AZ-400 Security and Compliance 2

Question 1

What does the OWASP Top 10 represent in the context of application security?

Accepted Answer

A list of the 10 most critical web application security risks

Answer

The 10 most popular DevOps toolchains

Answer

The 10 Azure compliance certification categories

Answer

The 10 most expensive security breach incidents

Question 2

In Azure Pipelines, what is the recommended way to prevent a secret variable's value from appearing in pipeline logs?

Accepted Answer

Mark the variable as secret in the pipeline variable settings

Answer

Encrypt the entire pipeline YAML file with Azure Key Vault

Answer

Store the secret in a plain-text config file committed to the repo

Answer

Prepend an underscore to the variable name

Question 3

Which Microsoft security product integrates with Azure DevOps repositories to provide code scanning, secret scanning, and dependency review?

Accepted Answer

GitHub Advanced Security

Answer

Microsoft Defender for Cloud

Answer

Microsoft Sentinel

Answer

Azure Security Center Classic

Question 4

What is the purpose of a security gate configured in an Azure DevOps release pipeline?

Accepted Answer

To automatically pause or reject releases that fail security compliance checks

Answer

To block deployments during maintenance windows only

Answer

To encrypt all artifacts during transit between stages

Answer

To authenticate end-users accessing the deployed application

Question 5

Which Azure service provides unified security posture management and gives resources a 'Secure Score' to prioritize security improvements?

Accepted Answer

Microsoft Defender for Cloud

Answer

Azure Monitor

Answer

Microsoft Sentinel

Answer

Azure Information Protection

Question 6

What does the principle of least privilege require when configuring service connections and pipeline permissions in Azure DevOps?

Accepted Answer

Granting only the minimum permissions necessary to perform the required tasks

Answer

Granting pipelines owner-level access for simplicity

Answer

Sharing a single high-privilege service account across all projects

Answer

Rotating passwords every 90 days regardless of permission scope

Question 7

Which Azure DevOps settings allow administrators to restrict which users can queue builds, manage environments, and access pipeline secrets?

Accepted Answer

Pipeline permissions and environment security settings

Answer

Azure Active Directory conditional access policies

Answer

Work item area path restrictions

Answer

Repository default branch settings