AZ-400 Dependency Management & Infrastructure as Code 4

Question 1

A security audit finds that Terraform state files stored in Azure Blob Storage contain sensitive data in plaintext. What is the recommended mitigation?

Accepted Answer

Enable Azure Storage encryption with customer-managed keys and restrict access via RBAC

Answer

Enabling Azure Storage encryption with customer-managed keys ensures state data is encrypted at rest, while RBAC restricts who can read the state file.

Question 2

You need to share a private npm package across multiple Azure DevOps projects within the same organization. What is the most efficient approach?

Accepted Answer

Use a single organization-scoped Azure Artifacts feed with project visibility settings

Answer

An organization-scoped Azure Artifacts feed can be shared across all projects in the organization, eliminating redundant feeds and publish steps.

Question 3

What is the purpose of the `dependsOn` property in an Azure Resource Manager (ARM) template?

Accepted Answer

It defines explicit resource deployment ordering when implicit ordering cannot be determined

Answer

`dependsOn` explicitly declares that one resource must be fully deployed before another begins, used when ARM cannot infer the dependency from template references.

Question 4

A Terraform plan shows that a resource will be destroyed and recreated due to a change. Which Terraform meta-argument can prevent recreation by updating in-place if the provider supports it?

Accepted Answer

ignore_changes

Answer

`ignore_changes` tells Terraform to disregard changes to specified attributes, preventing a destroy-and-recreate cycle when those attributes change outside of Terraform.

Question 5

Which Azure DevOps gate or check would you configure to pause a pipeline stage until a work item linked to the release is in 'Resolved' state?

Accepted Answer

Query work items gate

Answer

The Query Work Items gate runs an Azure Boards query and only allows the pipeline to proceed if the query results meet specified criteria, such as all linked items being Resolved.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Dependency Management & Infrastructure as Code 4