AZ-400 Infrastructure as Code 4

Question 1

What is the purpose of Terraform's `lifecycle` block with `prevent_destroy = true`?

Accepted Answer

Causes Terraform to throw an error if a plan would destroy the resource

Answer

`prevent_destroy = true` makes Terraform fail with an error if any plan includes destruction of that resource, acting as a safety guard for critical infrastructure.

Question 2

In Azure Bicep, how do you reference an output from a deployed module within the same Bicep file?

Accepted Answer

Using `moduleName.outputs.outputName`

Answer

After deploying a module with a symbolic name, you access its outputs using the dot notation `moduleName.outputs.outputName`.

Question 3

Which Azure service provides a centralized registry for sharing and versioning private Bicep modules across an organization?

Accepted Answer

Azure Container Registry (ACR)

Answer

Azure Container Registry supports Bicep module registries, allowing teams to publish and consume versioned private modules using `br:` references.

Question 4

What happens when you run `terraform apply` and the actual Azure resource state differs from the Terraform state file (state drift)?

Accepted Answer

Terraform detects the drift, shows the differences in the plan, and corrects it on apply

Answer

Terraform refreshes the state before planning, detects any drift between real infrastructure and the state file, and includes corrections in the apply plan.

Question 5

In an Azure Pipelines YAML file, what is the effect of setting `condition: always()` on a pipeline step?

Accepted Answer

The step runs even if previous steps failed or were cancelled

Answer

`condition: always()` causes the step to execute regardless of whether previous steps succeeded, failed, or were cancelled—useful for cleanup steps.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Infrastructure as Code 4