics related to flow of work, such as cycle times, time to recovery, and lead time
- Integrate pipelines with work item tracking tools, such as Azure DevOps and GitHub
- Implement traceability policies decided by development
- Integrate a repository with Azure Boards
- Communicate actionable information by using custom dashboards in Azure DevOps
Configure collaboration and communication
- Document a project by using tools, such as wikis and process diagrams
Configure release documentation, including release notes and API documentation
Automate creation of documentation from Git history Configure notifications by using webhooks
Design and implement source control (15-20%)
- Design and implement an authentication strategy
Design and implement a source control strategy
Design a strategy for managing large files, including Git LFS and git fat
Design a strategy for scaling and optimizing a Git repository, including Scalar and cross repository sharing
Implement workflow hooks
AZ 400: Designing and Implementing Microsoft DevOps Solutions
WWW.EDUSUM.COM PDF
2
Topic Details
- Design a branch strategy, including trunk-based, feature branch, and release branch
Plan and implement branching strategies for the source code
Design and implement a pull request workflow by using branch policies and branch protections
Implement branch merging restrictions by using branch policies and branch protections
Integrate GitHub repositories with Azure Pipelines, one of the services in Azure DevOps
Configure and manage repositories
Configure permissions in the source control repository
Configure tags to organize the source control repository
Recover data by using Git commands Purge data from source control
Design and implement build and release pipelines (40-45%)
Integrate pipelines with external tools, including dependency scanning, security scanning, and code coverage
Design and implement pipeline automation
Design and implement quality and release gates, including security and governance
Design integration of automated tests into a pipeline Design and implement a comprehensive testing strategy
Implement orchestration of tools, such as GitHub Actions and Azure Pipelines
Design and implement a package management strategy
Design a package management implementation that uses Azure Artifacts, GitHub Packages, NuGet, and npm Design and implement package feeds, including upstream sources
- Design and implement a dependency versioning strategy for code assets and packages, including semantic versioning and date-based
- Design and implement a versioning strategy for pipeline artifacts
- Select a deployment automation solution, including GitHub Actions and Azure Pipelines
Design and implement pipelines
- Design and implement an agent infrastructure, including cost, tool selection, licenses, connectivity, and maintainability
- Develop and implement pipeline trigger rules
WWW.EDUSUM.COM PDF
3
AZ 400: Designing and Implementing Microsoft DevOps Solutions
Topic Details
- Develop pipelines, including classic and YAML
Design and implement a strategy for job execution order, including parallelism and multi stage
Develop complex pipeline scenarios, such as containerized agents and hybrid
Configure and manage self hosted agents, including virtual machine (VM) templates and containerization
Create reusable pipeline elements, including YAML templates, task groups, variables, and variable groups
Design and implement checks and approvals by using YAML environments
Design a deployment strategy, including blue/green, canary, ring, progressive exposure, feature flags, and A/B testing
Design a pipeline to ensure reliable order of dependency deployments
Plan for minimizing downtime during deployments by using VIP swap, load balancer, and rolling deployments
Design and implement deployments
Design a hotfix path plan for responding to high priority code fixes
- Implement load balancing for deployment, including Azure Traffic Manager and the Web Apps feature of Azure App Service
- Implement feature flags by using Azure App Configuration Feature Manager
- Implement application deployment by using containers, binary, and scripts
- Recommend a configuration management technology for application infrastructure
Implement a configuration management strategy for application infrastructure, including IaC
Design and implement infrastructure as code (IaC)
Define an IaC strategy, including source control and automation of testing and deployment
Design and implement desired state configuration for environments, including Azure Automation State Configuration, Azure Resource Manager, Bicep, and Azure Policy guest configuration
WWW.EDUSUM.COM PDF AZ 400: Designing and Implementing Microsoft DevOps Solutions 4
Topic Details
- Monitor pipeline health, including failure rate, duration, and flaky tests
Optimize pipelines for cost, time, performance, and reliability
Maintain pipelines
Analyze pipeline load to determine agent configuration and capacity
Design and implement a retention strategy for pipeline artifacts and dependencies
Develop a security and compliance plan (10-15%)
Implement and manage service connections
Implement and manage personal access tokens
Design and implement a strategy for managing sensitive information in automation
Implement and manage secrets, keys, and certificates by using Azure Key Vault, GitHub secrets, and Azure Pipelines secrets
Design and implement a strategy for managing sensitive files during deployment
Design pipelines to prevent leakage of sensitive information
Automate analysis of source code by using GitHub code scanning, GitHub secrets scanning, pipeline based scans, and SonarQube
Automate security and compliance scanning
Automate security scanning, including container scanning and OWASP ZAP
Automate analysis of licensing, vulnerabilities, and versioning of open source components by using WhiteSource Bolt and GitHub Dependency Scanning
Implement an instrumentation strategy (10-15%)
Configure and integrate monitoring by using Azure Monitor
Configure monitoring for a DevOps environment
Analyze metrics
Configure and integrate with monitoring tools, such as Azure Monitor and Application Insights
Manage access control to the monitoring platform
Configure alerts for pipeline events
- Inspect distributed tracing by using Application Insights
- Inspect application performance indicators
- Inspect infrastructure performance indicators, including
WWW.EDUSUM.COM PDF AZ 400:
and Implementing Microsoft DevOps Solutions 5
Designing
Topic Details
CPU, memory, disk, and network Identify and monitor metrics for business value Analyze usage metrics by using Application Insight Interrogate logs using basic Kusto Query Language (KQL) queries
Microsoft AZ-400 Certification Sample Questions and Answers
To make you familiar with Designing and Implementing Microsoft DevOps Solutions (AZ 400) certification exam structure, we have prepared this sample question set. We suggest you to try our Sample Questions for MCE DevOps Engineer AZ-400 Certification to test your understanding of Microsoft AZ 400 process with real Microsoft certification exam environment.
AZ-400 Designing and Implementing Microsoft DevOps Solutions Sample Questions:-
01. Your company uses Azure DevOps. Only users who have accounts in Azure Active Directory can access the Azure DevOps environment. You need to ensure that only devices that are connected to the on-premises network can access the Azure DevOps environment. What should you do?
a) Assign the Stakeholder access level all users. b) In Azure Active Directory, configure risky sign-ins. c) In Azure DevOps, configure Security in Project Settings. d) In Azure Active Directory, configure conditional access.
02. Your company releases a new iOS app using App Center. You plan to release and distribute the beta version of this app to a small group of internal users. You want to notify users when a new version is released to test. You need to configure this release with the minimal administrative effort necessary to maintain this process. Which two actions should you perform to configure this process? Each correct answer presents part of the solution. a) Install TestFlight on user phones.
WWW.EDUSUM.COM PDF
6
AZ 400: Designing and Implementing Microsoft DevOps Solutions
b) Modify your build to distribute to the distribution group.
c) Modify your build to distribute to the store. d) Create a private distribution group and invite the internal users. e) Send users the install QR code via email.
03. A company uses several open-source libraries in their Azure pipeline. These libraries have their own terms and conditions.
You need to make sure that the company is using software with approved terms and conditions. To meet this requirement, you decide to use WhiteSource. Which two actions should you perform to achieve this goal?
Each correct answer presents part of the solution.
a) Define a black list of automatically rejected licenses.
b) Let WhiteSource automatically detect licenses any time an open source component is added.
c) Define a white list of automatically approved licenses. d) Create scripts that run before adding any open source components.
04. Which branching strategy should you recommend for the investment planning applications suite?
a) release isolation b) main only c) development isolation d) feature isolation
05. Your company uses a Git repository in Azure Repos to manage the source code of a web application. The master branch is protected from direct updates. Developers work on new features in the topic branches. Because of the high volume of requested features, it is difficult to follow the history of the changes to the master branch. You need to enforce a pull request merge strategy.
The strategy must meet the following requirements:
Consolidate commit histories
Merge tie changes into a tingle commit Which merge strategy should you use in the branch policy?
a) Git fetch
b) no fast forward merge c) squash merge d) fast forward merge
WWW.EDUSUM.COM PDF AZ 400:
7
Designing and Implementing Microsoft DevOps Solutions
06. Your company uses Service Now for incident management. You develop an application that runs on Azure. The company needs to generate a ticket in Service Now when the application fails to authenticate. Which Azure Log Analytics solution should you use?
a) Automation & Control b) IT Service Management Connector (ITSM) c) Application lmiQ.hu Connector d) insight & Analytics
07. A company uses Azure DevOps as their development platform. The DevOps team needs to speed up the development process. What step should they perform to increase the speed of development?
a) Do all development locally and then push to the cloud. b) Use serverless applications. c) Create a script in the pipeline that merges local changes into feature branches. d) Use virtual machines (VMs) instead of physical servers in the workflow.
08. You have a GitHub repository. You create a new repository in Azure DevOps. You need to recommend a procedure to clone the repository from GitHub to Azure DevOps. What should you recommend?
a) Create a webhook. b) Create a service connection for GitHub. c) From Import a Git repository, click Import d) Create a pull request. e) Create a personal access token in Azure DevOps.
09. You plan to share packages that you wrote, tested, validated, and deployed by using Azure Artifacts. You need to release multiple builds of each package by using a single feed. The solution must limit the release of packages that are in development. What should you use?
a) global symbols b) local symbols c) upstream sources d) views
WWW.EDUSUM.COM PDF AZ 400: Designing and Implementing Microsoft DevOps Solutions 8
10. A company decides to build an Azure DevOps pipeline. System monitoring is a key point, so your team uses Azure Monitor. You need to make sure that an alert is sent when a system resource goes down. What should you do?
a) Configure Azure Monitor to monitor to run on a separate build agent.
b) Configure Azure Monitor to monitor Azure resources and virtual machines (VMs).
c) Configure Azure Monitor to monitor Azure resources and operating system events.
d) Configure Azure Monitor to monitor Azure resources only.
Answers:-
Answer 01:- d
Answer 02:- b, d
Answer 03:- a, c
Answer 04:- c
Answer 05:- c
Answer 06:- b
Answer 07:- b
Answer 08:- c
Answer 09:- c
Answer 10:- d
WWW.EDUSUM.COM PDF AZ 400:
and Implementing Microsoft DevOps Solutions 9
Designing
