AZ-400: Designing and Implementing Microsoft DevOps Solutions — Questions and Answers

Question 1: Which foundational principle is MOST important for success in the Microsoft Azure DevOps Engineer profession?

Maintaining the minimum requirements for certification
Maximizing financial returns on every engagement
Specializing in only one narrow area of practice
Commitment to continuous learning, ethical practice, and quality outcomes (Correct answer)

Correct answer: Commitment to continuous learning, ethical practice, and quality outcomes

Success in any professional field requires a commitment to continuous learning to stay current, ethical practice to maintain trust and integrity, and a focus on quality outcomes that serve stakeholders and the public interest.

Question 2: Which variable scope takes the lowest precedence when the same variable is defined at multiple levels in Azure Pipelines?

Pipeline root level (Correct answer)
Job level
Variable group
Stage level

Correct answer: Pipeline root level

Variables defined at the pipeline root level have the lowest precedence and are overridden by stage, job, or step-level definitions.

Question 3: In a canary deployment strategy, what determines the percentage of traffic routed to the new version initially?

Traffic routing rules configured in the load balancer or ingress controller (Correct answer)
The number of pipeline agents
The artifact version number
The number of work items linked to the release

Correct answer: Traffic routing rules configured in the load balancer or ingress controller

Canary traffic splitting is controlled by load balancer rules, ingress annotations, or feature flags — not by the pipeline itself.

Question 4: What is the correct way to conditionally include a template step only when a parameter equals a specific value?

Set `enabled: false` dynamically
Use a runtime condition expression with variables
Use `condition:` on the template include
Use `${{ if eq(parameters.env, 'prod') }}:` wrapping the template include (Correct answer)

Correct answer: Use `${{ if eq(parameters.env, 'prod') }}:` wrapping the template include

Template expressions like `${{ if eq(parameters.env, 'prod') }}:` are evaluated at compile time and can conditionally include template steps.

Question 5: Which task should you use in Azure Pipelines to cache NuGet packages and reduce restore times on repeated builds?

PublishBuildArtifacts
NuGetAuthenticate
Cache (Correct answer)
DownloadPipelineArtifact

Correct answer: Cache

The Cache task stores and restores directories (such as the NuGet package cache) between pipeline runs using a cache key, reducing download time.

Question 6: Which Azure DevOps feature allows you to require a manual approval before a deployment proceeds to a production stage?

Artifact filter
Branch policy
Pre-deployment approval gate (Correct answer)
Service connection

Correct answer: Pre-deployment approval gate

Pre-deployment approvals in Azure Pipelines let you designate approvers who must sign off before a stage begins.

Question 7: Which statement BEST describes the relationship between Microsoft Azure DevOps Engineer certification requirements and industry evolution?

Requirements become less stringent over time
Changes only occur when government mandates new requirements
Requirements evolve periodically to reflect advances in knowledge, technology, and practice standards (Correct answer)
Certification requirements never change once established

Correct answer: Requirements evolve periodically to reflect advances in knowledge, technology, and practice standards

Certification requirements evolve to keep pace with advances in professional knowledge, technological developments, and changes in practice standards. This ensures that certified professionals remain current and competent in a changing professional landscape.

Question 8: A product owner wants to prioritize the backlog so that the highest business value items are addressed first. Which Azure Boards feature supports this?

Tag filtering
Sprint assignment
Backlog ordering via drag-and-drop (Correct answer)
Area path grouping

Correct answer: Backlog ordering via drag-and-drop

Azure Boards allows product owners to drag and reorder backlog items to reflect priority, with items at the top representing highest priority.

Question 9: What Azure feature allows you to define governance rules that Azure resources must comply with, and can block non-compliant deployments?

Azure Policy (Correct answer)
Azure Monitor
Azure Blueprints
Azure DevTest Labs

Correct answer: Azure Policy

Azure Policy lets you create and assign policies that enforce organizational rules on resources; deployments that violate a Deny-effect policy are blocked automatically.

Question 10: An organization wants to mandate that all pipelines include a security scanning job. Which Azure DevOps feature best enforces this?

Required pipeline templates via the `extends` keyword and protected template resources (Correct answer)
Service connection approvals
Branch policies
Variable group permissions

Correct answer: Required pipeline templates via the `extends` keyword and protected template resources

Required templates configured with `extends` and protected as a resource force every consuming pipeline to include the mandated jobs.

Question 11: What is the purpose of the `extends` keyword in an Azure DevOps YAML pipeline?

To inherit from a base template and enforce organizational standards (Correct answer)
To extend the timeout of a pipeline stage
To add additional agents to a job pool
To import variable groups into a pipeline

Correct answer: To inherit from a base template and enforce organizational standards

The `extends` keyword allows a pipeline to inherit from a base template, enabling organizations to enforce mandatory steps and policies.

Question 12: Which practice in Agile and DevOps involves team members describing completed work and demonstrating it to stakeholders at the end of a sprint?

Sprint Retrospective
Backlog Refinement
Daily Standup
Sprint Review (Correct answer)

Correct answer: Sprint Review

The Sprint Review is a collaborative event where the team demonstrates completed work to stakeholders and gathers feedback to inform the backlog.

Question 13: Which Application Insights feature captures detailed diagnostic data only when a request fails or is slow, to minimize overhead?

Adaptive sampling
Live Metrics Stream
Snapshot Debugger (Correct answer)
Profiler

Correct answer: Snapshot Debugger

Snapshot Debugger automatically collects debug snapshots when exceptions occur, letting developers inspect the call stack and variables at the point of failure.

Question 14: Which documentation is essential when working with infrastructure as code in AZ-400?

General descriptions without specifics
Marketing materials
Only verbal notes
Detailed technical specifications and as-built diagrams (Correct answer)

Correct answer: Detailed technical specifications and as-built diagrams

Detailed technical specifications and as-built diagrams provide the accurate reference information needed for maintenance and troubleshooting.

Question 15: What distinguishes a Microsoft Azure DevOps Engineer certified professional from a non-certified practitioner?

Certified professionals always have more years of experience
There is no meaningful difference in competency
Certification validates competency through standardized assessment against established benchmarks (Correct answer)
Certified professionals exclusively work in larger organizations

Correct answer: Certification validates competency through standardized assessment against established benchmarks

Certification provides objective validation of competency through standardized assessment. While non-certified practitioners may be skilled, certification offers verified evidence that a professional meets established benchmarks for knowledge and performance.

Question 16: In Azure DevOps, a team wants to prevent a work item from being moved to 'Active' unless it has an assigned owner. How is this enforced?

Setting a WIP limit of 1 on the Active column
Configuring work item rules in the inherited process to require a field value on state transition (Correct answer)
Using a pipeline gate that checks work item state
Using branch policies on the main branch

Correct answer: Configuring work item rules in the inherited process to require a field value on state transition

Work item rules in the inherited process model can require specific fields (like Assigned To) to be filled in before a state transition is allowed.

Question 17: A team wants to visualize their workflow stages and identify bottlenecks without committing to fixed-length iterations. Which Agile framework should they adopt?

Kanban (Correct answer)
Scrum
XP
SAFe

Correct answer: Kanban

Kanban uses a continuous flow model with a visual board to identify bottlenecks without requiring fixed-length sprints.

Question 18: How does the AZ-400 body of knowledge relate to daily professional practice?

It is theoretical and has limited practical application
It provides the foundational framework that guides decision-making and standard practices (Correct answer)
It is relevant only for academic research
It only applies during certification exams

Correct answer: It provides the foundational framework that guides decision-making and standard practices

The body of knowledge provides the foundational framework of principles, standards, and best practices that professionals use to guide their daily decision-making, ensure consistent quality, and maintain alignment with industry standards.

Question 19: In a ring deployment, what is the primary purpose of 'Ring 0'?

Deploy only to test environments
Deploy to internal Microsoft/team users first for early validation (Correct answer)
Deploy to a random 10% sample of users
Deploy to all production users simultaneously

Correct answer: Deploy to internal Microsoft/team users first for early validation

Ring 0 targets internal users (dogfooding) so the team validates changes before any external exposure.

Question 20: A team wants to use Terraform in their Azure pipeline to implement infrastructure-as-code with drift detection. Which gate or task pattern best detects configuration drift before deployment?

Use Azure Policy deny effects only
Use ARM What-If only, not Terraform
Run 'terraform plan' and fail the gate if the plan shows unexpected changes (Correct answer)
Run 'terraform apply' directly in the pipeline without plan

Correct answer: Run 'terraform plan' and fail the gate if the plan shows unexpected changes

Running 'terraform plan' and inspecting output (or using OPA/Sentinel policies on the plan) detects drift and unintended changes before 'apply' is executed.

Question 21: In AZ-400 practice, what is the best approach to quality improvement in continuous delivery?

Make changes without measuring results
Wait for problems to occur before acting
Use data-driven methods with measurable outcomes (Correct answer)
Copy what other organizations do without analysis

Correct answer: Use data-driven methods with measurable outcomes

Data-driven quality improvement with measurable outcomes ensures that changes actually produce the intended improvements and can be verified.

Question 22: In a continuous feedback loop for DevOps, which practice involves instrumenting code to measure user behavior and feature usage in production?

Blue-green deployment
Canary analysis
Chaos engineering
Feature flag telemetry / usage analytics (Correct answer)

Correct answer: Feature flag telemetry / usage analytics

Feature flag telemetry and usage analytics instrument specific features to measure adoption, engagement, and impact directly in production.

Question 23: A team wants to ensure user stories have clear, testable acceptance criteria before sprint planning. Which Agile concept enforces this?

Definition of Done
Sprint Goal
Release Criteria
Definition of Ready (Correct answer)

Correct answer: Definition of Ready

The Definition of Ready specifies conditions a backlog item must meet (including acceptance criteria) before the team can commit to it in sprint planning.

Question 24: Which skill is most critical for effective dependency management?

Individual work preferences
Communication and stakeholder engagement (Correct answer)
Technical expertise alone
Speed of decision-making

Correct answer: Communication and stakeholder engagement

Communication and stakeholder engagement are essential because management success depends on effectively coordinating with and influencing others.

Question 25: Which Azure Pipelines built-in task is used to deploy an ARM template to a resource group?

AzureWebApp@1
AzureFunctionApp@1
AzureResourceManagerTemplateDeployment@3 (Correct answer)
KubernetesManifest@0

Correct answer: AzureResourceManagerTemplateDeployment@3

The AzureResourceManagerTemplateDeployment task (ARM template deployment) deploys ARM JSON templates to an Azure resource group.

Question 26: When a team uses 'story points' for estimation in Azure Boards, what characteristic makes them more useful than hour-based estimates?

They can be assigned only by the Scrum Master
They map directly to billable hours for reporting
They integrate with Azure Pipelines automatically
They are relative and account for complexity and uncertainty rather than exact time (Correct answer)

Correct answer: They are relative and account for complexity and uncertainty rather than exact time

Story points are relative measures of effort, complexity, and risk, making them more stable than hour estimates which vary by individual and context.

Question 27: What is the key difference between 'rolling' and 'recreate' deployment strategies in Kubernetes?

Recreate scales horizontally; rolling does not
They are identical but differ in naming convention
Recreate terminates all old pods before starting new ones; rolling gradually replaces them (Correct answer)
Rolling requires a service mesh; recreate does not

Correct answer: Recreate terminates all old pods before starting new ones; rolling gradually replaces them

Recreate causes downtime by killing all existing pods first, while RollingUpdate replaces pods incrementally to maintain availability.

Question 28: When using Azure Policy with IaC deployments, what is the `DeployIfNotExists` effect used for?

Auditing resources without making any changes
Blocking deployments that violate policy
Denying creation of resources missing required tags
Automatically remediating non-compliant resources by deploying required configurations (Correct answer)

Correct answer: Automatically remediating non-compliant resources by deploying required configurations

`DeployIfNotExists` triggers a remediation deployment to bring non-compliant resources into compliance by deploying required child resources or configurations.

Question 29: In Azure Pipelines, what does a release trigger set to 'Continuous deployment' do?

Requires manual creation of each release
Creates a new release automatically whenever the linked artifact is updated (Correct answer)
Triggers a release on a fixed schedule
Deploys to all stages simultaneously

Correct answer: Creates a new release automatically whenever the linked artifact is updated

A continuous deployment trigger automatically creates and starts a new release pipeline run whenever a new build artifact is published.

Question 30: What does 'shift-left security' mean in the context of DevSecOps?

Moving security testing to the final production stage
Integrating security practices earlier in the software development lifecycle (Correct answer)
Moving security configurations to the left pane of the Azure portal
Shifting security responsibilities entirely to the operations team

Correct answer: Integrating security practices earlier in the software development lifecycle

Shift-left security means integrating security practices and testing earlier in the SDLC so vulnerabilities are caught sooner, reducing the cost and risk of remediation.

Question 31: What is the MOST effective way for new AZ-400 professionals to build competency in their field?

Focusing solely on the most advanced topics
Learning entirely through trial and error
Studying certification materials exclusively
Combining formal education, mentored practice, and ongoing professional development (Correct answer)

Correct answer: Combining formal education, mentored practice, and ongoing professional development

Building professional competency requires a multi-faceted approach: formal education provides foundational knowledge, mentored practice develops applied skills under guidance, and ongoing professional development ensures continuous growth and currency in the field.

Question 32: In Azure Container Apps, which scaling rule type allows the platform to scale based on the length of an Azure Service Bus queue?

HTTP traffic scaler
Azure Service Bus scaler (KEDA-based) (Correct answer)
CPU percentage scaler
Memory pressure scaler

Correct answer: Azure Service Bus scaler (KEDA-based)

Azure Container Apps uses KEDA under the hood, and the Service Bus scaler triggers scaling based on queue/topic message count or backlog.

Question 33: In Azure Pipelines YAML, what is the purpose of the 'resources.pipelines' block?

Defines the agent resources available for pipeline execution
Lists the Azure resources provisioned for deployment
Configures resource locks on Azure subscriptions
Declares another pipeline whose artifacts or triggers this pipeline can consume (Correct answer)

Correct answer: Declares another pipeline whose artifacts or triggers this pipeline can consume

The resources.pipelines block lets a pipeline reference artifacts from—and optionally trigger on completions of—another Azure Pipeline.

Question 34: What is the benefit of using variable groups in Azure DevOps?

They slow down pipelines
They replace environment variables
They allow sharing variables across multiple pipelines (Correct answer)
They delete old variables

Correct answer: They allow sharing variables across multiple pipelines

Variable groups allow you to define a set of variables once and share them across multiple pipelines, ensuring consistency.

Question 35: What distinguishes a Microsoft Azure DevOps Engineer certified professional from a non-certified practitioner?

Certified professionals exclusively work in larger organizations
Certified professionals always have more years of experience
There is no meaningful difference in competency
Certification validates competency through standardized assessment against established benchmarks (Correct answer)

Correct answer: Certification validates competency through standardized assessment against established benchmarks

Question 36: What is the PRIMARY purpose of obtaining AZ-400 certification in Microsoft Azure DevOps Engineer?

To bypass educational requirements
To demonstrate verified competency and adherence to professional standards (Correct answer)
To satisfy a personal achievement goal
To guarantee employment in the field

Correct answer: To demonstrate verified competency and adherence to professional standards

Professional certification demonstrates that an individual has met established competency standards through verified assessment. It provides assurance to employers, clients, and the public that the certified professional possesses the knowledge and skills required for competent practice.

Question 37: Which configuration is recommended to prevent forked repository pull requests from accessing protected pipeline secrets in Azure Pipelines?

Store secrets in the pipeline YAML file instead of pipeline variables
Configure fork build validation to limit secret access and require manual approval for fork PRs (Correct answer)
Grant all fork contributors full repository access so they can manage their own secrets
Disable fork contributions entirely on all repositories

Correct answer: Configure fork build validation to limit secret access and require manual approval for fork PRs

Azure Pipelines fork protection settings can prevent secrets from being passed to fork PR builds and require a team member to manually approve the run before it starts.

Question 38: Which Azure service should you use to store and manage secrets, keys, and certificates referenced in Azure Pipelines?

Azure Active Directory
Azure Key Vault (Correct answer)
Azure Security Center
Azure Blob Storage

Correct answer: Azure Key Vault

Azure Key Vault is the designated service for securely storing and managing secrets, keys, and certificates that can be referenced in Azure Pipelines using variable groups or task steps.

Question 39: What is the function of the 'publishTestResults' task in Azure Pipelines CI?

Archives test logs to Azure Blob Storage
Uploads test result files so they appear in the pipeline run summary (Correct answer)
Deploys test artifacts to a test environment
Runs automated tests and reports pass/fail counts

Correct answer: Uploads test result files so they appear in the pipeline run summary

The PublishTestResults task ingests JUnit, NUnit, or TRX result files and surfaces them in the Tests tab of the pipeline run UI.

Question 40: In Azure Container Registry (ACR), which feature automatically removes untagged manifests and old image tags based on configurable retention policies?

ACR geo-replication with automatic failover cleanup
ACR retention policies and automated purge tasks (Correct answer)
ACR content trust with signature expiry enforcement
ACR network rules blocking pushes of untagged images

Correct answer: ACR retention policies and automated purge tasks

ACR retention policies and scheduled purge tasks (az acr task create with a purge command) automatically clean up untagged manifests and old tags to manage registry storage.

Question 41: What is the value of continuing education in continuous delivery for AZ-400 professionals?

It is only needed for recertification
It is primarily a social activity
It keeps professionals current with evolving standards and practices (Correct answer)
It replaces workplace experience

Correct answer: It keeps professionals current with evolving standards and practices

Continuing education ensures professionals stay current with the latest developments, standards, and best practices in their field.

Question 42: What is the key benefit of using release variables scoped to a specific stage in Azure Pipelines?

They allow stage-specific values like environment URLs without duplicating pipelines (Correct answer)
They are automatically deleted after the stage completes
They encrypt secrets automatically without a key vault
They prevent other stages from reading any pipeline variables

Correct answer: They allow stage-specific values like environment URLs without duplicating pipelines

Stage-scoped variables let you define environment-specific values (e.g., connection strings, URLs) that override pipeline-level variables only within that stage.

Question 43: A microservice Deployment in AKS needs to complete in-flight requests before a pod is terminated during rolling updates. Which pod configuration achieves this?

Configure a readiness probe with a long successThreshold
Add a preStop lifecycle hook with a sleep and set terminationGracePeriodSeconds appropriately (Correct answer)
Set the Deployment's minReadySeconds to a high value
Use a PodDisruptionBudget with maxUnavailable set to 0

Correct answer: Add a preStop lifecycle hook with a sleep and set terminationGracePeriodSeconds appropriately

A preStop sleep hook delays SIGTERM until Kubernetes removes the pod from endpoints, combined with terminationGracePeriodSeconds long enough for in-flight requests to complete.

Question 44: Which Azure DevOps feature enforces security review by requiring designated approvers before code can be merged into a protected branch?

Pipeline approval gates
Branch policies with required reviewers (Correct answer)
Work item state transitions
Azure Test Plans required test cases

Correct answer: Branch policies with required reviewers

Branch policies in Azure Repos can mandate that specified security reviewers approve a pull request before the merge is allowed, embedding human security oversight into the workflow.

Question 45: When using semantic versioning in Azure Artifacts, what does a version change from 2.3.1 to 2.4.0 indicate?

A backward-compatible new feature was added (Correct answer)
Only a bug fix was applied
A breaking API change was introduced
The package was recompiled with a newer SDK

Correct answer: A backward-compatible new feature was added

In semantic versioning (MAJOR.MINOR.PATCH), incrementing the MINOR version (2.3.x → 2.4.0) indicates new backward-compatible functionality was added.

Question 46: Which professional attribute is most valued in monitoring and feedback within the AZ-400 field?

Accountability and commitment to standards (Correct answer)
Avoiding challenging situations
Working in isolation
Prioritizing personal convenience

Correct answer: Accountability and commitment to standards

Accountability and commitment to professional standards build trust and ensure consistent, high-quality practice.

Question 47: What is the benefit of containerization in Azure DevOps deployments?

Larger deployment packages
Slower deployments
Consistent environments from development through production (Correct answer)
More manual configuration

Correct answer: Consistent environments from development through production

Containerization ensures applications run identically across all environments by packaging code with all its dependencies.

Question 48: Which framework provides Microsoft's prescriptive security best practices and control mappings specifically for Azure and multi-cloud environments?

PCI DSS v4.0
NIST SP 800-53
HIPAA Security Rule
Microsoft Cloud Security Benchmark (MCSB) (Correct answer)

Correct answer: Microsoft Cloud Security Benchmark (MCSB)

The Microsoft Cloud Security Benchmark (MCSB) maps Azure security recommendations to common industry standards (NIST, CIS, PCI) and is the primary guidance Microsoft publishes for securing Azure workloads.

Question 49: Which Azure Pipelines artifact type allows a release pipeline to consume packages published to Azure Artifacts feeds?

GitHub artifact
Azure Artifacts artifact (Correct answer)
Container artifact
Pipeline artifact

Correct answer: Azure Artifacts artifact

The Azure Artifacts artifact source type links a release pipeline to a specific feed and package, enabling versioned package consumption in deployments.

Question 50: Which Azure DevOps Board view shows work flowing through stages?

Queries
Kanban board (Correct answer)
Sprint burndown
Backlog view

Correct answer: Kanban board

The Kanban board visualizes work items flowing through different stages from new to done, showing work in progress.

Question 51: A team wants to automatically create an Azure DevOps bug when an Application Insights smart detection rule identifies a performance degradation. What is the recommended integration mechanism?

Configuring an Action Group with an Azure DevOps work item action (Correct answer)
Manually exporting smart detection results
Polling Application Insights REST API on a timer
Using a Logic App to scrape Application Insights dashboards

Correct answer: Configuring an Action Group with an Azure DevOps work item action

Action Groups support an Azure DevOps work item action that automatically creates bugs or other work item types when an alert or smart detection rule fires.

Question 52: What are Azure DevOps Dashboards used for?

Visualizing project metrics and status through configurable widgets (Correct answer)
Writing code
Running tests
Managing repositories

Correct answer: Visualizing project metrics and status through configurable widgets

Dashboards provide customizable visual displays of project metrics, build status, work item trends, and other key indicators.

Question 53: Which deployment pattern involves routing production traffic to a new version while using the production data set — but never exposing results to users until manually promoted?

Blue-green
Shadow (dark launch) deployment (Correct answer)
Canary
Recreate

Correct answer: Shadow (dark launch) deployment

Shadow deployments send real production traffic to the new version silently; responses are discarded and users see only the live service until promotion.

Question 54: A DevOps engineer wants to deploy an application to Azure App Service slots and then swap slots with zero downtime. Which task in Azure Pipelines performs the slot swap?

Azure Web App task
Azure App Service Manage (Correct answer)
Azure App Service Deploy
Azure CLI task with az webapp swap

Correct answer: Azure App Service Manage

The 'Azure App Service Manage' task includes a slot swap action that swaps staging and production slots with near-zero downtime.

Question 55: Which type of security scanning detects vulnerabilities in a running web application by simulating real attacks against it?

Dynamic Application Security Testing (DAST) (Correct answer)
Interactive Application Security Testing (IAST)
Static Application Security Testing (SAST)
Software Composition Analysis (SCA)

Correct answer: Dynamic Application Security Testing (DAST)

DAST tests a running application from the outside by simulating attacks, finding runtime vulnerabilities such as SQL injection and XSS that static analysis cannot detect.

Question 56: For incident management, your organization employs ServiceNow. <br> You're working on an Azure-based application. <br> When the application fails to authenticate, the company must create a ServiceNow ticket. <br> Which Azure Log Analytics solution is best for you?

Automation & Control
Insight & Analytics
IT Service Management Connector (ITSM) (Correct answer)
Application Insights Connector

Correct answer: IT Service Management Connector (ITSM)

The IT Service Management Connector (ITSM) in Azure Log Analytics is specifically designed to integrate Azure Monitor alerts with external ITSM solutions like ServiceNow. When an alert is triggered in Azure Monitor (e.g., due to an application authentication failure), the ITSM Connector can automatically create a corresponding incident, event, or work item in ServiceNow, streamlining your incident management process.

Question 57: Which Azure service provides a centralized registry for sharing and versioning private Bicep modules across an organization?

Azure Artifacts
Azure Container Registry (ACR) (Correct answer)
GitHub Packages
Azure Key Vault

Correct answer: Azure Container Registry (ACR)

Azure Container Registry supports Bicep module registries, allowing teams to publish and consume versioned private modules using `br:` references.

Question 58: Which tool is specifically designed to test Azure Bicep and ARM templates for compliance with organizational policies before deployment?

Terraform Sentinel
ARM Template Test Toolkit (arm-ttk) (Correct answer)
Azure Policy Compliance Scan
Azure Blueprints Validator

Correct answer: ARM Template Test Toolkit (arm-ttk)

The ARM Template Test Toolkit (arm-ttk) is a PowerShell-based testing framework that validates ARM and Bicep templates against best-practice rules.

AZ-400: Designing and Implementing Microsoft DevOps Solutions

The AZ-400 exam measures your ability to design and implement DevOps practices for version control, compliance, infrastructure as code, configuration management, build, release, and testing using Azure technologies. It is required for the Microsoft Certified: DevOps Engineer Expert certification.

Questions

35 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds