Microsoft AZ-400 Practice Test 62
Question 610
A Microsoft DevOps team is addressing: Two production deployments target the same App Service slot simultaneously and the earlier one overwrites the newer release. Which TWO complementary actions should be taken? Select TWO answers.
- Review pipeline execution settings, resource locks and deployment timestamps.
- Optimize test partitions and concurrency to fit approved parallel job capacity.
- Configure appropriate exclusive locks or deployment concurrency controls per environment.
- Include explicit succeeded dependencies in the custom promotion condition.
- Deploy a governed self-hosted Azure Pipelines agent with controlled network connectivity.
Explanation
Correct Answers
A:Review pipeline execution settings, resource locks and deployment timestamps. This supplies the diagnosis/evidence needed for the scenario. Its complementary step is: Configure appropriate exclusive locks or deployment concurrency controls per environment. Together they address: Concurrent deployments require serialization or controlled exclusive access to shared environments.
C:Configure appropriate exclusive locks or deployment concurrency controls per environment. This supplies the controlled implementation needed for the scenario. Its complementary step is: Review pipeline execution settings, resource locks and deployment timestamps. Together they address: Concurrent deployments require serialization or controlled exclusive access to shared environments.
Incorrect Answers
B:Optimize test partitions and concurrency to fit approved parallel job capacity. This concerns a different DevOps situation: A large repository launches 100 independent test jobs though the organization owns only 10 paid parallel agent slots. This case instead requires both a targeted investigation (Review pipeline execution settings, resource locks and deployment timestamps.) and a controlled change (Configure appropriate exclusive locks or deployment concurrency controls per environment.).
D:Include explicit succeeded dependencies in the custom promotion condition. This concerns a different DevOps situation: A post-deployment verification job runs even when staging tests fail because its condition overrides the default dependency check. This case instead requires both a targeted investigation (Review pipeline execution settings, resource locks and deployment timestamps.) and a controlled change (Configure appropriate exclusive locks or deployment concurrency controls per environment.).
E:Deploy a governed self-hosted Azure Pipelines agent with controlled network connectivity. This concerns a different DevOps situation: A build must reach private package infrastructure inaccessible from Microsoft-hosted agents. This case instead requires both a targeted investigation (Review pipeline execution settings, resource locks and deployment timestamps.) and a controlled change (Configure appropriate exclusive locks or deployment concurrency controls per environment.).
Question 611
After implementing the change, the team verifies: Pipeline duration grows because a flaky test is retried eight times but the dashboard still shows every build as green. Which result would BEST demonstrate that the issue is corrected?
- A representative debug run completes without exposing a valid credential.
- Changing the dependency lockfile triggers a new compatible cache.
- A representative flaky test appears as a reliability issue despite eventual job success.
- An equivalent deployment passes all required approval and functional checks after migration.
Explanation
Correct Answer
C:A representative flaky test appears as a reliability issue despite eventual job success. This measures the actual expected outcome, rather than trusting only a configuration flag. Implemented action: Track flaky test metrics and assign root-cause fixes rather than unconditional retries. Pipeline health should surface flaky failures and retry overhead separately from success.
Incorrect Answers
A:A representative debug run completes without exposing a valid credential. This would address a different situation, such as: Verbose diagnostic logging starts printing deployment tokens after a new task version update. In the present case, the most directly relevant verification is: A representative flaky test appears as a reliability issue despite eventual job success. The crucial distinction is: Pipeline health should surface flaky failures and retry overhead separately from success.
B:Changing the dependency lockfile triggers a new compatible cache. This would address a different situation, such as: A pipeline caches packages under one global key even after lockfile changes, causing inconsistent builds. In the present case, the most directly relevant verification is: A representative flaky test appears as a reliability issue despite eventual job success. The crucial distinction is: Pipeline health should surface flaky failures and retry overhead separately from success.
D:An equivalent deployment passes all required approval and functional checks after migration. This would address a different situation, such as: A legacy classic Azure Release pipeline hides deployment steps in the UI and new teams cannot peer-review changes. In the present case, the most directly relevant verification is: A representative flaky test appears as a reliability issue despite eventual job success. The crucial distinction is: Pipeline health should surface flaky failures and retry overhead separately from success.
Question 612
An Azure DevOps engineering team evaluates this condition: A legacy release service principal secret is set to expire tomorrow and pipeline maintenance has no automated credential lifecycle. Which DevOps principle BEST explains the underlying weakness?
- Deployment identities should support safe rotation or federation without release downtime.
- Pipeline resource references should bind to intended verified source and build run.
- Capacity changes should be justified by measured critical-path improvements and cost.
- Pipeline operational health needs assigned responders and maintained notification routing.
Explanation
Correct Answer
A:Deployment identities should support safe rotation or federation without release downtime. This principle identifies the risk or delivery weakness in the case. Relevant evidence: Review service connection mode, secret expiration, Azure RBAC and trust configuration. An appropriate controlled response is: Migrate to workload identity federation or controlled rotation with alerting.
Incorrect Answers
B:Pipeline resource references should bind to intended verified source and build run. This would address a different situation, such as: A production stage sometimes downloads an artifact from a different branch due to an ambiguous pipeline resource definition. In the present case, the most directly relevant principle is: Deployment identities should support safe rotation or federation without release downtime. The crucial distinction is: Deployment identities should support safe rotation or federation without release downtime.
C:Capacity changes should be justified by measured critical-path improvements and cost. This would address a different situation, such as: A pipeline team wants 50 more hosted agent slots even though bottlenecks are serial manual approvals and limited integration environments. In the present case, the most directly relevant principle is: Deployment identities should support safe rotation or federation without release downtime. The crucial distinction is: Deployment identities should support safe rotation or federation without release downtime.
D:Pipeline operational health needs assigned responders and maintained notification routing. This would address a different situation, such as: A pipeline reports repeated deployment failures but no team receives notifications because the original owner left the company. In the present case, the most directly relevant principle is: Deployment identities should support safe rotation or federation without release downtime. The crucial distinction is: Deployment identities should support safe rotation or federation without release downtime.
Question 613
An Azure DevOps engineering team evaluates this condition: An organization merges changes only at the end of a six-week release branch, creating hundreds of conflicts. Which DevOps principle BEST explains the underlying weakness?
- Maintenance branching should match support windows and preserve immutable release history.
- Branch conventions and immutable release references should uniquely identify deployable versions.
- Every deployable branch needs controls proportionate to production impact.
- Frequent integration into a protected trunk reduces accumulated merge risk.
Explanation
Correct Answer
D:Frequent integration into a protected trunk reduces accumulated merge risk. This principle identifies the risk or delivery weakness in the case. Relevant evidence: Inspect merge cadence, branch age, conflict history and required checks. An appropriate controlled response is: Adopt short-lived feature branches with required tests and frequent mainline integration.
Incorrect Answers
A:Maintenance branching should match support windows and preserve immutable release history. This would address a different situation, such as: Old supported product versions receive urgent fixes but the team deletes prior release references after every mainline update. In the present case, the most directly relevant principle is: Frequent integration into a protected trunk reduces accumulated merge risk. The crucial distinction is: Frequent integration into a protected trunk reduces accumulated merge risk.
B:Branch conventions and immutable release references should uniquely identify deployable versions. This would address a different situation, such as: Teams use dozens of release branches with ambiguous names, and automation often deploys the wrong branch. In the present case, the most directly relevant principle is: Frequent integration into a protected trunk reduces accumulated merge risk. The crucial distinction is: Frequent integration into a protected trunk reduces accumulated merge risk.
C:Every deployable branch needs controls proportionate to production impact. This would address a different situation, such as: A company protects main but permits unrestricted direct commits to an unprotected release branch deployed to production. In the present case, the most directly relevant principle is: Frequent integration into a protected trunk reduces accumulated merge risk. The crucial distinction is: Frequent integration into a protected trunk reduces accumulated merge risk.
Question 614
After implementing the change, the team verifies: A microservice changes a JSON field name while a downstream consumer still relies on the old name. Which result would BEST demonstrate that the issue is corrected?
- Both app versions write correctly during transition and a rollback stays feasible.
- A deliberately unresolved critical issue prevents production promotion until authorized disposition.
- An intentionally failed migration prevents downstream integration tests from running.
- An incompatible field removal fails pipeline validation before production use.
Explanation
Correct Answer
D:An incompatible field removal fails pipeline validation before production use. This measures the actual expected outcome, rather than trusting only a configuration flag. Implemented action: Run automated producer-consumer contract checks with backward-compatible staging. Consumer contract tests should detect interface-breaking changes before coordinated release.
Incorrect Answers
A:Both app versions write correctly during transition and a rollback stays feasible. This would address a different situation, such as: A release adds a non-null column while old and new application versions temporarily operate together. In the present case, the most directly relevant verification is: An incompatible field removal fails pipeline validation before production use. The crucial distinction is: Consumer contract tests should detect interface-breaking changes before coordinated release.
B:A deliberately unresolved critical issue prevents production promotion until authorized disposition. This would address a different situation, such as: A deployment receives approval even when a required penetration-test issue remains unresolved and unaccepted. In the present case, the most directly relevant verification is: An incompatible field removal fails pipeline validation before production use. The crucial distinction is: Consumer contract tests should detect interface-breaking changes before coordinated release.
C:An intentionally failed migration prevents downstream integration tests from running. This would address a different situation, such as: A pipeline starts integration tests before deploying the dependent database migration, causing intermittent failures. In the present case, the most directly relevant verification is: An incompatible field removal fails pipeline validation before production use. The crucial distinction is: Consumer contract tests should detect interface-breaking changes before coordinated release.
Question 615
The DevOps team must resolve this situation: An application slows while CPU is low but disk I/O is saturated; operators conclude more vCPUs are needed. Which engineering action is MOST appropriate?
- Create a missing-heartbeat query or alert with appropriate response ownership.
- Remediate the verified disk bottleneck and validate end-to-end service performance.
- Join relevant telemetry tables by operation identifiers to isolate failed dependency calls.
- Add release annotations and traceable version properties to Application Insights.
Explanation
Correct Answer
B:Remediate the verified disk bottleneck and validate end-to-end service performance. This action addresses the specific failure or requirement and preserves delivery controls. Validation criterion: A representative test improves disk latency and request completion without pointless CPU scaling. Performance diagnoses must compare the actual constrained resource across CPU, memory, disk and network.
Incorrect Answers
A:Create a missing-heartbeat query or alert with appropriate response ownership. This would address a different situation, such as: A VM's monitoring dashboard reports no errors because its telemetry agent stopped sending data three days ago. In the present case, the most directly relevant engineering action is: Remediate the verified disk bottleneck and validate end-to-end service performance. The crucial distinction is: Performance diagnoses must compare the actual constrained resource across CPU, memory, disk and network.
C:Join relevant telemetry tables by operation identifiers to isolate failed dependency calls. This would address a different situation, such as: Application requests and dependency spans share an operation ID but engineers compare two unrelated totals instead of correlating affected calls. In the present case, the most directly relevant engineering action is: Remediate the verified disk bottleneck and validate end-to-end service performance. The crucial distinction is: Performance diagnoses must compare the actual constrained resource across CPU, memory, disk and network.
D:Add release annotations and traceable version properties to Application Insights. This would address a different situation, such as: A new release increases HTTP 500s, but the team cannot match failures to deployment timestamps. In the present case, the most directly relevant engineering action is: Remediate the verified disk bottleneck and validate end-to-end service performance. The crucial distinction is: Performance diagnoses must compare the actual constrained resource across CPU, memory, disk and network.
Question 616
Before changing the pipeline or service, engineers find: A pipeline runs quickly on an agent but waits 70 minutes in queue due to a limited self-hosted pool. Which evidence should the engineer inspect FIRST?
- Review queue latency, pool capacity, concurrent jobs and utilization.
- Inspect release references, retention rules, ACR manifests and recovery requirements.
- Inspect retry counts, per-test historical failure rates, queue and execution time.
- Inventory classic tasks, approvals, variables, environments and artifact inputs.
Explanation
Correct Answer
A:Review queue latency, pool capacity, concurrent jobs and utilization. This directly checks the uncertain behavior or control before changing production. Pipeline telemetry should distinguish agent scarcity from actual code execution cost. The resulting targeted action is: Right-size authorized agent capacity and prioritize critical release jobs.
Incorrect Answers
B:Inspect release references, retention rules, ACR manifests and recovery requirements. This would address a different situation, such as: A cost-reduction retention rule deletes the last known-good container image before the rollback period ends. In the present case, the most directly relevant evidence is: Review queue latency, pool capacity, concurrent jobs and utilization. The crucial distinction is: Pipeline telemetry should distinguish agent scarcity from actual code execution cost.
C:Inspect retry counts, per-test historical failure rates, queue and execution time. This would address a different situation, such as: Pipeline duration grows because a flaky test is retried eight times but the dashboard still shows every build as green. In the present case, the most directly relevant evidence is: Review queue latency, pool capacity, concurrent jobs and utilization. The crucial distinction is: Pipeline telemetry should distinguish agent scarcity from actual code execution cost.
D:Inventory classic tasks, approvals, variables, environments and artifact inputs. This would address a different situation, such as: A legacy classic Azure Release pipeline hides deployment steps in the UI and new teams cannot peer-review changes. In the present case, the most directly relevant evidence is: Review queue latency, pool capacity, concurrent jobs and utilization. The crucial distinction is: Pipeline telemetry should distinguish agent scarcity from actual code execution cost.
Question 617
The DevOps team must resolve this situation: A developer needs one service from a huge monorepo, but each checkout transfers every unrelated project and binary. Which engineering action is MOST appropriate?
- Stop tracking generated outputs and plan reviewed history cleanup with team coordination.
- Configure supported sparse checkout or Scalar/partial clone for constrained workflows.
- Publish common code as a reviewed versioned package or managed shared component.
- Protect release tags and record immutable commit or artifact digests in release manifests.
Explanation
Correct Answer
B:Configure supported sparse checkout or Scalar/partial clone for constrained workflows. This action addresses the specific failure or requirement and preserves delivery controls. Validation criterion: The target service builds correctly with only its required repository content. Large repositories can use sparse checkout and partial clone to reduce unnecessary working data.
Incorrect Answers
A:Stop tracking generated outputs and plan reviewed history cleanup with team coordination. This would address a different situation, such as: A project accidentally committed generated build outputs and its repository history grew by several gigabytes. In the present case, the most directly relevant engineering action is: Configure supported sparse checkout or Scalar/partial clone for constrained workflows. The crucial distinction is: Large repositories can use sparse checkout and partial clone to reduce unnecessary working data.
C:Publish common code as a reviewed versioned package or managed shared component. This would address a different situation, such as: Two separate repositories copy and edit a common authentication library independently, producing inconsistent fixes. In the present case, the most directly relevant engineering action is: Configure supported sparse checkout or Scalar/partial clone for constrained workflows. The crucial distinction is: Large repositories can use sparse checkout and partial clone to reduce unnecessary working data.
D:Protect release tags and record immutable commit or artifact digests in release manifests. This would address a different situation, such as: A release build uses a mutable tag name that engineers can retarget to a different unreviewed commit. In the present case, the most directly relevant engineering action is: Configure supported sparse checkout or Scalar/partial clone for constrained workflows. The crucial distinction is: Large repositories can use sparse checkout and partial clone to reduce unnecessary working data.
Question 618
An engineering design review identifies: Old supported product versions receive urgent fixes but the team deletes prior release references after every mainline update. Which shortcut should the team MOST specifically avoid for this case?
- Add reviewer names as a comment but leave enforcement disabled.
- Delete all release tags as soon as a newer major version is published.
- Deploy from whichever branch was updated most recently.
- Make force push the default method for updating every shared release branch.
Explanation
Correct Answer
B:Delete all release tags as soon as a newer major version is published. This shortcut directly undermines the stated control or workflow. A safer action is: Maintain controlled support branches with signed or protected release tags and planned retirement. Explanation: Maintenance branching should match support windows and preserve immutable release history.
Incorrect Answers
A:Add reviewer names as a comment but leave enforcement disabled. This would address a different situation, such as: Payment processing files require security review, but code owner review is only advisory. In the present case, the most directly relevant unsafe shortcut is: Delete all release tags as soon as a newer major version is published. The crucial distinction is: Maintenance branching should match support windows and preserve immutable release history.
C:Deploy from whichever branch was updated most recently. This would address a different situation, such as: Teams use dozens of release branches with ambiguous names, and automation often deploys the wrong branch. In the present case, the most directly relevant unsafe shortcut is: Delete all release tags as soon as a newer major version is published. The crucial distinction is: Maintenance branching should match support windows and preserve immutable release history.
D:Make force push the default method for updating every shared release branch. This would address a different situation, such as: A maintainer rebases a shared release branch and force pushes, invalidating teammates' commit references. In the present case, the most directly relevant unsafe shortcut is: Delete all release tags as soon as a newer major version is published. The crucial distinction is: Maintenance branching should match support windows and preserve immutable release history.
Question 619
An Azure DevOps engineering team evaluates this condition: A security vulnerability needs same-day correction but the organization’s normal three-week release train blocks all fixes. Which DevOps principle BEST explains the underlying weakness?
- Blue-green rollout must preserve shared database compatibility during transition.
- Feature flag control separates deployment from governed feature activation.
- A governed hotfix path can accelerate release while retaining minimum essential quality and traceability.
- Deployment slots support staged verification and controlled production swaps where supported.
Explanation
Correct Answer
C:A governed hotfix path can accelerate release while retaining minimum essential quality and traceability. This principle identifies the risk or delivery weakness in the case. Relevant evidence: Inspect incident severity, release branch plan, mandatory checks and approver availability. An appropriate controlled response is: Define a limited hotfix workflow with priority testing, accountable approval and later backport.
Incorrect Answers
A:Blue-green rollout must preserve shared database compatibility during transition. This would address a different situation, such as: An App Service slot swap puts new code online while old instances still write to a shared Azure SQL schema. In the present case, the most directly relevant principle is: A governed hotfix path can accelerate release while retaining minimum essential quality and traceability. The crucial distinction is: A governed hotfix path can accelerate release while retaining minimum essential quality and traceability.
B:Feature flag control separates deployment from governed feature activation. This would address a different situation, such as: A half-finished payment feature accidentally activates immediately when its code merges into main. In the present case, the most directly relevant principle is: A governed hotfix path can accelerate release while retaining minimum essential quality and traceability. The crucial distinction is: A governed hotfix path can accelerate release while retaining minimum essential quality and traceability.
D:Deployment slots support staged verification and controlled production swaps where supported. This would address a different situation, such as: A web application must deploy without interruption, but direct production updates restart every active instance. In the present case, the most directly relevant principle is: A governed hotfix path can accelerate release while retaining minimum essential quality and traceability. The crucial distinction is: A governed hotfix path can accelerate release while retaining minimum essential quality and traceability.
Question 620
Before changing the pipeline or service, engineers find: Pipeline duration grows because a flaky test is retried eight times but the dashboard still shows every build as green. Which evidence should the engineer inspect FIRST?
- Inspect retry counts, per-test historical failure rates, queue and execution time.
- Review queue latency, pool capacity, concurrent jobs and utilization.
- Inspect agent image announcement, demands, SDK versions and task compatibility.
- Inspect output variables, task logs, masking controls and newly added debug flags.
Explanation
Correct Answer
A:Inspect retry counts, per-test historical failure rates, queue and execution time. This directly checks the uncertain behavior or control before changing production. Pipeline health should surface flaky failures and retry overhead separately from success. The resulting targeted action is: Track flaky test metrics and assign root-cause fixes rather than unconditional retries.
Incorrect Answers
B:Review queue latency, pool capacity, concurrent jobs and utilization. This would address a different situation, such as: A pipeline runs quickly on an agent but waits 70 minutes in queue due to a limited self-hosted pool. In the present case, the most directly relevant evidence is: Inspect retry counts, per-test historical failure rates, queue and execution time. The crucial distinction is: Pipeline health should surface flaky failures and retry overhead separately from success.
C:Inspect agent image announcement, demands, SDK versions and task compatibility. This would address a different situation, such as: Builds fail after an Azure Pipelines hosted image update because a legacy runtime was implicitly available before. In the present case, the most directly relevant evidence is: Inspect retry counts, per-test historical failure rates, queue and execution time. The crucial distinction is: Pipeline health should surface flaky failures and retry overhead separately from success.
D:Inspect output variables, task logs, masking controls and newly added debug flags. This would address a different situation, such as: Verbose diagnostic logging starts printing deployment tokens after a new task version update. In the present case, the most directly relevant evidence is: Inspect retry counts, per-test historical failure rates, queue and execution time. The crucial distinction is: Pipeline health should surface flaky failures and retry overhead separately from success.