AZ-400 Infrastructure as Code 5

Question 1

Which Terraform feature allows you to define reusable infrastructure components with input variables and output values?

Accepted Answer

Terraform modules

Answer

Terraform modules are self-contained packages of Terraform configuration with defined inputs (variables) and outputs, enabling reuse across projects.

Question 2

In Azure DevOps, what is the recommended way to store Terraform state files to support team collaboration and state locking?

Accepted Answer

Store in Azure Blob Storage with state locking via Azure Storage lease mechanism

Answer

Azure Blob Storage with the `azurerm` backend provides remote state storage and uses Azure Storage blob leases to implement state locking, preventing concurrent modifications.

Question 3

What is the function of `@allowed` decorator in Azure Bicep?

Accepted Answer

Defines the set of permissible values for a parameter

Answer

The `@allowed` decorator constrains a parameter to only accept values from a specified list, causing deployment validation to fail if an unlisted value is provided.

Question 4

When implementing IaC in a CI/CD pipeline, what is the purpose of separating `terraform plan` and `terraform apply` into different pipeline stages?

Accepted Answer

It enables human review and approval of the planned changes before infrastructure is modified

Answer

Separating plan from apply allows teams to review exactly what infrastructure changes will occur and require approval gates before any modifications are made to production.

Question 5

Which Azure CLI command deploys a Bicep file to a specific resource group?

Accepted Answer

az deployment group create --resource-group myRG --template-file main.bicep

Answer

`az deployment group create` with `--template-file` accepts both `.json` ARM templates and `.bicep` files for resource group-scoped deployments.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Infrastructure as Code 5