[2025年05月]更新のAZ-400問題集には100%厳密検証された問題と解答で合格保証もしくは全額返金 [Q116-Q139]

[2025年05月]更新のAZ-400問題集には100%厳密検証された問題と解答で合格保証もしくは全額返金

合格させるMicrosoft AZ-400試験には練習テスト問題集豪華お試しセット

試験では、クラウドネイティブアプリケーション、ハイブリッド環境、オンプレミスシステムなど、さまざまなシナリオのDevOpsプラクティスを設計および実装する機能について候補者をテストします。 Azure Devops、Azure App Service、Azure Kubernetes Service、Azure Container Instances、Azure Functions、Azure Monitorなど、さまざまなAzureツールとサービスを使用する習熟度を評価します。また、アジャイル、スクラム、かんばん、リーンなど、業界標準のDevOpsの実践とフレームワークに関する知識を評価します。

Microsoft AZ-400認定試験は、DevOpsのペースの速い世界でキャリアを前進させたい専門家にとって貴重な資格です。この試験に合格することにより、候補者は、Microsoftツールとテクノロジーを使用してDevOpsソリューションを設計および実装する際の知識とスキルを実証できます。この認定は、世界中の大手雇用主によって認識されており、専門家が混雑した雇用市場で際立っているのを助けることができます。

質問 # 116
To resolve the current technical issue, what should you do to the Register-AzureRmAutomationDscNode command?

A. Add the DefaultProfile parameter.
B. Replace the Register-AzureRmAutomationDscNode cmdlet with
Register-AzureRmAutomationScheduledRunbook
C. Add the AllowModuleOverwrite parameter.
D. Change the value of the ConfigurationMode parameter.

正解：D

解説：
Change the ConfigurationMode parameter from ApplyOnly to ApplyAndAutocorrect.
The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State Configuration (DSC) node in an Azure Automation account.
Scenario: Current Technical Issue
The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration fails to correct the configurations.
Azure Automation State Configuration nodes are registered by using the following command.

References:
https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/register-azurermautomationdscnode?vi

質問 # 117
Your company has an Azure subscription named Subscription1. Subscription1 is associated to an Azure Active Directory tenant named contoso.com.
You need to provision an Azure Kubernetes Services (AKS) cluster in Subscription1 and set the permissions for the cluster by using RBAC roles that reference the identities in contoso.com.
Which three objects should you create in sequence? To answer, move the appropriate objects from the list of objects to the answer area and arrange them in the correct order.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/azure/developer/ansible/aks-configure-rbac

質問 # 118
You have an Azure DevOps organization named Contoso and an Azure subscription. The subscription contains an Azure virtual machine scale set named VMSS1 and an Azure Standard Load Balancer named LB1. LB1 distributes incoming requests across VMSS1 instances.
You use Azure DevOps to build a web app named Appl and deploy App1 to VMSS1. App1 is accessible via HTTPS only and configured to require mutual authentication by using a client certificate.
You need to recommend a solution for implementing a health check of App1. The solution must meet the following requirements:
* Identify whether individual instances of VMSSl are eligible for an upgrade operation.
* Minimize administrative effort.
What should you include in the recommendation?

A. an Azure Load Balancer health probe
B. the Application Health extension
C. the Custom Script Extension
D. Azure Monitor autoscale

正解：B

解説：
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-health-extension#when-to-use-the-application-health-extension

質問 # 119
Your company has a project in Azure DevOps.
You plan to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The templates will reference secrets stored in Azure Key Vault.
You need to recommend a solution for accessing the secrets stored in the key vault during deployments. The solution must use the principle of least privilege.
What should you include in the recommendation? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:
Box 1: A key Vault advanced access policy

Box 2: RBAC
Management plane access control uses RBAC.
The management plane consists of operations that affect the key vault itself, such as:
* Creating or deleting a key vault.
* Getting a list of vaults in a subscription.
* Retrieving Key Vault properties (such as SKU and tags).
* Setting Key Vault access policies that control user and application access to keys and secrets.
References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-tutorial-use-key-vault

質問 # 120
You have a project in Azure DevOps.
You need to push notifications about pull requests to a Microsoft Teams channel. The solution must minimize development effort.
What should you do?

A. Use an Azure function to connect to the Azure DevOps REST API and send messages to Teams.
B. Install the Azure Repos app for teams and configure a subscription to receive notifications in the channel.
C. Install the Azure Pipelines app for Teams and configure a subscription to receive notifications in the channel.
D. Use Azure Automation to connect to the Azure DevOps REST API and send messages to Teams.

正解：C

質問 # 121
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to recommend an integration strategy for the build process of a Java application. The solution must meet the following requirements:
* The builds must access an on-premises dependency management system.
* The build outputs must be stored as Server artifacts in Azure DevOps.
* The source code must be stored in a Git repository in Azure DevOps.
Solution: Configure the build pipeline to use a Hosted VS 2017 agent pool. Include the Java Tool Installer task in the build pipeline.
Does this meet the goal?

A. Yes
B. No

正解：B

解説：
Instead use Octopus Tentacle.
References:
https://explore.emtecinc.com/blog/octopus-for-automated-deployment-in-devops-models

質問 # 122
Your company builds a multi tier web application.
>You use Azure DevOps and host the production application on Azure virtual machines.
Your team prepares an Azure Resource Manager template of the virtual machine that you mil use to test new features.
You need to create a staging environment in Azure that meets the following requirements:
* Minimizes the cost of Azure hosting
* Provisions the virtual machines automatically
* Use* the custom Azure Resource Manager template to provision the virtual machines What should you do?

A. In Azure DevOps, configure new tasks in the release pipeline to create and delete the virtual machines m Azure DevTest Labs.
B. In Azure DevOps, configure new tasks in the release pipeline to deploy to Azure Cloud Services.
C. In Azure Cloud Shell, run Azure CLI commands to create and delete the new virtual machines in a staging resource group.
D. From Azure Cloud Shell, run Azure PowerShell commands to create and delete the new virtual machines in a staging resource group.

正解：A

解説：
You can use the Azure DevTest Labs Tasks extension that's installed in Azure DevOps to easily integrate your CI/CD build-and-release pipeline with Azure DevTest Labs. The extension installs three tasks:
Create a VM
Create a custom image from a VM
Delete a VM
The process makes it easy to, for example, quickly deploy a "golden image" for a specific test task and then delete it when the test is finished.
References:
https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-integrate-ci-cd-vsts

質問 # 123
Your company has a hybrid cloud between Azure and Azure Stack.
The company uses Azure DevOps for its full CI/CD pipelines. Some applications are built by using Erlang and Hack.
You need to ensure that Erlang and Hack are supported as part of the build strategy across the hybrid cloud.
The solution must minimize management overhead.
What should you use to execute the build pipeline?

A. a Microsoft-hosted agent
B. Azure DevOps self-hosted agents on Hyper-V virtual machines
C. Azure DevOps self-hosted agents on virtual machines that run on Azure Stack
D. Azure DevOps self-hosted agents on Azure DevTest Labs virtual machines.

正解：C

解説：
Azure Stack offers virtual machines (VMs) as one type of an on-demand, scalable computing resource. You can choose a VM when you need more control over the computing environment.
References: https://docs.microsoft.com/en-us/azure/azure-stack/user/azure-stack-compute-overview

質問 # 124
How should you complete the code to initialize App Center in the mobile application? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection a worth one point.

正解：

解説：

Explanation

Scenario: Visual Studio App Center must be used to centralize the reporting of mobile application crashes and device types in use.
In order to use App Center, you need to opt in to the service(s) that you want to use, meaning by default no services are started and you will have to explicitly call each of them when starting the SDK.
Insert the following line to start the SDK in your app's AppDelegate class in the didFinishLaunchingWithOptions method.
MSAppCenter.start("{Your App Secret}", withServices: [MSAnalytics.self, MSCrashes.self]) References: https://docs.microsoft.com/en-us/appcenter/sdk/getting-started/ios

質問 # 125
You use Get for source control.
You delete a file, commit the changes, and continue to work.
You need to recover the deleted file.
Which three commands should you run in sequence? To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order.

正解：

解説：

Explanation:

質問 # 126
You have an Azure subscription that contains an Azure key vault named Vault1. an Azure pipeline named Pipeline1, and an Azure SQL database named DB1.
Pipeline1 is used to deploy an app that will authenticate to DB1 by using a password.
You need to store the password in Vault1. The solution must ensure that the password can be accessed by Pipeline1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 127
You have a project in Azure DevOps that includes two users named User1 and User2.
You plan to use Azure Monitor to manage logs.
You need to ensure that the users can perform the actions shown in following the table.

The solution must follow the principle of least privilege.
Which role should you assign to each user? To answer select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:

質問 # 128
You have a protect in Azure DevOps.
You need to associate an automated test to a test case.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

Explanation

The process to associate an automated test with a test case is:
* Create a test project containing your automated test. What types of tests are supported?
* Check your test project into an Azure DevOps or Team Foundation Server (TFS) repository.
* Create a build pipeline for your project, ensuring that it contains the automated test. What are the differences if I am still using a XAML build?
* Use Visual Studio Enterprise or Professional 2017 or a later version to associate the automated test with a test case as shown below. The test case must have been added to a test plan that uses the build you just defined.
Reference:
https://docs.microsoft.com/en-us/azure/devops/test/associate-automated-test-with-test-case

質問 # 129
You have the following Azure policy.

A. ensures that at) data for new Azure Storage accounts is encrypted at rest
B. ensures that all traffic to new Azure Storage accounts is encrypted
C. prevents HTTPS traffic to new Azure Storage accounts when the accounts are accessed over the internet
D. prevents all HTTP traffic to wasting Azure Storage accounts

正解：A

質問 # 130
You have an Azure web app named Webapp1.
You need to use an Azure Monitor query to create a report that details the top 10 pages of Webapp1 that failed.
How should you complete the query? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation

Box 1: requests
Failed requests (requests/failed):
The count of tracked server requests that were marked as failed.
Kusto code:
requests
| where success == 'False'
Box 2: success == false
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/app-insights-metrics

質問 # 131
You are configuring an Azure DevOps deployment pipeline. The deployed application will authenticate to a web service by using a secret stored in an Azure key vault.
You need to use the secret in the deployment pipeline.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

1 - Create a service principal in Microsoft Azure Active Directory (Azre AD), part of Micoroft Entra.
2 - Configure an access policy in the key vault.
3 - Add an Azure Resource Manager service connection to the pipeline.

質問 # 132
You need to ensure that an Azure web app named az400-9940427-main can retrieve secrets from an Azure key vault named az400-9940427-kv1 by using a system managed identity.
The solution must use the principle of least privilege.
To complete this task, sign in to the Microsoft Azure portal.

正解：

解説：
1. In Azure portal navigate to the az400-9940427-main app.
2. Scroll down to the Settings group in the left navigation.
3. Select Managed identity.
4. Within the System assigned tab, switch Status to On. Click Save.

Reference:
https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity

質問 # 133
Your company has an Azure subscription.
The company requires that all resource group in the subscription have a tag named organization set to a value of Contoso.
You need to implement a policy to meet the tagging requirement.
How should you complete the policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation

Box 1: " Microsoft.Resources/subscriptions/resourceGroups"
Box 2: "Deny",
Sample - Enforce tag and its value on resource groups
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Resources/subscriptions/resourceGroups"
},
{
"not": {
"field": "[concat('tags[',parameters('tagName'), ']')]",
"equals": "[parameters('tagValue')]"
}
}
]
},
"then": {
"effect": "deny"
}
}
}
}
References:
https://docs.microsoft.com/en-us/azure/governance/policy/samples/enforce-tag-on-resource-groups

質問 # 134
You need to create deployment files for an Azure Kubernetes Service (AKS) cluster. The deployments must meet the provisioning storage requirements shown in the following table.

Which resource type should you use for each deployment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

References:
https://docs.microsoft.com/bs-cyrl-ba/azure/aks/azure-files-dynamic-pv
https://docs.microsoft.com/en-us/azure/aks/azure-disks-dynamic-pv

質問 # 135
DRAG DROP
You are developing a full Microsoft .NET Framework solution that includes unit tests.
You need to configure SonarQube to perform a code quality validation of the C# code as part of the build pipelines.
Which four tasks should you perform in sequence? To answer, move the appropriate tasks from the list of tasks to the answer area and arrange them in the correct order.

正解：

解説：

Explanation

Step 1: Prepare Analysis Configuration
Prepare Analysis Configuration task, to configure all the required settings before executing the build.
This task is mandatory.
In case of .NET solutions or Java projects, it helps to integrate seamlessly with MSBuild, Maven and Gradle tasks.
Step 2: Visual Studio Build
Reorder the tasks to respect the following order:
Prepare Analysis Configuration task before any MSBuild or Visual Studio Build task.
Step 3: Visual Studio Test
Reorder the tasks to respect the following order:
Run Code Analysis task after the Visual Studio Test task.
Step 4: Run Code Analysis
Run Code Analysis task, to actually execute the analysis of the source code.
This task is not required for Maven or Gradle projects, because scanner will be run as part of the Maven/Gradle build.
Note:

References:
https://docs.sonarqube.org/display/SCAN/Analyzing+with+SonarQube+Extension+for+VSTS-TFS

質問 # 136
Your company has an Azure subscription.
The company requires that all resource group in the subscription have a tag named organization set to a value of Contoso.
You need to implement a policy to meet the tagging requirement.
How should you complete the policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/samples/enforce-tag-on-resource-groups

質問 # 137
You plan to use Desired State Configuration (DSC) to maintain the configuration state of virtual machines that run Windows Server.
You need to perform the following:
Install Internet Information Services (IIS) on the virtual machines.
Update the default home page of the IIS web server.
How should you configure the DSC configuration file? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/powershell/scripting/dsc/quickstarts/website-quickstart

質問 # 138
You are using PowerShell to administer Azure Log Analytics workspaces.
You need to list the available workspaces and their properties.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.