Q1. You have a GitHub workflow that deploys an Azure web app. The workflow is configured to trigger a deployment following a pull request that includes a label.
You plan to configure the pull request of the workflow to trigger the deployment only if the label is set to a string of "stage".
You plan to configure the pull request of the workflow to trigger the deployment only if the label is set to a string of "stage".
The workflow includes the following section.
if: contains(<missing element=""></missing>.event.pull_request.labels.*.name, 'stage')
if: contains(<missing element=""></missing>.event.pull_request.labels.*.name, 'stage')
What should you add for the missing element of the workflow?
Select only one answer.
1. action
2. github
3. name
4. workflow
1. action
2. github
3. name
4. workflow
The correct element is github.
Explanation:
In GitHub Actions, webhook payloads and metadata associated with the event that triggered the workflow run are accessed through the
In GitHub Actions, webhook payloads and metadata associated with the event that triggered the workflow run are accessed through the
github context object (e.g., github.event.pull_request...).Q2. In GitHub Actions, workflow triggers and webhook payload details are accessed through the github context object (e.g., github.event.pull_request...).
The complete expression is:
if: contains(github.event.pull_request.labels.*.name, 'stage')
You are developing a public open-source project by using GitHub.
You need to ensure that only the project maintainer can push to the official repository.
Which type of branching workflow should you implement?
if: contains(github.event.pull_request.labels.*.name, 'stage')
You are developing a public open-source project by using GitHub.
You need to ensure that only the project maintainer can push to the official repository.
Which type of branching workflow should you implement?
Select only one answer.
1. trunk-based
2. GitHub flow
3. feature branch
4. forking
1. trunk-based
2. GitHub flow
3. feature branch
4. forking
The correct answer is forking.
Explanation:
The forking workflow (or Forking model) gives every contributor their own server-side copy of the official repository. Outside contributors push changes to their own personal fork and submit a pull request (PR), ensuring that only authorized project maintainers have direct push/write permissions to merge code into the official (upstream) repository.
Q3. You plan to add a job to a GitHub workflow that will deploy a container-based web app to Azure Web Apps.
You need to ensure that a previous job in the workflow completes successfully before the new job can run.
Which GitHub workflow element should you add to the workflow?
The forking workflow (or Forking model) gives every contributor their own server-side copy of the official repository. Outside contributors push changes to their own personal fork and submit a pull request (PR), ensuring that only authorized project maintainers have direct push/write permissions to merge code into the official (upstream) repository.
Q3. You plan to add a job to a GitHub workflow that will deploy a container-based web app to Azure Web Apps.
You need to ensure that a previous job in the workflow completes successfully before the new job can run.
Which GitHub workflow element should you add to the workflow?
Select only one answer.
1. contains
2. needs
3. runs-on
4. uses
1. contains
2. needs
3. runs-on
4. uses
The correct element is needs.
Explanation:
Explanation:
In GitHub Actions, jobs run in parallel by default. To create a dependency where a downstream job waits for a preceding job to complete successfully, you use the needs keyword:
jobs:
build:
runs-on: ubuntu-latest
steps:
- run: echo "Building container image..."
deploy:
runs-on: ubuntu-latest
needs: build
steps:
- run: echo "Deploying to Azure Web Apps..."
build:
runs-on: ubuntu-latest
steps:
- run: echo "Building container image..."
deploy:
runs-on: ubuntu-latest
needs: build
steps:
- run: echo "Deploying to Azure Web Apps..."
Q4. You plan to configure a GitHub workflow that will deploy a container-based web app to Azure Web Apps.
You need to automate Azure-related tasks.
What should you add to the workflow?
Select only one answer.
1. a GitHub Marketplace action
2. a job condition
3. a workflow trigger
4. an Azure Marketplace item
1. a GitHub Marketplace action
2. a job condition
3. a workflow trigger
4. an Azure Marketplace item
The correct answer is a GitHub Marketplace action.
Explanation:
GitHub Marketplace provides pre-built, reusable actions created by GitHub and Microsoft (such as `azure/login` and `azure/webapps-deploy`) that can be referenced directly in workflow steps using the `uses` keyword to automate Azure deployments and interactions.
GitHub Marketplace provides pre-built, reusable actions created by GitHub and Microsoft (such as `azure/login` and `azure/webapps-deploy`) that can be referenced directly in workflow steps using the `uses` keyword to automate Azure deployments and interactions.
Q5. You are using Azure Pipelines to manage building an app.
You need to run a server job directly on Azure DevOps.
Which job type should you implement?
You need to run a server job directly on Azure DevOps.
Which job type should you implement?
Select only one answer.
1. an agent pool job
2. an agentless job
3. a container job
4. a virtual machine job
The correct answer is an agentless job (also referred to as a server job).
Explanation:
1. an agent pool job
2. an agentless job
3. a container job
4. a virtual machine job
The correct answer is an agentless job (also referred to as a server job).
Explanation:
Agentless jobs run tasks directly on the Azure DevOps server/control plane without requiring a build agent (such as a self-hosted agent or Microsoft-hosted agent pool). They are typically used for tasks that invoke external services, query work items, invoke REST APIs, or execute manual approvals and delays.
Q6. You have an Azure subscription that contains a resource group named RG1.
You have a Bicep file named azuredeploy.bicep
You have a Bicep file named azuredeploy.bicep
That contains the following code.
resource stg 'Microsoft.Storage/storageAccounts@2023-04-01' = {
name: 'store${uniqueString(resourceGroup().id)}'
location: resourceGroup().location
sku: {
name: storageAccountType
}
kind: 'StorageV2'
properties: {
supportsHttpsTrafficOnly: true
}
}
name: 'store${uniqueString(resourceGroup().id)}'
location: resourceGroup().location
sku: {
name: storageAccountType
}
kind: 'StorageV2'
properties: {
supportsHttpsTrafficOnly: true
}
}
You have a pipeline that runs the following Azure Command-Line Interface (CLI) script.
az deployment group create --resource-group RG1 --template-file azuredeploy.bicep --parameters storageAccountType=Standard\_GRS
You plan to use the pipeline to deploy resources by using azuredeploy.bicep.
You need to ensure that the pipeline can deploy the resources. The solution must minimize administrative effort.
What should you do?
Select only one answer.
1. Add a parameter to azuredeploy.bicep.
2. Add a resource to RG1 by using the Azure portal.
3. Publish azuredeploy.bicep to Azure Artifacts.
4. Upload an SSH key to an Azure key vault.
1. Add a parameter to azuredeploy.bicep.
2. Add a resource to RG1 by using the Azure portal.
3. Publish azuredeploy.bicep to Azure Artifacts.
4. Upload an SSH key to an Azure key vault.
The correct answer is Add a parameter to azuredeploy.bicep.
Reason:
In the provided Bicep code, the property sku.name references storageAccountType:
In the provided Bicep code, the property sku.name references storageAccountType:
sku: {
name: storageAccountType
}
name: storageAccountType
}
However, storageAccountType has not been declared as a parameter in azuredeploy.bicep. Even though the CLI command passes --parameters storageAccountType=Standard_GRS, the Bicep template will fail validation and compilation because the identifier storageAccountType is undefined.
To resolve this with minimal administrative effort, add the parameter declaration at the top of azuredeploy.bicep:
param storageAccountType string = 'Standard_LRS'
Q7. You have a GitHub repository that contains Bicep files.
You need to create a GitHub action that will deploy resources defined in the Bicep files.
What should you create?
You need to create a GitHub action that will deploy resources defined in the Bicep files.
What should you create?
Select only one answer.
1. a JSON file in the .github/templates folder
2. a JSON file in the .github/workflows folder
3. a YAML file in the .github/templates folder
4. a YAML file in the .github/workflows folder
1. a JSON file in the .github/templates folder
2. a JSON file in the .github/workflows folder
3. a YAML file in the .github/templates folder
4. a YAML file in the .github/workflows folder
The correct answer is a YAML file in the .github/workflows folder.
GitHub Actions workflows are defined using YAML syntax and must be stored in the .github/workflows directory of the repository.
Q8. You use pipelines to deploy Azure infrastructure.
You plan to implement an Azure Policy solution to ensure compliance with regulatory requirements. The solution must meet the following requirements:
a. Audit unencrypted Azure SQL databases.
b. Monitor network security groups (NSGs) for specific ports.
c. Monitor whether vulnerability assessment solutions are installed on virtual machines.
d. Group all requirements for ease of administration.
What should you include in the solution?
You plan to implement an Azure Policy solution to ensure compliance with regulatory requirements. The solution must meet the following requirements:
a. Audit unencrypted Azure SQL databases.
b. Monitor network security groups (NSGs) for specific ports.
c. Monitor whether vulnerability assessment solutions are installed on virtual machines.
d. Group all requirements for ease of administration.
What should you include in the solution?
Select only one answer.
1. initiative definition
2. policy definition
3. policy remediation
4. policy scope
The correct answer is initiative definition.
An initiative definition (also known as a policy set) groups multiple policy definitions together into a single administrative unit. This simplifies compliance tracking and assignment across your environment rather than managing and assigning each policy definition individually.
An initiative definition (also known as a policy set) groups multiple policy definitions together into a single administrative unit. This simplifies compliance tracking and assignment across your environment rather than managing and assigning each policy definition individually.
Q9. You use pipelines to deploy Azure infrastructure.
You plan to configure an Azure policy to ensure that automatic remediation occurs if an Azure SQL database is created without Transparent Data Encryption (TDE).
Which policy definition effect should you use?
You plan to configure an Azure policy to ensure that automatic remediation occurs if an Azure SQL database is created without Transparent Data Encryption (TDE).
Which policy definition effect should you use?
Select only one answer.
1. auditIfNotExists
2. deployIfNotExists
3. deny
4. modify
1. auditIfNotExists
2. deployIfNotExists
3. deny
4. modify
The correct answer is deployIfNotExists.Explanation:
1. deployIfNotExists evaluates whether a related child/extension resource or configuration (such as Transparent Data Encryption on a SQL Database) exists. If it does not exist, Azure Policy triggers an ARM/Bicep template deployment to automatically remediate and configure the missing resource.
2. auditIfNotExists only generates a warning/audit log when the resource is missing; it does not perform automatic remediation.
3. deny prevents the creation/update of non-compliant resources rather than remediating them after deployment.
4. modify is used to alter properties, create tags, or modify attributes directly on the resource payload
during creation/update, but setting up TDE involves deploying the child resource configuration
2. auditIfNotExists only generates a warning/audit log when the resource is missing; it does not perform automatic remediation.
3. deny prevents the creation/update of non-compliant resources rather than remediating them after deployment.
4. modify is used to alter properties, create tags, or modify attributes directly on the resource payload
during creation/update, but setting up TDE involves deploying the child resource configuration
(Microsoft.Sql/servers/databases/transparentDataEncryption) via deployIfNotExists.
Q10. You are creating pipelines to build and deploy an app.
You need to include dynamic penetration tests that run the application by using known attack patterns.
What should you use?
You need to include dynamic penetration tests that run the application by using known attack patterns.
What should you use?
Select only one answer.
1. OWASP ZAP tests
2. Regression tests
3. Static code analysis
4. Unit tests
The correct answer is OWASP ZAP tests.
Explanation:
1. OWASP ZAP (Zed Attack Proxy) is a Dynamic Application Security Testing (DAST) tool that tests running applications by actively simulating known web attack patterns and vulnerabilities (e.g., SQL injection, Cross-Site Scripting).
2. Static code analysis (SAST) analyzes non-running source code without executing the application.
3. Regression tests verify that code changes have not broken existing functionality.
4. Unit tests validate isolated pieces of source code (functions/methods) during development.
Q11. You have an Azure DevOps organization named Contoso.
You use a feedback request workflow to manually gather and triage feedback from stakeholders.
You need to automate the process.
What should you do first?
Explanation:
1. OWASP ZAP (Zed Attack Proxy) is a Dynamic Application Security Testing (DAST) tool that tests running applications by actively simulating known web attack patterns and vulnerabilities (e.g., SQL injection, Cross-Site Scripting).
2. Static code analysis (SAST) analyzes non-running source code without executing the application.
3. Regression tests verify that code changes have not broken existing functionality.
4. Unit tests validate isolated pieces of source code (functions/methods) during development.
Q11. You have an Azure DevOps organization named Contoso.
You use a feedback request workflow to manually gather and triage feedback from stakeholders.
You need to automate the process.
What should you do first?
Select only one answer.
1. Create a GitHub issue.
2. Create a new Azure DevOps GitHub service connection.
3. Create a notification subscription.
4. Create a service hook subscription.
1. Create a GitHub issue.
2. Create a new Azure DevOps GitHub service connection.
3. Create a notification subscription.
4. Create a service hook subscription.
The correct answer is Create a service hook subscription
(or Create a new Azure DevOps GitHub service connection depending on the specific integration path, but the first foundational step to connect Azure DevOps to an external tool like GitHub is establishing the service connection).
Create a new Azure DevOps GitHub service connection.
Explanation:
1. To automate external workflows (such as synchronizing feedback or automating issue tracking with GitHub), Azure DevOps must first establish authentication and a trust boundary with the external service via a Service Connection.
2. Once the service connection exists, you can configure downstream automations and service hooks/pipelines to automatically triage, route, or open issues based on feedback events.
1. To automate external workflows (such as synchronizing feedback or automating issue tracking with GitHub), Azure DevOps must first establish authentication and a trust boundary with the external service via a Service Connection.
2. Once the service connection exists, you can configure downstream automations and service hooks/pipelines to automatically triage, route, or open issues based on feedback events.
Q12. You have a GitHub repository named Repo1 that contains the source code of a web app.
You have an Azure DevOps organization named Contoso.
You need to link Repo1 to an Azure DevOps project in Contoso. The solution must meet the following requirements:
Associate GitHub commits, pull requests, and issues with corresponding work items in Azure Boards.
Follow the principle of least privilege.
What should you use?
You have an Azure DevOps organization named Contoso.
You need to link Repo1 to an Azure DevOps project in Contoso. The solution must meet the following requirements:
Associate GitHub commits, pull requests, and issues with corresponding work items in Azure Boards.
Follow the principle of least privilege.
What should you use?
Select only one answer.
1. a GitHub app installed in the GitHub organization
2. a GitHub user account that is a member of Repo1
3. a personal access token (PAT) from your GitHub account
4. your GitHub account credentials
The correct answer is a GitHub app installed in the GitHub organization.
Explanation:
1. The Azure Boards GitHub App is Microsoft's recommended method for integrating Azure DevOps Boards with GitHub repositories.
2. It aligns with the principle of least privilege because permissions can be scoped specifically to selected repositories (like `Repo1`) rather than granting broad account-level access associated with personal user credentials or full Personal Access Tokens (PATs).
3. It eliminates reliance on individual user identities, preventing pipeline or integration breakage if a user leaves the organization.
Q13. You have an Azure DevOps organization named Contoso and a GitHub repository named Repo1.
Your development team uses Azure Boards to track user stories and bugs.
You need to ensure that each code change made in GitHub can be traced directly back to the corresponding Azure Boards work items.
Which two actions should you perform? Each correct answer presents part of the solution.
Explanation:
1. The Azure Boards GitHub App is Microsoft's recommended method for integrating Azure DevOps Boards with GitHub repositories.
2. It aligns with the principle of least privilege because permissions can be scoped specifically to selected repositories (like `Repo1`) rather than granting broad account-level access associated with personal user credentials or full Personal Access Tokens (PATs).
3. It eliminates reliance on individual user identities, preventing pipeline or integration breakage if a user leaves the organization.
Q13. You have an Azure DevOps organization named Contoso and a GitHub repository named Repo1.
Your development team uses Azure Boards to track user stories and bugs.
You need to ensure that each code change made in GitHub can be traced directly back to the corresponding Azure Boards work items.
Which two actions should you perform? Each correct answer presents part of the solution.
Select all answers that apply.
1. Configure GitHub branch protection rules to require passing a status check.
2. From Azure Pipelines, create a build retention policy to indefinitely store build artifacts.
3. Create a GitHub action that validates all commit messages.
4. Configure GitHub Actions to automatically assign pull requests to Azure Boards based on labels.
1. Configure GitHub branch protection rules to require passing a status check.
2. From Azure Pipelines, create a build retention policy to indefinitely store build artifacts.
3. Create a GitHub action that validates all commit messages.
4. Configure GitHub Actions to automatically assign pull requests to Azure Boards based on labels.
The two correct actions are:
1. Configure GitHub branch protection rules to require passing a status check.
3. Create a GitHub action that validates all commit messages.
Explanation:
1. Traceability syntax (AB#<ID>): Azure Boards links commits and pull requests to work items using the `AB#<ID>` syntax within commit messages or pull request descriptions.
2. Validation workflow: A GitHub Action can be configured to check and validate that every commit message or PR title/description contains a valid Azure Boards reference (e.g., AB#123).
3. Enforcing checks: Configuring a **GitHub branch protection rule requiring that the commit message validation workflow (status check) passes ensures that code cannot be merged without proper work item linkage.
1. Configure GitHub branch protection rules to require passing a status check.
3. Create a GitHub action that validates all commit messages.
Explanation:
1. Traceability syntax (AB#<ID>): Azure Boards links commits and pull requests to work items using the `AB#<ID>` syntax within commit messages or pull request descriptions.
2. Validation workflow: A GitHub Action can be configured to check and validate that every commit message or PR title/description contains a valid Azure Boards reference (e.g., AB#123).
3. Enforcing checks: Configuring a **GitHub branch protection rule requiring that the commit message validation workflow (status check) passes ensures that code cannot be merged without proper work item linkage.
Q14. You have a GitHub repository named Repo1 that is used by two teams named Team1 and Team2. The teams work independently.
You need to recommend a planning solution for each team. The solution must meet the following requirements:
A. Each team must have its own Azure Boards board.
B. Each team board must be accessible to only the team’s respective members.
C. The solution must minimize administrative effort.
What should you include in the recommendation?
A. Each team must have its own Azure Boards board.
B. Each team board must be accessible to only the team’s respective members.
C. The solution must minimize administrative effort.
What should you include in the recommendation?
Select only one answer.
1. one Azure DevOps project that contains a board for each team
2. one GitHub project that contains a label for each team
3. one Azure DevOps project for each team
4. one GitHub project for each team
1. one Azure DevOps project that contains a board for each team
2. one GitHub project that contains a label for each team
3. one Azure DevOps project for each team
4. one GitHub project for each team
The correct answer is one Azure DevOps project that contains a board for each team.
Explanation:
1. Single Project Structure: In Azure DevOps, a single project can support multiple autonomous teams. Creating a single project avoids the overhead of managing separate project-level configurations, permissions, and process templates across multiple projects.
2. Team Boards & Area Paths: Each team added to an Azure DevOps project automatically gets its own dedicated backlog and Kanban board mapped to an Area Path.
3. Access Control: Permissions can be set directly at the team / Area Path level to restrict view and edit access exclusively to each team's respective members.
Explanation:
1. Single Project Structure: In Azure DevOps, a single project can support multiple autonomous teams. Creating a single project avoids the overhead of managing separate project-level configurations, permissions, and process templates across multiple projects.
2. Team Boards & Area Paths: Each team added to an Azure DevOps project automatically gets its own dedicated backlog and Kanban board mapped to an Area Path.
3. Access Control: Permissions can be set directly at the team / Area Path level to restrict view and edit access exclusively to each team's respective members.
Q15. You have an Azure DevOps organization that contains a project named Project1.
You have a GitHub Enterprise Cloud organization.
You plan to use the GitHub repositories for source control.
You need to reference and link to Azure Boards work items directly from pull requests in GitHub.
What should you do first?
You have a GitHub Enterprise Cloud organization.
You plan to use the GitHub repositories for source control.
You need to reference and link to Azure Boards work items directly from pull requests in GitHub.
What should you do first?
Select only one answer.
1. Configure the security policy for the GitHub Enterprise Cloud organization.
2. Create a GitHub action in GitHub.
3. Create a GitHub repository service connection in Project1.
4. Install the Azure Boards app from GitHub Marketplace.
1. Configure the security policy for the GitHub Enterprise Cloud organization.
2. Create a GitHub action in GitHub.
3. Create a GitHub repository service connection in Project1.
4. Install the Azure Boards app from GitHub Marketplace.
The correct answer is Install the Azure Boards app from GitHub Marketplace.
Explanation:
1. To connect GitHub repositories to Azure Boards and enable automatic linking of work items via PRs and commits (using the `AB#<ID>` syntax), the first step is to install the Azure Boards app from GitHub Marketplace in your GitHub organization.
2 During or immediately after the app installation, you authenticate with your Azure DevOps organization (`Contoso`/`Project1`) and select the target repositories.
Explanation:
1. To connect GitHub repositories to Azure Boards and enable automatic linking of work items via PRs and commits (using the `AB#<ID>` syntax), the first step is to install the Azure Boards app from GitHub Marketplace in your GitHub organization.
2 During or immediately after the app installation, you authenticate with your Azure DevOps organization (`Contoso`/`Project1`) and select the target repositories.
Q16. You have an Azure Repos repository named Project1.
You need to recommend a branching strategy for Project1 that meets the following requirements:
1. Isolates all the changes that are ready to be released in a single branch.
2. Manages changes in a branch that will be merged into a future release.
3. Only uses the main branch for production-ready code.
Which branching strategy should you recommend?
You need to recommend a branching strategy for Project1 that meets the following requirements:
1. Isolates all the changes that are ready to be released in a single branch.
2. Manages changes in a branch that will be merged into a future release.
3. Only uses the main branch for production-ready code.
Which branching strategy should you recommend?
Select only one answer.
1. development isolation
2. feature isolation
3. main only
4. release isolation
1. development isolation
2. feature isolation
3. main only
4. release isolation
The correct answer is release isolation.
Explanation:
1. Release isolation uses dedicated release branches (e.g., `release/v1.0`) created from the main or development line.
2. It isolates changes ready for deployment, allowing teams to stabilize and apply bug fixes to the current release without holding up ongoing feature work.
3. Once stabilization is complete, changes are deployed and merged into the main branch (which represents production-ready code) and back-propagated to the branch for future releases.
Explanation:
1. Release isolation uses dedicated release branches (e.g., `release/v1.0`) created from the main or development line.
2. It isolates changes ready for deployment, allowing teams to stabilize and apply bug fixes to the current release without holding up ongoing feature work.
3. Once stabilization is complete, changes are deployed and merged into the main branch (which represents production-ready code) and back-propagated to the branch for future releases.
Q17. You have an Azure DevOps project named Project1 that contains two branches named main and branch1.
You need to ensure that when branch1 merges back into main, a pull request is created.
What should you do?
You need to ensure that when branch1 merges back into main, a pull request is created.
What should you do?
Select only one answer.
1. Configure a branch policy for branch1.
2. Configure a branch policy for main.
3. Configure branch security for branch1.
4. Configure branch security for main.
1. Configure a branch policy for branch1.
2. Configure a branch policy for main.
3. Configure branch security for branch1.
4. Configure branch security for main.
The correct answer is Configure a branch policy for main.
Explanation:
1. In Azure Repos, branch policies protect the target branch into which code is being merged.
2. Configuring a branch policy on main enforces that no one can push direct commits to main and mandates that all incoming changes (including those merged from `branch1`) must go through a Pull Request (PR) and satisfy required checks before merging.
Explanation:
1. In Azure Repos, branch policies protect the target branch into which code is being merged.
2. Configuring a branch policy on main enforces that no one can push direct commits to main and mandates that all incoming changes (including those merged from `branch1`) must go through a Pull Request (PR) and satisfy required checks before merging.
Q18. You are developing code releases in GitHub.
You need to mark a specific point in the history of a repository as the releases are created.
What should you use?
You need to mark a specific point in the history of a repository as the releases are created.
What should you use?
Select only one answer.
1. Actions
2. Environment Variables
3. Tags
4. Webhooks
1. Actions
2. Environment Variables
3. Tags
4. Webhooks
The correct answer is Tags.
Explanation:
1 Tags in Git and GitHub are specific references used to mark points in a repository's commit history (e.g., `v1.0.0`, `v2.1.3`). GitHub Releases are directly associated with Git tags to capture a frozen snapshot of the code at that specific release milestone.
Explanation:
1 Tags in Git and GitHub are specific references used to mark points in a repository's commit history (e.g., `v1.0.0`, `v2.1.3`). GitHub Releases are directly associated with Git tags to capture a frozen snapshot of the code at that specific release milestone.
Q19. You have a GitHub repository named Repo1.
Your team allows external contributors to submit changes without affecting the main repository.
You need to recommend a workflow that supports independent contributions and controlled integration by maintainers.
Which type of workflow should you recommend?
Your team allows external contributors to submit changes without affecting the main repository.
You need to recommend a workflow that supports independent contributions and controlled integration by maintainers.
Which type of workflow should you recommend?
Select only one answer.
1. centralized
2. feature branch
3. forking
4. GitFlow
1. centralized
2. feature branch
3. forking
4. GitFlow
The correct answer is forking.
Explanation:
1. In a forking workflow, external contributors clone a complete, independent server-side copy of the upstream repository (Repo1) into their own GitHub accounts.
2. Contributors make changes within their forks without requiring direct write or push permissions to `Repo1`.
3. Controlled integration is achieved when contributors submit Pull Requests (PRs) from their forks, allowing project maintainers to review, test, and merge the changes into the main repository.
Q20. You have an Azure subscription that contains a Log Analytics workspace.
A. You plan to create a custom dashboard to display Azure DevOps pipeline metrics, such as duration and failure rate.
B. You need to configure a monitoring tool for the dashboard. The solution must minimize engineering effort.
What should you configure?
Explanation:
1. In a forking workflow, external contributors clone a complete, independent server-side copy of the upstream repository (Repo1) into their own GitHub accounts.
2. Contributors make changes within their forks without requiring direct write or push permissions to `Repo1`.
3. Controlled integration is achieved when contributors submit Pull Requests (PRs) from their forks, allowing project maintainers to review, test, and merge the changes into the main repository.
Q20. You have an Azure subscription that contains a Log Analytics workspace.
A. You plan to create a custom dashboard to display Azure DevOps pipeline metrics, such as duration and failure rate.
B. You need to configure a monitoring tool for the dashboard. The solution must minimize engineering effort.
What should you configure?
Select only one answer.
1. a GitHub Actions insight
2. a Microsoft Power BI semantic model
3. an Azure dashboard
4. an Azure Monitor workbook
1. a GitHub Actions insight
2. a Microsoft Power BI semantic model
3. an Azure dashboard
4. an Azure Monitor workbook
The correct answer is an Azure Monitor workbook.
Explanation:
1. Native integration with Log Analytics: Azure Monitor workbooks natively connect directly to Log Analytics workspaces, enabling you to query pipeline logs using Kusto Query Language (KQL) and render visual charts, grids, and metrics (like duration and failure rates) with minimal configuration and engineering overhead.
2. Why others are less optimal:
i. Microsoft Power BI semantic model: Requires building datasets, setting up data gateways/connectors, and managing separate Power BI licensing and infrastructure, adding substantial engineering effort.
ii. Azure dashboard: Offers basic pinboards for tiles but lacks the rich, interactive analytical capabilities, parameterization, and deep native Log Analytics reporting provided by Workbooks.
iii. GitHub Actions insight: Applies to GitHub Actions metrics rather than Azure DevOps pipelines and does not leverage the existing Azure Log Analytics workspace.
Explanation:
1. Native integration with Log Analytics: Azure Monitor workbooks natively connect directly to Log Analytics workspaces, enabling you to query pipeline logs using Kusto Query Language (KQL) and render visual charts, grids, and metrics (like duration and failure rates) with minimal configuration and engineering overhead.
2. Why others are less optimal:
i. Microsoft Power BI semantic model: Requires building datasets, setting up data gateways/connectors, and managing separate Power BI licensing and infrastructure, adding substantial engineering effort.
ii. Azure dashboard: Offers basic pinboards for tiles but lacks the rich, interactive analytical capabilities, parameterization, and deep native Log Analytics reporting provided by Workbooks.
iii. GitHub Actions insight: Applies to GitHub Actions metrics rather than Azure DevOps pipelines and does not leverage the existing Azure Log Analytics workspace.
Q21. You have a GitHub repository named Repo1.
You need to monitor repository activity to view data, such as the number of open issues, the pull request frequency, and contributors' activity over time. The solution must minimize configuration effort.
What should you use?
You need to monitor repository activity to view data, such as the number of open issues, the pull request frequency, and contributors' activity over time. The solution must minimize configuration effort.
What should you use?
Select only one answer.
1. GitHub Actions
2. GitHub insights
3. GitHub webhooks
4. GitHub workflows
1. GitHub Actions
2. GitHub insights
3. GitHub webhooks
4. GitHub workflows
The correct answer is GitHub insights.
Explanation:
1. GitHub insights is the built-in analytics feature located under the repository's Insights tab. It provides immediate, out-of-the-box charts and metrics—such as Pulse (summary of pull requests, issues, and commits), Contributors (commit activity and timeline per author), and Traffic—without requiring any custom coding or configuration effort.
2. GitHub Actions , GitHub workflows and GitHub webhooks are automation and CI/CD tools that would require writing custom scripts, actions, or receiving servers to aggregate and display repository metrics.
Q22. You receive a smart detection notification from Application Insights because the performance of an app has degraded.
What are three factors that can cause smart detection notifications to be raised?
Explanation:
1. GitHub insights is the built-in analytics feature located under the repository's Insights tab. It provides immediate, out-of-the-box charts and metrics—such as Pulse (summary of pull requests, issues, and commits), Contributors (commit activity and timeline per author), and Traffic—without requiring any custom coding or configuration effort.
2. GitHub Actions , GitHub workflows and GitHub webhooks are automation and CI/CD tools that would require writing custom scripts, actions, or receiving servers to aggregate and display repository metrics.
Q22. You receive a smart detection notification from Application Insights because the performance of an app has degraded.
What are three factors that can cause smart detection notifications to be raised?
Select all answers that apply.
1. App dependencies are responding more slowly than usual.
2. The app is responding to requests more slowly than usual.
3. The app is using more memory than usual.
4. Pages are loading slower on one type of browser.
1. App dependencies are responding more slowly than usual.
2. The app is responding to requests more slowly than usual.
3. The app is using more memory than usual.
4. Pages are loading slower on one type of browser.
The three correct factors are:
1. App dependencies are responding more slowly than usual.(Dependency duration degradation)
2. The app is responding to requests more slowly than usual. (Server response time degradation)
4. Pages are loading slower on one type of browser. (Page load time degradation / browser-specific anomalies)
1. App dependencies are responding more slowly than usual.(Dependency duration degradation)
2. The app is responding to requests more slowly than usual. (Server response time degradation)
4. Pages are loading slower on one type of browser. (Page load time degradation / browser-specific anomalies)
Why memory is excluded:
Azure Application Insights Smart Detection for performance anomalies focuses primarily on telemetry related to response times, dependency durations, and browser page load times. Memory usage anomalies (e.g., potential memory leaks) are handled under separate detection categories rather than general performance degradation alerts.
Azure Application Insights Smart Detection for performance anomalies focuses primarily on telemetry related to response times, dependency durations, and browser page load times. Memory usage anomalies (e.g., potential memory leaks) are handled under separate detection categories rather than general performance degradation alerts.
Q23. You have an Azure subscription that contains a resource group named RG1. RG1 contains an Application Insights instance named Insight1.
Four users are assigned the following Azure roles:
A. User1: Owner at the subscription scope
B. User2: Monitoring Reader at the Insight1 scope
C. User3: Automation Operator at the RG1 scope
D. User4: Security Admin at the root management group scope
Smart Detection notifications are enabled for a project.
Which user will receive Smart Detection notifications by default?
Four users are assigned the following Azure roles:
A. User1: Owner at the subscription scope
B. User2: Monitoring Reader at the Insight1 scope
C. User3: Automation Operator at the RG1 scope
D. User4: Security Admin at the root management group scope
Smart Detection notifications are enabled for a project.
Which user will receive Smart Detection notifications by default?
Select only one answer.
1. User1
2. User2
3. User3
4. User4
1. User1
2. User2
3. User3
4. User4
The correct answer is User1.
Explanation:
By default, Azure Application Insights Smart Detection sends email notifications to users assigned built-in management roles (Subscription Owner, Subscription Contributor, or Subscription Reader / Monitoring Reader and Monitoring Contributor) at the Subscription level.
1. User1 has the Owner role assigned at the subscription scope, qualifying them as a default recipient.
2. User2 is assigned at the resource scope (Insight1), not at the subscription level.
3. User3 and User4 hold unrelated roles at the resource group and root management group scopes.
Q24. You receive a smart detection notification from Application Insights for an app connected to an Azure SQL database.
In the notification, you notice that exceptions are being thrown.
What can you use to investigate the exceptions?
Explanation:
By default, Azure Application Insights Smart Detection sends email notifications to users assigned built-in management roles (Subscription Owner, Subscription Contributor, or Subscription Reader / Monitoring Reader and Monitoring Contributor) at the Subscription level.
1. User1 has the Owner role assigned at the subscription scope, qualifying them as a default recipient.
2. User2 is assigned at the resource scope (Insight1), not at the subscription level.
3. User3 and User4 hold unrelated roles at the resource group and root management group scopes.
Q24. You receive a smart detection notification from Application Insights for an app connected to an Azure SQL database.
In the notification, you notice that exceptions are being thrown.
What can you use to investigate the exceptions?
Select only one answer.
1. .NET Reflector
2. Fiddler
3. Snapshot Debugger
4. Extended Events
1. .NET Reflector
2. Fiddler
3. Snapshot Debugger
4. Extended Events
The correct answer is Snapshot Debugger.
Explanation:
1. Application Insights Snapshot Debugger automatically captures a point-in-time snapshot of the source code, local variables, and call stack when exceptions occur in production applications without impacting performance or user traffic.
2. Why the other options are incorrect:
i. Fiddler: An HTTP debugging proxy used to inspect web network traffic, not application-level exception call stacks and variables.
ii. .NET Reflector: A static code decompiler used to inspect compiled .NET assemblies.
iii. Extended Events: A database-level diagnostic tool for SQL Server/Azure SQL, used to trace SQL query performance and engine events rather than application code exceptions.
1. Application Insights Snapshot Debugger automatically captures a point-in-time snapshot of the source code, local variables, and call stack when exceptions occur in production applications without impacting performance or user traffic.
2. Why the other options are incorrect:
i. Fiddler: An HTTP debugging proxy used to inspect web network traffic, not application-level exception call stacks and variables.
ii. .NET Reflector: A static code decompiler used to inspect compiled .NET assemblies.
iii. Extended Events: A database-level diagnostic tool for SQL Server/Azure SQL, used to trace SQL query performance and engine events rather than application code exceptions.
Q25. You have a globally distributed Azure web app named WebApp1 that is configured for Azure Application Insights.
You receive a Smart Detection-generated alert regarding an issue with WebApp1 that results in an exception every time users in Singapore open a specific page.
You need to verify whether the issue is limited to specific regions.
What should you do?
You receive a Smart Detection-generated alert regarding an issue with WebApp1 that results in an exception every time users in Singapore open a specific page.
You need to verify whether the issue is limited to specific regions.
What should you do?
Select only one answer.
1. Configure availability tests.
2. Configure user flows.
3. Modify the Smart Detection rules.
4. Update the Application map components.
1. Configure availability tests.
2. Configure user flows.
3. Modify the Smart Detection rules.
4. Update the Application map components.
The correct answer is Configure availability tests.
Explanation:
1. Availability tests (URL ping or standard tests) in Azure Application Insights allow you to proactively send synthetic web requests to specific endpoints and pages from multiple geographic test locations worldwide.
2. By selecting different geographic locations (including Singapore and other global regions), you can determine whether the page exceptions and failures are isolated to a specific region or affecting global users.
Explanation:
1. Availability tests (URL ping or standard tests) in Azure Application Insights allow you to proactively send synthetic web requests to specific endpoints and pages from multiple geographic test locations worldwide.
2. By selecting different geographic locations (including Singapore and other global regions), you can determine whether the page exceptions and failures are isolated to a specific region or affecting global users.
Why other options are incorrect:
1. User flows: Analyzes user navigation paths through the application (which pages users visit before and after), not synthetic regional testing.
2. Modify the Smart Detection rules: Controls alert thresholds and email notification recipients, but does not test or verify regional availability.
3. Update the Application map components: Visualizes architectural topology and dependencies, not regional telemetry testing.
1. User flows: Analyzes user navigation paths through the application (which pages users visit before and after), not synthetic regional testing.
2. Modify the Smart Detection rules: Controls alert thresholds and email notification recipients, but does not test or verify regional availability.
3. Update the Application map components: Visualizes architectural topology and dependencies, not regional telemetry testing.
No comments:
Post a Comment