AZ-400 Compliance & Governance

Question 1

Which Azure DevOps feature allows administrators to enforce code review requirements before merging to protected branches?

Accepted Answer

Branch policies

Answer

Pipeline templates

Answer

Work item tracking

Answer

Release gates

Question 2

What is the primary purpose of Azure Policy in a DevOps governance model?

Accepted Answer

To enforce organizational standards and assess compliance at scale

Answer

To monitor application performance metrics

Answer

To manage CI/CD pipeline configurations centrally

Answer

To track code changes across repositories

Question 3

Which Azure service provides a centralized hub for applying governance controls including policies, role assignments, and resource templates as a repeatable package?

Accepted Answer

Azure Blueprints

Answer

Azure Monitor

Answer

Azure Security Center

Answer

Azure DevTest Labs

Question 4

In Azure DevOps, which feature provides an immutable audit log of all actions performed within an organization?

Accepted Answer

Audit Logs

Answer

Analytics views

Answer

Pipeline history

Answer

Work item history

Question 5

What is the purpose of 'Environment Approvals and Checks' in Azure Pipelines?

Accepted Answer

To require human approval or automated validation before deployments proceed to an environment

Answer

To automate deployment rollbacks when failures occur

Answer

To configure auto-scaling rules for deployment targets

Answer

To set up monitoring alerts for deployment environments

Question 6

Which Azure feature allows organizations to restrict which Azure regions resources can be deployed to for data residency compliance?

Accepted Answer

Azure Policy with the Allowed Locations definition

Answer

Azure Resource Locks

Answer

Azure RBAC role assignments

Answer

Azure Resource Groups

Question 7

What is the role of Service Connections in Azure DevOps from a governance perspective?

Accepted Answer

They securely store credentials for external services, limiting direct credential exposure in pipeline code

Answer

They provide direct SSH access to production servers

Answer

They define network connectivity rules between Azure services

Answer

They configure DNS settings for deployed applications