AZ-400 Mock Tests - Updated May 2022

Microsoft Azure DevOps Solutions (AZ-400)Exam AZ-400: Microsoft Azure DevOps Solutions is intended for the DevOps professionals who have already received the badge of Azure Developer Associate or Azure Administrator Associate. Skills MeasuredDevelop an instrumentation strategy (5-10%)Design and implement logging assess and configure a log framework design a log aggregation and storage strategy (e.g. Azure storage) design a log aggregation using Azure Monitor manage access control to logs (workspace-centric/resource-centric) integrate crash analytics (App Center Crashes, Crashlytics)Design and implement telemetry design and implement distributed tracing inspect application performance indicators inspect infrastructure performance indicators define and measure key metrics (CPU, memory, disk, network) implement alerts on key metrics (email, SMS, webhooks, Teams/Slack) integrate user analytics (e.g. Application Insights funnels, Visual Studio App Center, TestFlight, Google Analytics)Integrate logging and monitoring solutions configure and integrate container monitoring (Azure Monitor, Prometheus, etc.) configure and integrate with monitoring tools (Azure Monitor Application Insights, Dynatrace, New Relic, Naggios, Zabbix) create feedback loop from platform monitoring tools (e.g. Azure Diagnostics extension, Log Analytics agent, Azure Platform Logs, Event Grid) manage Access control to the monitoring platformDevelop a Site Reliability Engineering (SRE) strategy (5-10%)Develop an actionable alerting strategy identify and recommend metrics on which to base alerts implement alerts using appropriate metrics implement alerts based on appropriate log messages implement alerts based on application health checks analyze combinations of metrics develop communication mechanism to notify users of degraded systems implement alerts for self-healing activities (e.g. scaling, failovers)Design a failure prediction strategy analyze behavior of system with regards to load and failure conditions calculate when a system will fail under various conditions measure baseline metrics for system leverage Application Insights Smart Detection and Dynamic thresholds in Azure MonitorDesign and implement a health check analyze system dependencies to determine which dependency should be included in health check calculate healthy response timeouts based on SLO for the service design approach for partial health situations design approach for piecemeal recovery (e.g. to improve recovery time objective strategies) integrate health check with compute environment implement different types of health checks (liveness, startup, shutdown)Develop a security and compliance plan (10-15%)Design an authentication and authorization strategy design an access solution (Azure AD Privileged Identity Management (PIM), Azure AD Conditional Access, MFA) implement Service Principals and Managed Identity configure service connectionsDesign a sensitive information management strategy evaluate and configure vault solution (Azure Key Vault, Hashicorp Vault) manage security certificates design a secrets storage and retrieval strategy (KeyVault secrets, GitHub secrets, Azure Pipelines secrets) formulate a plan for deploying secret files as part of a releaseDevelop security and compliance automate dependencies scanning for security (container scanning, OWASP) automate dependencies scanning for compliance (licenses: MIT, GPL) assess and report risks design a source code compliance solution (e.g. GitHub Code scanning, GitHub Secret scanning, pipeline-based scans, Git hooks, SonarQube, Dependabot, etc.))Design governance enforcement mechanisms implement Azure policies to enforce organizational requirements implement container scanning (e.g. static scanning, malware, crypto mining) design and implement Azure Container Registry Tasks design break-the-glass strategy for responding to security incidentsManage source control (10-15%)Develop a modern source control strategy integrate/migrate disparate source control systems (e.g. GitHub, Azure Repos) design authentication strategies design approach for managing large binary files (e.g. Git LFS) design approach for cross repository sharing (e.g. Git sub-modules, packages) implement workflow hooks design approach for efficient code reviews (e.g. GitHub code review assignments, schedule reminders, Pull Analytics)Plan and implement branching strategies for the source codedefine Pull Requests (PR) guidelines to enforce work item correlation implement branch merging restrictions (e.g. branch policies, branch protections, manual, etc.) define branch strategy (e.g. trunk based, feature branch, release branch, GitHub flow) design and implement a PR workflow (code reviews, approvals) enforce static code analysis for code-quality consistency on PRConfigure repositories configure permissions in the source control repository organize the repository with git-tags plan for handling oversized repositories plan for content recovery in all repository states purge data from source controlIntegrate source control with tool