AZ-400 Dependency Management & Infrastructure as Code 2

Question 1

Your team wants to prevent developers from using packages with known critical vulnerabilities in Azure Artifacts. Which feature should you enable?

Accepted Answer

Azure Defender for DevOps vulnerability scanning with block policies

Answer

Azure Defender for DevOps integrates with Azure Artifacts to scan packages and can enforce policies that block builds when critical vulnerabilities are detected.

Question 2

A Terraform configuration uses a module stored in a private Azure Repos Git repository. Which authentication method should be used in the module source URL?

Accepted Answer

SSH key with git SSH protocol

Answer

SSH key authentication with the git SSH protocol is the recommended approach for Terraform to access private Azure Repos Git repositories without embedding credentials.

Question 3

You need to enforce that all Bicep deployments use a specific API version for a resource type. Which Azure Policy effect achieves this at deployment time?

Accepted Answer

Deny

Answer

The Deny effect blocks deployments that do not meet the policy condition, ensuring non-compliant API versions cannot be deployed.

Question 4

Which command converts an existing ARM template to a Bicep file?

Accepted Answer

az bicep decompile --file template.json

Answer

The `az bicep decompile --file template.json` command converts an existing ARM JSON template into a Bicep file.

Question 5

A pipeline publishes a NuGet package to Azure Artifacts on every build, causing many patch versions. You want to publish only when the version in the .csproj changes. Which approach is most efficient?

Accepted Answer

Use a pipeline condition comparing the current version tag to the last published version

Answer

A pipeline condition that checks whether the current version differs from the latest published version ensures packages are only published on actual version changes.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Dependency Management & Infrastructure as Code 2