Topic 4: Mix Questions Set

You have a project m Azure DevOps that has a release pipeline. You need to integrate work item tracking and an Agile project management system to meet the following requirements:

  • Ensure that developers can track whether their commits are deployed to production.
  • Report the deployment status.
  • Minimize integration effort.
Which system should you use?

A. Trello

B. Jira

C. Basecamp

D. Asana

B.   Jira

Explanation: Jira Software is a development tool used by agile teams to plan, track, and manage software releases. Using Azure Pipelines, teams can configure CI/CD pipelines for applications of any language, deploying to any platform or any cloud.
Note: Microsoft and Atlassian have partnered together to build an integration between Azure Pipelines and Jira Software.
This integration connects the two products, providing full tracking of how and when the value envisioned with an issue is delivered to end users. This enables teams to setup a tight development cycle from issue creation through release. Key development milestones like builds and deployments associated to a Jira issue can then be tracked from within Jira Software.

Your company uses Azure DevOps for the build pipelines and deployment pipelines of Java-based projects. You need to recommend a strategy for managing technical debt. Which action should you include in the recommendation?

A. Configure post-deployment approvals in the deployment pipeline.

B. Integrate Azure DevOps and Sonar Rube.

C. Integrate Azure DevOps and Azure Dev Test Labs.

B.   Integrate Azure DevOps and Sonar Rube.

Explanation:
You can manage technical debt with Sonar Rube and Azure DevOps.
Note: Technical debt is the set of problems in a development effort that make forward progress on customer value inefficient. Technical debt saps productivity by making code hard to understand, fragile, time-consuming to change, difficult to validate, and creates unplanned work that blocks progress. Unless they are managed, technical debt can accumulate and hurt the overall quality of the software and the productivity of the development team in the long term. SonarQube an open-source platform for continuous inspection of code quality to perform automatic reviews with static analysis of code to:

  • Detect Bugs
  • Code Smells
  • Security Vulnerabilities
  • Centralize Quality
  • What’s covered in this lab?

You have multiple teams that work on multiple projects in Azure DevOps. You need to plan and manage the consumers and producers for each project. The solution must provide an overview of all the projects. What should you do?

A. Install the Dependency Tracker extension and create dependencies for each project.

B. Add a Parent or Child link to the feature or user story for the items of each project.

C. Add a Predecessor or Successor link to the feature or user story for the items of each project.

D. Create a custom query to show the consumers and producers and add a widget to a dashboard.

D.   Create a custom query to show the consumers and producers and add a widget to a dashboard.

Your team uses Azure Pipelines to deploy applications. You need to ensure that when a failure occurs during the build or release process. all the team members are notified by using Microsoft Teams. The solution must minimize development effort. What should you do?

A. Use Azure Automation to connect to the Azure DevOps REST API and notify the team members.

B. Install the Azure Pipelines app for Teams and configure a subscription to receive notifications in a channel.

C. Install the Azure Boards app for Teams and configure a subscription to receive notifications in a channel.

D. Use an Azure function to connect to the Azure DevOps REST API and notify the team members.

C.   Install the Azure Boards app for Teams and configure a subscription to receive notifications in a channel.

You have an Azure function hosted in an App Service plan named az400-9940427-func1. You need to configure az400-9940427-func1 to upgrade the functions automatically whenever new code is committed to the master branch of https://github.com/Azure- Samples/functions-quickstart. To complete this task, sign in to the Microsoft Azure portal.


Explanation:

  1. Open Microsoft Azure Portal
  2. Log into your Azure account, select App Services in the Azure portal left navigation, and then select configure az400-9940427-func1.
  3. On the app page, select Deployment Center in the left menu.
  4. On the Build provider page, select Azure Pipelines (Preview), and then select Continue.
  5. On the Configure page, in the Code section: For GitHub, drop down and select the Organization, Repository, and Branch you want to deploy continuously.
  6. Select Continue.
  7. On the Test page, choose whether to enable load tests, and then select Continue.
  8. Depending on your App Service plan pricing tier, you may see a Deploy to staging page. Choose whether to enable deployment slots, and then select Continue.
  9. After you configure the build provider, review the settings on the Summary page, and then select Finish.

You have an Azure subscription. You use Bicep templates to deploy websites and Azure SQL infrastructure. You need to automate the deployments by using Azure Pipelines and a self-hosted agent that runs on two virtual machines. The solution must minimize administrative effort. What should you do first?

A. Create an Azure Automation account

B. On each virtual machine, enable a system-assigned managed identity.

C. Create a user-assigned managed identity.

D. Create a service principal

D.   Create a service principal

You create a Microsoft ASP.NET Core application. You plan to use Azure Key Vault to provide secrets to the application as configuration data. You need to create a Key Vault access policy to assign secret permissions to the application. The solution must use the principle of least privilege.
Which secret permissions should you use?

A. List only

B. Get only

C. Get and List

B.   Get only

Explanation:
Application data plane permissions:
Keys: sign
Secrets: get

Your company has a project in Azure DevOps for a new web application. The company uses Service Now for change management. You need to ensure that a change request is processed before any components can be deployed to the production environment. What are two ways to integrate into the Azure DevOps release pipeline?
Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Define a deployment control that invokes the Service Now SOAP API.

B. Define a post deployment gate after the deployment to the QA stage.

C. Define a deployment control that invokes the ServiceNow REST API.

D. Define a pre deployment gate before the deployment to the Prod stage.

A.   Define a deployment control that invokes the Service Now SOAP API.
B.   Define a post deployment gate after the deployment to the QA stage.

You have a project in Azure DevOps named Project1. Project1 contains a published wiki. You need to change the order of pages in the navigation pane of the published wiki in the Azure DevOps portal. What should you do?

A. At the root of the wiki, create a file named order that defines the page hierarchy.

B. At the root of the wiki, create a file named wiki.md that defines the page hierarchy.

C. Rename the pages in the navigation pane.

D. Drag and drop the pages in the navigation pane.

B.   At the root of the wiki, create a file named wiki.md that defines the page hierarchy.

Explanation:
Reorder a wiki page
You can reorder pages within the wiki tree view to have pages appear in the order and hierarchy you want. You can drag-and-drop a page title in the tree view to do the following operations:

  • Change the parent-child relationship of a page
  • Change the order of the page within the hierarchy

You are designing the security validation strategy for a project in Azure DevOps. You need to identify package dependencies that have known security issues and can be resolved by an update. What should you use?

A. Octopus Deploy

B. Jenkins

C. Gradle

D. SonarQube

D.   SonarQube

Explanation: With enterprise level of SonarQube you can use OWASP that runs the security scans for known vulnerabilities.

Page 13 out of 49 Pages