AZ-400 Monitoring, Feedback & Security 2 — Questions and Answers
Question 1: Your team wants to detect anomalies in Azure Monitor metrics automatically without writing manual threshold rules. Which feature should you enable?
- Static threshold alerts
- Dynamic threshold alerts (Correct answer)
- Log Analytics workspace queries
- Application Insights availability tests
Correct answer: Dynamic threshold alerts
Dynamic threshold alerts use machine learning to automatically adapt thresholds based on historical data patterns.
Question 2: A security scan in your pipeline flagged a hardcoded connection string in a pull request. Which Azure DevOps feature can prevent secrets from being merged automatically?
- Branch policies with required reviewers
- Credential scanning build task in the PR validation pipeline (Correct answer)
- Service connection security settings
- Azure Key Vault integration
Correct answer: Credential scanning build task in the PR validation pipeline
A credential scanning build task configured as a PR validation gate will fail the build and block merge when secrets are detected.
Question 3: You need to correlate logs from multiple Azure resources in a single query. Which tool provides a unified query language (KQL) across all those sources?
- Azure Service Health
- Azure Monitor Logs (Log Analytics) (Correct answer)
- Azure Activity Log only
- Azure Diagnostics extension
Correct answer: Azure Monitor Logs (Log Analytics)
Azure Monitor Logs with Log Analytics workspaces lets you write KQL queries across logs from multiple resources in one place.
Question 4: Which Application Insights feature allows you to define a percentage of user sessions to be recorded end-to-end for performance diagnosis?
- Live Metrics Stream
- Profiler sampling (Correct answer)
- Smart Detection
- Snapshot Debugger
Correct answer: Profiler sampling
Application Insights Profiler uses sampling to capture traces for a configurable percentage of requests to diagnose performance bottlenecks.
Question 5: Your organization must ensure container images in Azure Container Registry are free of critical CVEs before deployment. Which DevSecOps practice achieves this in the pipeline?
- Enable geo-replication on the registry
- Run Microsoft Defender for Containers vulnerability assessment as a pipeline gate (Correct answer)
- Use Azure Policy to restrict registry regions
- Enable content trust with Notary v2
Correct answer: Run Microsoft Defender for Containers vulnerability assessment as a pipeline gate
Microsoft Defender for Containers provides vulnerability assessment that can be integrated as a pipeline gate to block images with critical CVEs.
Question 6: A team needs work item feedback from stakeholders who cannot access Azure DevOps. Which feature lets external users submit feedback through a link?
- Azure Boards email notifications
- Test & Feedback extension with a stakeholder access link (Correct answer)
- Azure DevOps public project guest access
- Microsoft Forms integration
Correct answer: Test & Feedback extension with a stakeholder access link
The Test & Feedback browser extension allows stakeholders to capture and submit feedback via a shared link without needing a full Azure DevOps license.
Question 7: You want to track the mean time to restore (MTTR) for production incidents. Which Azure DevOps capability directly surfaces this DORA metric?
- Release pipeline duration reports
- Azure DevOps Analytics DORA metrics report (Correct answer)
- Application Insights failure rate dashboard
- Azure Monitor alert history
Correct answer: Azure DevOps Analytics DORA metrics report
The DORA metrics report in Azure DevOps Analytics provides out-of-the-box tracking of deployment frequency, lead time, change failure rate, and MTTR.
AZ-400 Monitoring, Feedback & Security 2
Your team wants to detect anomalies in Azure Monitor metrics automatically without writing manual threshold rules.
Which feature should you enable?