AZ-400 Dependency Management 5

Question 1

Your build pipeline restores NuGet packages but you want to ensure the resolved versions exactly match the checked-in packages.lock.json. Which dotnet CLI flag enforces this?

Accepted Answer

--locked-mode

Answer

'dotnet restore --locked-mode' fails the restore if the lock file is out of date or if the resolved packages don't match the lock file, ensuring reproducible builds.

Question 2

A package published to Azure Artifacts is found to be malicious. What is the fastest way to prevent it from being installed by any team member?

Accepted Answer

Delete the specific package version from the feed

Answer

Deleting the specific package version from the Azure Artifacts feed immediately prevents any new installs of that version while leaving all other packages unaffected.

Question 3

Which Go module command downloads all dependencies listed in go.mod and updates go.sum with their cryptographic hashes?

Accepted Answer

go mod download

Answer

'go mod download' downloads all modules in go.mod to the local cache and verifies/updates go.sum with their expected cryptographic checksums.

Question 4

Your organization wants to use Azure Artifacts as a universal package registry for binaries that are not language-specific (e.g., compiled CLI tools). Which package type should you use?

Accepted Answer

Universal Packages

Answer

Azure Artifacts Universal Packages support any file type and size, making them ideal for distributing compiled binaries, scripts, or other non-language-specific artifacts.

Question 5

A security policy requires that all packages in Azure Artifacts feeds must originate from approved upstream sources only. Which setting enforces this at the feed level?

Accepted Answer

Set 'upstream sources' to include only approved registries and block direct publish from unapproved sources

Answer

Configuring upstream sources to include only approved registries and restricting direct publish permissions ensures all packages flow through vetted sources.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Dependency Management 5