AZ-400 Monitoring, Feedback & Security 5

Question 1

Which Azure DevOps feature allows teams to define automated gates that query external monitoring systems before a release proceeds to the next stage?

Accepted Answer

Release pipeline deployment gates

Answer

Release pipeline deployment gates periodically query external systems (e.g., Azure Monitor, Application Insights) and block progression until success criteria are met.

Question 2

Your organization must prove that all changes to production infrastructure are traceable to an approved work item. Which combination of controls achieves this?

Accepted Answer

Require linked work items in branch policies and enable audit logging in Azure DevOps

Answer

Requiring linked work items on PRs and enabling Azure DevOps audit logs creates an auditable trail from work item approval through to production deployment.

Question 3

An Application Insights Snapshot Debugger capture shows a NullReferenceException in production. What does this feature provide that standard logging does not?

Accepted Answer

A full memory snapshot including local variable values at the point of the exception

Answer

Snapshot Debugger captures the full application state including local variables and heap data at the exact point of an exception, not just a stack trace.

Question 4

Your team wants to measure change failure rate as a DORA metric. What does a 'failed change' mean in this context?

Accepted Answer

A deployment that results in a degraded service or requires a hotfix, rollback, or patch

Answer

DORA defines change failure rate as the percentage of deployments causing a service degradation or requiring remediation such as a rollback or hotfix.

Question 5

A compliance requirement mandates that all Azure DevOps pipeline runs are logged and cannot be deleted. Which Azure service fulfills this immutable audit requirement?

Accepted Answer

Azure Monitor Diagnostic Settings sent to a storage account with immutable blob storage policy

Answer

Routing pipeline audit logs to Azure Blob Storage with an immutable WORM (Write Once, Read Many) policy ensures logs cannot be deleted or altered.

AZ-400 Practice Test

AZ-400 Practice Test

AZ-400 Monitoring, Feedback & Security 5