AZ-400 Monitoring, Feedback & Security 2

Question 1

Your team wants to detect anomalies in Azure Monitor metrics automatically without writing manual threshold rules. Which feature should you enable?

Accepted Answer

Dynamic threshold alerts

Answer

Dynamic threshold alerts use machine learning to automatically adapt thresholds based on historical data patterns.

Question 2

A security scan in your pipeline flagged a hardcoded connection string in a pull request. Which Azure DevOps feature can prevent secrets from being merged automatically?

Accepted Answer

Credential scanning build task in the PR validation pipeline

Answer

A credential scanning build task configured as a PR validation gate will fail the build and block merge when secrets are detected.

Question 3

You need to correlate logs from multiple Azure resources in a single query. Which tool provides a unified query language (KQL) across all those sources?

Accepted Answer

Azure Monitor Logs (Log Analytics)

Answer

Azure Monitor Logs with Log Analytics workspaces lets you write KQL queries across logs from multiple resources in one place.

Question 4

Which Application Insights feature allows you to define a percentage of user sessions to be recorded end-to-end for performance diagnosis?

Accepted Answer

Profiler sampling

Answer

Application Insights Profiler uses sampling to capture traces for a configurable percentage of requests to diagnose performance bottlenecks.

Question 5

Your organization must ensure container images in Azure Container Registry are free of critical CVEs before deployment. Which DevSecOps practice achieves this in the pipeline?

Accepted Answer

Run Microsoft Defender for Containers vulnerability assessment as a pipeline gate

Answer

Microsoft Defender for Containers provides vulnerability assessment that can be integrated as a pipeline gate to block images with critical CVEs.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Monitoring, Feedback & Security 2