AZ-400 Continuous Delivery 4

Question 1

Your organization requires that only signed container images can be deployed to production AKS clusters. Which Azure service enforces this policy?

Accepted Answer

Azure Container Registry content trust

Answer

ACR content trust uses Docker Notary to sign images, and AKS can be configured to reject unsigned images at admission.

Question 2

A YAML pipeline stage depends on two other stages completing successfully. How should this dependency be declared?

Accepted Answer

List both stage names under 'dependsOn'

Answer

The 'dependsOn' keyword in a stage definition accepts a list of stage names that must complete before this stage runs.

Question 3

Which feature of Azure Pipelines environments enables you to restrict which branches can deploy to a protected environment like production?

Accepted Answer

Branch control check

Answer

The branch control check on an environment allows deployments only from pipelines running on specified branches (e.g., 'main').

Question 4

When using Azure Pipelines with GitHub repositories, which trigger type initiates a CD pipeline run when a pull request is merged to main?

Accepted Answer

CI trigger on the main branch

Answer

A CI trigger set on the 'main' branch fires when commits are pushed to main, which is the result of a merged pull request.

Question 5

A release pipeline must deploy a database schema migration before deploying the application. How should this sequencing be enforced?

Accepted Answer

Place the database migration in a prior stage with 'dependsOn' on the app stage

Answer

Placing the migration in a separate earlier stage and declaring 'dependsOn' ensures the migration completes before the application stage starts.

AZ-400 Practice Test