AZ-400 Compliance & Governance 2

Question 1

Which Azure Pipelines feature allows platform teams to define reusable, standardized pipeline definitions that other teams must extend from to enforce organizational compliance?

Accepted Answer

Pipeline templates

Answer

Pipeline templates allow organizations to define reusable, standardized pipeline stages or jobs that teams must use, enforcing consistent security and compliance controls across projects.

Question 2

In the context of AZ-400, what does 'Shift Left' security mean in a DevOps pipeline?

Accepted Answer

Integrating security testing and checks earlier in the development lifecycle, starting at coding and CI

Answer

'Shift Left' security means introducing security testing and vulnerability scanning as early as possible — during coding and CI — rather than only validating security at the end of the pipeline.

Question 3

Which Azure DevOps feature allows teams to require specific external validation checks (such as SonarQube or security scans) to pass before a pull request can be completed?

Accepted Answer

Branch policies with status checks

Answer

Branch policies with status checks allow teams to require external tools to report a passing status before a PR can be merged, enforcing quality and compliance gates.

Question 4

What is the purpose of 'Protected Resources' in Azure Pipelines?

Accepted Answer

To control which pipelines are authorized to use sensitive resources like environments and service connections

Answer

Protected Resources allow administrators to control which specific pipelines are authorized to use sensitive resources like environments, service connections, agent pools, and variable groups.

Question 5

In Azure DevOps, where would you configure mandatory human approvals before deploying to a production environment in a YAML pipeline?

Accepted Answer

In the Environment settings under Approvals and Checks

Answer

Production deployment approvals are configured in the Environment settings within Azure Pipelines under 'Approvals and Checks,' where specific approvers can be assigned per environment.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Compliance & Governance 2