AZ-400 Compliance & Governance 2

Question 1

Which Azure Pipelines feature allows platform teams to define reusable, standardized pipeline definitions that other teams must extend from to enforce organizational compliance?

Accepted Answer

Pipeline templates

Answer

Pipeline artifacts

Answer

Pipeline triggers

Answer

Pipeline variables

Question 2

In the context of AZ-400, what does 'Shift Left' security mean in a DevOps pipeline?

Accepted Answer

Integrating security testing and checks earlier in the development lifecycle, starting at coding and CI

Answer

Moving security staff physically closer to development teams

Answer

Applying security controls only to the leftmost pipeline stages

Answer

Shifting security budget allocation from operations to development

Question 3

Which Azure DevOps feature allows teams to require specific external validation checks (such as SonarQube or security scans) to pass before a pull request can be completed?

Accepted Answer

Branch policies with status checks

Answer

Work item states

Answer

Release gates

Answer

Deployment slots

Question 4

What is the purpose of 'Protected Resources' in Azure Pipelines?

Accepted Answer

To control which pipelines are authorized to use sensitive resources like environments and service connections

Answer

To encrypt pipeline variable values at rest

Answer

To prevent unauthorized users from viewing pipeline logs

Answer

To restrict how frequently a pipeline can be triggered

Question 5

In Azure DevOps, where would you configure mandatory human approvals before deploying to a production environment in a YAML pipeline?

Accepted Answer

In the Environment settings under Approvals and Checks

Answer

In the pipeline YAML file's trigger section

Answer

In the repository branch policies

Answer

In the project's security settings under Permissions

Question 6

Which Azure service provides a Secure Score and a regulatory compliance dashboard to help organizations track adherence to standards like PCI DSS and ISO 27001?

Accepted Answer

Microsoft Defender for Cloud

Answer

Azure Advisor

Answer

Azure Monitor

Answer

Azure Service Health

Question 7

What does Azure DevOps' SOC 2 Type II attestation primarily provide to enterprise customers?

Accepted Answer

Third-party assurance that Azure DevOps service controls meet security, availability, and confidentiality criteria

Answer

Proof that individual customer pipelines meet security requirements

Answer

Verification that all customer code repositories are encrypted

Answer

Certification that Azure networks are secure