Designing and Implementing Microsoft DevOps Solutions practice questions

1. Question 1 of 25

   You need to consider the underlined segment to establish whether it is accurate. To compile an Internet Information Services (IIS) web application that runs docker, you should use a Default build agent pool. Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

   • ANo adjustment required.
   • BHosted Windows Container
   • CHosted
   • DHosted macOS

   Show answer

   Correct answer: B

   How others answered

   • B63%
   • C37%

   Only 63% agreed on this answer — treat it as contested rather than settled.

   Explanation

   Lets think about what the question is asking. We are building a docker image to run an IIS web app. A. The "Default build agent pool" (self-hosted) CAN build a Windows docker image. C. A "Hosted" pool CAN build a Windows docker image. https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops&tabs=yaml https://docs.microsoft.com/en-us/azure/devops/pipelines/ecosystems/containers/build-image?view=azure-devops#build-a-linux-or-windows-image Based on "If the underlined segment is inaccurate" then it is A. Although "should use" makes the question ambiguous. Anyone know if there is a reason to prefer hosted vs self-hosted for docker builds?

   Adapted from community discussion by nakedsun · 2022-08-01 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. C

      col2511kol

      2024-09-24

      Selected B5 upvotes

      The correct answer is B. Hosted Windows Container. When you need to compile an Internet Information Services (IIS) web application that runs on Docker, you should use a Hosted Windows Container build agent pool. This is because IIS is a web server created by Microsoft specifically for Windows-based systems. Since you want to run the application in a Docker container, a Hosted Windows Container build agent pool will provide the necessary Windows environment along with Docker support. A build agent pool is a collection of agents used for running build and deployment tasks in a continuous integration and delivery pipeline. The Hosted Windows Container build agent pool is a pre-configured, managed pool provided by Azure DevOps or other CI/CD platforms, which supports running Docker containers on a Windows-based system. By using this pool, you can ensure that your IIS web application is built and run in the appropriate environment.

   2. O

      omsingh

      2023-02-26

      5 upvotes

      B. Hosted Windows Container is the accurate option. The underlined segment states that to compile an IIS web application that runs docker, you should use a Default build agent pool. However, this statement is incomplete and does not provide enough information. To compile an IIS web application that runs Docker, you need to use a hosted agent that supports Docker. The hosted agent should have Docker installed and running. The Default agent pool does not support Docker by default. Option B, Hosted Windows Container, is accurate because it provides a hosted agent that supports Docker for Windows. This agent can compile an IIS web application that runs Docker. Options C and D are not relevant because they do not provide agents that support Docker.

   3. W

      warchoon

      2023-01-31

      7 upvotes

      The question is outdated. There are no such pools. There is always Default. Just select an image.

   4. N

      nakedsun

      2022-08-01

      4 upvotes

      Lets think about what the question is asking. We are building a docker image to run an IIS web app. A. The "Default build agent pool" (self-hosted) CAN build a Windows docker image. C. A "Hosted" pool CAN build a Windows docker image. https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops&tabs=yaml https://docs.microsoft.com/en-us/azure/devops/pipelines/ecosystems/containers/build-image?view=azure-devops#build-a-linux-or-windows-image Based on "If the underlined segment is inaccurate" then it is A. Although "should use" makes the question ambiguous. Anyone know if there is a reason to prefer hosted vs self-hosted for docker builds?

2. Question 2 of 25

   Select 2

   You have created an Azure DevOps project for a new application that will be deployed to a number of Windows Server 2016 Azure virtual machines. You are preparing a deployment solution that allows for the virtual machines to maintain a uniform configuration, and also keep administrative effort with regards to configuring the virtual machines to a minimum. Which of the following should be part of your solution? (Choose two.)

   • AAzure Resource Manager templates
   • BThe PowerShell Desired State Configuration (DSC) extension for Windows
   • CAzure pipeline deployment groups
   • DThe Custom Script Extension for Windows
   • EAzure pipeline stage templates

   Show answer

   Correct answer: A, B

   How others answered

   • AB83%

   Explanation

   Considering the requirements - maintain a uniform configuration for virtual machines - minimize administrative effort I think correct answer is A & B. To mantain the configuration status of a VM you must use DSC. To minimize the effort of creating the VM you can use an ARM template so that you can reuse it for each VM. Deployment groups requires more effort. https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-template https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups/?view=azure-devops

   Adapted from community discussion by rdemontis · 2022-03-29 · 23 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. R

      rdemontis

      2022-03-29

      Selected A, B23 upvotes

      Considering the requirements - maintain a uniform configuration for virtual machines - minimize administrative effort I think correct answer is A & B. To mantain the configuration status of a VM you must use DSC. To minimize the effort of creating the VM you can use an ARM template so that you can reuse it for each VM. Deployment groups requires more effort. https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-template https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups/?view=azure-devops

   2. M

      Msds1981

      2023-07-23

      Selected A, B4 upvotes

      A. Azure Resource Manager templates: Azure Resource Manager (ARM) templates are declarative templates that define the infrastructure and configuration of your Azure resources. With ARM templates, you can define the virtual machines' configuration, including their operating system, networking, storage, and more. By using ARM templates, you can ensure that all virtual machines are deployed with a consistent and standardized configuration, reducing manual effort and minimizing configuration drift. B. The PowerShell Desired State Configuration (DSC) extension for Windows: DSC is a feature in PowerShell that enables you to declare and manage the configuration of target nodes, such as Windows Server 2016 virtual machines. By using the DSC extension in Azure DevOps, you can apply and enforce the desired configuration on the virtual machines during the deployment process. DSC ensures that the virtual machines remain in the desired state, and any configuration drift is automatically corrected.

   3. F

      FeriAZ

      2024-03-04

      Selected A, B2 upvotes

      A. Azure Resource Manager (ARM) templates: These are JSON files that define the infrastructure and configuration of your Azure resources, including virtual machines. Using ARM templates ensures consistent configuration across all VMs by defining the desired state in code. This facilitates repeatable and automated deployments, reducing manual configuration and potential errors. B. PowerShell Desired State Configuration (DSC) extension for Windows: This extension allows you to manage the configuration of your Windows VMs using DSC in an automated fashion. DSC leverages declarative scripts to specify the desired state of the system, and the extension ensures that the VMs converge towards that configuration state. This method simplifies management and reduces administrative effort, as you can configure settings centrally through DSC scripts rather than manually on each VM.

   4. Z

      zellck

      2023-06-01

      Selected A, B3 upvotes

      AB is the answer. https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview The primary use for the Azure Desired State Configuration (DSC) extension for Windows PowerShell is to bootstrap a VM to the Azure Automation State Configuration (DSC) service. This service provides benefits that include ongoing management of the VM configuration and integration with other operational tools, such as Azure Monitor. You can use the extension to register your VMs to the service and gain a flexible solution that works across Azure subscriptions.

3. Question 3 of 25

   Your company makes use of Azure SQL Database Intelligent Insights and Azure Application Insights for monitoring purposes. You have been tasked with analyzing the monitoring using ad-hoc queries. You need to utilize the correct query language. Solution: You use Azure Log Analytics. Does the solution meet the goal?

   • AYes
   • BNo

   Show answer

   Correct answer: B

   How others answered

   • B72%
   • A28%

   Only 72% agreed on this answer — treat it as contested rather than settled.

   Explanation

   This is not correct. The question does not specifically ask which language you should use. It states that you need to utilize the correct query language, and you can do so by using Azure Log Analytics, which has KQL inside you can use.

   Adapted from community discussion by AzureJobsTillRetire · 2023-01-17 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. F

      fanq10

      2021-07-12

      52 upvotes

      You need to utilize the correct query language. Azure Log Analytics is NOT a query language. So Given answer is correct

   2. D

      DSA_MSC

      2021-10-10

      16 upvotes

      A - YES Same question: https://www.examtopics.com/discussions/microsoft/view/25631-exam-az-400-topic-7-question-4-discussion/

   3. A

      AzureJobsTillRetire

      2023-01-17

      12 upvotes

      This is not correct. The question does not specifically ask which language you should use. It states that you need to utilize the correct query language, and you can do so by using Azure Log Analytics, which has KQL inside you can use.

   4. M

      marras

      2022-06-08

      6 upvotes

      I'd prefer KQL however Microsoft calls Log Analytics also a language here: https://docs.microsoft.com/en-us/services-hub/health/log_analytics_query_language

4. Question 4 of 25

   You add the virtual machines as managed nodes in Azure Automation State Configuration. You need to configure the managed computers in Pool7. What should you do next?

   • AModify the RefreshMode property of the Local Configuration Manager (LCM).
   • BRun the Register-AzureRmAutomationDscNode Azure Powershell cmdlet.
   • CModify the ConfigurationMode property of the Local Configuration Manager (LCM).
   • DInstall PowerShell Core.

   Show answer

   Correct answer: C

   How others answered

   • C77%
   • B23%

   Explanation

   The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State Configuration (DSC) node in an Azure Automation account. See: https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/register-azurermautomationdscnode?view=azurermps-6.13.0

   Adapted from community discussion by motu · 2020-09-20 · 20 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. M

      motu

      2020-09-20

      20 upvotes

      The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State Configuration (DSC) node in an Azure Automation account. See: https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/register-azurermautomationdscnode?view=azurermps-6.13.0

   2. A

      AlMargoi

      2021-11-28

      13 upvotes

      "You add the virtual machines as managed nodes in Azure Automation State Configuration.' - running the "register-AzAutomationDSCNode" would do just that, but that is already done. I would go for C.

   3. R

      rdemontis

      2022-03-30

      Selected C8 upvotes

      Here the question states "You add the virtual machines as managed nodes in Azure Automation State Configuration". Register-AzureRmAutomationDscNode does just that. https://tkolber.medium.com/configuring-azure-dsc-automation-with-powershell-in-5-steps-454fbef9457b https://docs.microsoft.com/en-us/powershell/module/az.automation/register-azautomationdscnode?view=azps-7.3.2 Since you have already done now the question is "What should you do next?". In order to manatain the VMs status you need to set the ConfigurationMode property to ApplyAndAutocorrect. It is true that you could set the property directly in the Register-AzureRmAutomationDscNode command but from the way the question is posed it does not seem to have been specified. Since its default value is None you have to change it to ApplyAndAutocorrect. https://docs.microsoft.com/en-us/powershell/module/az.automation/register-azautomationdscnode?view=azps-7.3.2#parameters

   4. E

      Eltooth

      2022-05-22

      Selected C7 upvotes

      Nodes have already been registered so B is not needed. Next step is to set ConfigurationMode to ApplyandAutoCorrect https://docs.microsoft.com/en-us/powershell/dsc/managing-nodes/metaconfig?view=dsc-1.1&viewFallbackFrom=dsc-3.0

5. Question 5 of 25

   What should you use to implement the code quality restriction on the release pipeline for the investment planning applications suite?

   • Aa pre-deployment approval
   • Ba deployment gate
   • Ca post-deployment approval
   • Da trigger

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   Correct answer should be "Deployment Gate", deployment gate can use workitem query to check if there any active bug exist.

   Adapted from community discussion by Yanzhi · 2020-06-16 · 108 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. Y

      Yanzhi

      2020-06-16

      108 upvotes

      Correct answer should be "Deployment Gate", deployment gate can use workitem query to check if there any active bug exist.

   2. R

      rhr

      2020-07-05

      9 upvotes

      "Deployment Gate" is correct answer as Approval has only adding users as capability

   3. Z

      zyxphreez

      2020-12-22

      8 upvotes

      "deployments must not proceed between stages if any active bugs are logged against the release", it don't say "work item of type bug", for that reason I think the answer pre-deploy approval

   4. Z

      zellck

      2023-12-07

      Selected B3 upvotes

      B is the answer. https://learn.microsoft.com/en-us/azure/devops/pipelines/release/approvals/gates?view=azure-devops Gates allow automatic collection of health signals from external services and then promote the release when all the signals are successful or stop the deployment on timeout. Typically, gates are used in connection with incident management, problem management, change management, monitoring, and external approval systems. Some common use cases for deployment gates are: Quality validation: Query pipeline metrics such as pass rate or code coverage and deploy only if they are within a predefined threshold.

6. Question 6 of 25

   You have an Azure web app named webapp1 that uses the .NET Core runtime stack. You have an Azure Application Insights resource named AppInsights1. Webapp1 sends telemetry data to AppInsights1. You need to ensure that webapp1 sends the telemetry data at a fixed sampling rate. What should you do?

   • AFrom the code repository of webapp1, modify the ApplicationInsights.config file.
   • BFrom the code repository of webapp1, modify the Startup.cs file.
   • CFrom AppInsights1, modify the Usage and estimated costs settings.
   • DFrom AppInsights1, configure the Continuous export settings.

   Show answer

   Correct answer: B

   How others answered

   • B88%

   Explanation

   Right now 36% voted A and that is completely wrong. NET Core does not have applicationinsights.config, as it says here: https://learn.microsoft.com/en-us/azure/azure-monitor/app/configuration-with-applicationinsights-config "The ApplicationInsights.config and .xml instructions don't apply to the .NET Core SDK. To configure .NET Core applications, follow the instructions in Application Insights for ASP.NET Core applications." The answer is either B or as Net Core 6, Program.cs

   Adapted from community discussion by lugia4000 · 2023-02-14 · 24 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. L

      lugia4000

      2023-02-14

      24 upvotes

      Right now 36% voted A and that is completely wrong. NET Core does not have applicationinsights.config, as it says here: https://learn.microsoft.com/en-us/azure/azure-monitor/app/configuration-with-applicationinsights-config "The ApplicationInsights.config and .xml instructions don't apply to the .NET Core SDK. To configure .NET Core applications, follow the instructions in Application Insights for ASP.NET Core applications." The answer is either B or as Net Core 6, Program.cs

   2. R

      renzoku

      2023-07-08

      Selected B12 upvotes

      .NET Core application -> Startup.cs .NET Framework applications -> ApplicationInsights.config

   3. W

      WH16

      2023-09-06

      Selected B9 upvotes

      On exam 2023-09-06, selected B. From the code repository of webapp1, modify the Startup.cs file. Score 933

   4. [

      [Removed]

      2023-01-18

      Selected B4 upvotes

      The question is not asking how you can change the rate at which Application Insights consumes the telemetry data - therefore, C and D cannot be correct. We are left with A and B as possible answers, but (as AzureJobsTillRetire points out) answer A can't be correct, so B must be the correct answer.

7. Question 7 of 25

   You have an Azure subscription that contains resources in several resource groups. You need to design a monitoring strategy that will provide a consolidated view. The solution must support the following requirements: ✑ Support role-based access control (RBAC) by using Azure Active Directory (Azure AD) identifies. ✑ Include visuals from Azure Monitor that are generated by using the Kusto query language. ✑ Support documentation written in markdown. ✑ Use the latest data available for each visual. What should you use to create the consolidated view?

   • AAzure Monitor
   • BMicrosoft Power BI
   • CAzure Data Explorer
   • DAzure dashboards

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Explanation

   A, C, and D all support visuals from Azure Monitor as well as Kusto queries and RBAC. The only answer which also supports markdown, though, is D - dashboards.

   Adapted from community discussion by Pomphard · 2021-03-04 · 34 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. S

      SriLen

      2021-02-08

      48 upvotes

      D. is the correct Answer , Azure Dashboards https://docs.microsoft.com/en-us/azure/azure-portal/azure-portal-dashboards

   2. P

      Pomphard

      2021-03-04

      34 upvotes

      A, C, and D all support visuals from Azure Monitor as well as Kusto queries and RBAC. The only answer which also supports markdown, though, is D - dashboards.

   3. R

      renzoku

      2023-07-10

      Selected D1 upvote

      D. Azure dashboards Control access and permissions to the dashboard based on RBAC Include visuals from Azure Monitor, which allows you to query and analyze data using the KQL Can add text and documentation using markdown format Provide real-data updating, ensuring the latest available data Azure Monitor(Provides insights into the performance, health, and availability of your applications and resources) Directly it doesn't support capabilities to add documentation written in markdown format. Microsoft Power BI(Business intelligence tool that allows you to create interactive dashboards and reports) Does not align directly with RBAC by itself. Does not provide the same level of real-time or near-real-time data availability as Azure Monitor, Azure Dashboard. Azure Data Explorer(Perful tool for ingesting, analyzing, and visualizing large volumes of data) Does not align directly with RBAC by itself. Focused on data storage, query, and analysis rather than providing a platform for documentation

   4. M

      meoukg

      2022-11-05

      5 upvotes

      I chose Azure Dashboard, appeared on my exam yesterday, I passed

8. Question 8 of 25

   Select 2

   You are building an ASP.NET Core application. You plan to create an application utilization baseline by capturing telemetry data. You need to add code to the application to capture the telemetry data. The solution must minimize the costs of storing the telemetry data. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

   • AAdd the <InitialSamplingPercentage>99</InitialSamplingPercentage> parameter to the ApplicationInsights.config file.
   • BFrom the code of the application, enable adaptive sampling.
   • CFrom the code of the application, add Azure Application Insights telemetry.
   • DAdd the <MaxTelemetryItemsPerSecond>5</MaxTelemetryItemsPerSecond> parameter to the ApplicationInsights.config file.
   • EFrom the code of the application, disable adaptive sampling.

   Show answer

   Correct answer: C, E

   How others answered

   • CE52%
   • BC35%

   Only 52% agreed on this answer — treat it as contested rather than settled.

   Explanation

   C & E Disable Adaptive Sampling and use Fixed Rate Sampling instead: "Fixed-rate sampling reduces the volume of telemetry sent from both your ASP.NET or ASP.NET Core or Java server and from your users' browsers. You set the rate. The client and server will synchronize their sampling so that, in Search, you can navigate between related page views and requests." https://docs.microsoft.com/en-us/azure/azure-monitor/app/sampling

   Adapted from community discussion by MrMonkfish · 2021-09-07 · 27 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. M

      MrMonkfish

      2021-09-07

      27 upvotes

      C & E Disable Adaptive Sampling and use Fixed Rate Sampling instead: "Fixed-rate sampling reduces the volume of telemetry sent from both your ASP.NET or ASP.NET Core or Java server and from your users' browsers. You set the rate. The client and server will synchronize their sampling so that, in Search, you can navigate between related page views and requests." https://docs.microsoft.com/en-us/azure/azure-monitor/app/sampling

   2. F

      fflyin2k

      2021-05-14

      17 upvotes

      E is "disable adaptive sampling". it does no make sense. the question mentioned "minimize cost of storing the telemetry data", so adaptive sampling should not be disabled. And, in ASP.NET Core, adaptive sampling is enabled by default.

   3. A

      agueda

      2021-02-09

      11 upvotes

      C and E https://docs.microsoft.com/en-us/azure/azure-monitor/app/asp-net-core

   4. D

      dandynamite

      2021-03-02

      9 upvotes

      It should be B & C We enable adaptive sampling to redue volume of logs?

9. Question 9 of 25

   Select 2

   Your company uses the following resources: ✑ Windows Server 2019 container images hosted in an Azure Container Registry. ✑ Azure virtual machines that run the latest version of Ubuntu ✑ An Azure Log Analytics workspace ✑ Azure Active Directory (Azure AD) ✑ An Azure key vault For which two resources can you receive vulnerability assessments in Azure Security Center? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Athe Azure Log Analytics workspace
   • Bthe Azure key vault
   • Cthe Azure virtual machines that run the latest version of Ubuntu
   • DAzure Active Directory (Azure AD)
   • EThe Windows Server 2019 container images hosted in the Azure Container Registry.

   Show answer

   Correct answer: C, E

   How others answered

   • CE91%

   Explanation

   Answer: B & C I know, it's weird to agree with the solution provided by exam topics. But why do I agree? 1) create a Keyvault and a VM 2) go to each resource, and search for "security" in the left pane 3) view the security recommendations. Also, note the blue banner on top stating: "Visit Security Center to manage security across your virtual networks, data, apps, and more"

   Adapted from community discussion by piyipo3349 · 2020-12-30 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

   1. D

      dollarpo7

      2020-11-06

      42 upvotes

      https://docs.microsoft.com/en-us/azure/security-center/features-paas C and E

   2. A

      Albelev

      2021-05-18

      16 upvotes

      B, C are correct (KeyVault and VM). Windows container images are not supported , only Linux. https://docs.microsoft.com/en-us/azure/security-center/defender-for-container-registries-introduction

   3. P

      piyipo3349

      2020-12-30

      14 upvotes

      Answer: B & C I know, it's weird to agree with the solution provided by exam topics. But why do I agree? 1) create a Keyvault and a VM 2) go to each resource, and search for "security" in the left pane 3) view the security recommendations. Also, note the blue banner on top stating: "Visit Security Center to manage security across your virtual networks, data, apps, and more"

   4. Z

      zellck

      2023-06-03

      Selected C, E7 upvotes

      CE is the answer. https://learn.microsoft.com/en-us/security/benchmark/azure/security-control-vulnerability-management#51-run-automated-vulnerability-scanning-tools Follow recommendations from Azure Security Center on performing vulnerability assessments on your Azure virtual machines, container images, and SQL servers.

10. Question 10 of 25

    You configure an Azure Application Insights availability test. You need to notify the customer services department at your company by email when availability is degraded. You create an Azure logic app that will handle the email and follow up actions. Which type of trigger should you use to invoke the logic app?

    • Aan HTTPWebhook trigger
    • Ban HTTP trigger
    • Ca Request trigger
    • Dan ApiConnection trigger

    Show answer

    Correct answer: C

    How others answered

    • C88%

    Explanation

    Correct answer is C. Probably the following article has generated a misunderstanding: https://docs.microsoft.com/en-us/azure/app-service/tutorial-send-email?tabs=dotnet It uses the Action "When an HTTP request is received" and defines it as HTTP Request trigger. But this is a Request Trigger and not an HTTP Trigger. Please look at the document below where it is explained the difference very well. https://docs.microsoft.com/en-us/azure/connectors/connectors-native-reqres You have to consider that http trigger is used only for outbound requests from the logic app. You can't use it for Inbound http requests. For those you have to use Request Trigger.

    Adapted from community discussion by rdemontis · 2022-03-16 · 55 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. R

       rdemontis

       2022-03-16

       Selected C55 upvotes

       Correct answer is C. Probably the following article has generated a misunderstanding: https://docs.microsoft.com/en-us/azure/app-service/tutorial-send-email?tabs=dotnet It uses the Action "When an HTTP request is received" and defines it as HTTP Request trigger. But this is a Request Trigger and not an HTTP Trigger. Please look at the document below where it is explained the difference very well. https://docs.microsoft.com/en-us/azure/connectors/connectors-native-reqres You have to consider that http trigger is used only for outbound requests from the logic app. You can't use it for Inbound http requests. For those you have to use Request Trigger.

    2. H

       Hooters

       2020-11-05

       53 upvotes

       Should be B.- HTTP trigger https://docs.microsoft.com/en-us/azure/app-service/tutorial-send-email?tabs=dotnet

    3. Z

       ziizai

       2021-09-11

       6 upvotes

       Answer is C. From https://docs.microsoft.com/en-us/azure/app-service/tutorial-send-email?tabs=dotnet you can see the trigger is HTTP request trigger, and in this page, it refers to another page to explain the trigger: https://docs.microsoft.com/en-us/azure/connectors/connectors-native-reqres you can see, for LOGIC APP, this kind of trigger is call a REQUEST TRIGGER. For azure function it's called Http trigger, for logic app it's called request trigger.

    4. D

       DeepMoon

       2021-03-16

       6 upvotes

       Web Hooks are old way of doing things. HTTP triggers are new more capable way of doing things. "In version 1.x, webhook templates provide additional validation for webhook payloads. In version 2.x and higher, the base HTTP trigger still works and is the recommended approach for webhooks." https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-http-webhook-trigger?tabs=csharp#webhooks

11. Question 11 of 25

    You have a multi-tier application that has an Azure Web Apps front end and an Azure SQL Database back end. You need to recommend a solution to capture and store telemetry data. The solution must meet the following requirements: ✑ Support using ad-hoc queries to identify baselines. ✑ Trigger alerts when metrics in the baseline are exceeded. ✑ Store application and database metrics in a central location. What should you include in the recommendation?

    • AAzure Event Hubs
    • BAzure SQL Database Intelligent Insights
    • CAzure Application Insights
    • DAzure Log Analytics

    Show answer

    Correct answer: D

    How others answered

    • D66%
    • C34%

    Only 66% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I think answer should be Log Analytics What kind of telemetry data is being handled by Log Analytics ? -> Data related to infrastructure and network level i.e., few of them are syslogs, IIS logs, custom logs, windows events, windows and linux performance counters, etc. For more information, please refer https://docs.microsoft.com/en-us/azure/azure-monitor/azure-monitor-log-hub What kind of telemetry data is being handled by App Insights ? -> Data related to code-level application performance level i.e., few of them are ping URL tests, page view counts, page view load data, HTTP requests, dependency calls, exceptions and stack traces, custom events and metrics that you code, trace logs, AJAX calls, user and session counts, run-time exceptions, failure anomalies, abnormal rise in exceptions, etc. For more information, please refer https://docs.microsoft.com/en-us/azure/azure-monitor/azure-monitor-app-hub and https://docs.microsoft.com/en-us/azure/azure-monitor/app/troubleshoot-faq#what-telemetry-is-collected-by-application-insights

    Adapted from community discussion by gulopez · 2021-06-18 · 26 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. G

       gulopez

       2021-06-18

       26 upvotes

       I think answer should be Log Analytics What kind of telemetry data is being handled by Log Analytics ? -> Data related to infrastructure and network level i.e., few of them are syslogs, IIS logs, custom logs, windows events, windows and linux performance counters, etc. For more information, please refer https://docs.microsoft.com/en-us/azure/azure-monitor/azure-monitor-log-hub What kind of telemetry data is being handled by App Insights ? -> Data related to code-level application performance level i.e., few of them are ping URL tests, page view counts, page view load data, HTTP requests, dependency calls, exceptions and stack traces, custom events and metrics that you code, trace logs, AJAX calls, user and session counts, run-time exceptions, failure anomalies, abnormal rise in exceptions, etc. For more information, please refer https://docs.microsoft.com/en-us/azure/azure-monitor/azure-monitor-app-hub and https://docs.microsoft.com/en-us/azure/azure-monitor/app/troubleshoot-faq#what-telemetry-is-collected-by-application-insights

    2. F

       Fred64

       2020-11-19

       23 upvotes

       Application INsights has a querying capability with a sql-like language: kusto But SQL doesn't log to AI, but Log Analytics. So the answer is correct because AI doesn't provide a single location log storage

    3. M

       msuleman92

       2020-11-30

       9 upvotes

       Its C, Cause in Log Analytics you can run the Queries + You can set triggers for alerts. and centralized Database Management.

    4. B

       bnair

       2020-11-18

       7 upvotes

       Here Log analytics seems to be the right answer. It supports ad hoc qs, central location for storing all logs, and can be used to configure alerts. Intelligent Insights and Azure SQL analytics can run on those data as well.

12. Question 12 of 25

    Your company has a project in Azure DevOps for a new web application. The company identifies security as one of the highest priorities. You need to recommend a solution to minimize the likelihood that infrastructure credentials will be leaked. What should you recommend?

    • AAdd a Run Inline Azure PowerShell task to the pipeline.
    • BAdd a PowerShell task to the pipeline and run Set-AzureKeyVaultSecret.
    • CAdd an Azure Key Vault task to the pipeline.
    • DAdd Azure Key Vault references to Azure Resource Manger templates.

    Show answer

    Correct answer: C

    How others answered

    • C58%
    • D42%

    Only 58% agreed on this answer — treat it as contested rather than settled.

    Explanation

    the Answer is D, B can not be the answer as we have to pass the pass ward as plain text in the script S C:\> $Secret = ConvertTo-SecureString -String 'Password' -AsPlainText -Force PS C:\> Set-AzureKeyVaultSecret -VaultName 'Contoso' -Name 'ITSecret' -SecretValue $Secret

    Adapted from community discussion by Velumani · 2020-05-08 · 13 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. Y

       Yanzhi

       2019-12-16

       73 upvotes

       D is more "correct" than C, because the protection object is infra's credential, it may or may not used in pipeline.

    2. A

       artisticcheese

       2019-12-05

       29 upvotes

       Correct answer is C. This is the task to retreive Keyvault secrets to use in following tasks

    3. V

       Velumani

       2020-05-08

       13 upvotes

       the Answer is D, B can not be the answer as we have to pass the pass ward as plain text in the script S C:\> $Secret = ConvertTo-SecureString -String 'Password' -AsPlainText -Force PS C:\> Set-AzureKeyVaultSecret -VaultName 'Contoso' -Name 'ITSecret' -SecretValue $Secret

    4. A

       Alexevansigg

       2020-09-28

       9 upvotes

       I think D is the answer, There is no mention of deploying using ARM... but it refers to 'Infrastructure Secrets' And Infra should be deployed via ARM. Option C would load the secret into the context of the Pipeline deployment... With D it would never leave the Azure Control Plane.

13. Question 13 of 25

    You use Azure Artifacts to host NuGet packages that you create. You need to make one of the packages available to anonymous users outside your organization. The solution must minimize the number of publication points. What should you do?

    • AChange the feed URL of the package
    • BCreate a new feed for the package
    • CPromote the package to a release view.
    • DPublish the package to a public NuGet repository.

    Show answer

    Correct answer: B

    How others answered

    • B58%
    • D41%

    Only 58% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The only possible correct answer is: Publish the package to a public NuGet repository. This is because to use the public feed feature in Azure DevOps, the project itself must be public: "Public feeds are project-scoped feeds that live inside a public project. You cannot convert an existing organization-scoped feed into a project-scoped feed or a public feed." https://docs.microsoft.com/en-us/azure/devops/artifacts/tutorials/share-packages-publicly?view=azure-devops

    Adapted from community discussion by TosO · 2020-03-21 · 65 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. T

       TosO

       2020-03-21

       65 upvotes

       The only possible correct answer is: Publish the package to a public NuGet repository. This is because to use the public feed feature in Azure DevOps, the project itself must be public: "Public feeds are project-scoped feeds that live inside a public project. You cannot convert an existing organization-scoped feed into a project-scoped feed or a public feed." https://docs.microsoft.com/en-us/azure/devops/artifacts/tutorials/share-packages-publicly?view=azure-devops

    2. P

       pdk88

       2022-09-18

       9 upvotes

       Again this is one of those *** questions that drive you nuts! Nothing is said about a public or private project. If public, then create a public feed answer B. https://learn.microsoft.com/en-us/azure/devops/artifacts/feeds/feed-permissions?view=azure-devops&tabs=new-nav&viewFallbackFrom=vsts#share-packages-publicly A private project on the other hand doesn't provide an option to a public feed (I've tested this). So you need a public Nuget repo to share the package anonymously. But... this case states: "The solution must minimize the number of publication points". If you host your packages in Azure Artifact AND you want to have the package available to anonymous users then you need a public Nuget repo (=two publication points). Answer would be D. I'm lost on this one

    3. D

       droy89

       2021-06-26

       11 upvotes

       Answer is correct. Source : https://docs.microsoft.com/en-us/azure/devops/artifacts/tutorials/share-packages-publicly?view=azure-devops First create a public feed. Then populate the feed with the package. Which is exactly what needs to be done here.

    4. M

       Marang73

       2020-11-13

       8 upvotes

       Nothing is mentioned in the question that the project is private.

14. Question 14 of 25

    You are developing a multi-tier application. The application will use Azure App Service web apps as the front end and an Azure SQL database as the back end. The application will use Azure functions to write some data to Azure Storage. You need to send the Azure DevOps team an email message when the front end fails to return a status code of 200. Which feature should you use?

    • AService Map in Azure Log Analytics
    • Bavailability tests in Azure Application Insights
    • CProfiler in Azure Application Insights
    • DApplication Map in Azure Application Insights

    Show answer

    Correct answer: B

    How others answered

    • B91%

    Explanation

    the correct answer is B, After you've deployed your web app/website, you can set up recurring tests to monitor availability and responsiveness. Azure Application Insights sends web requests to your application at regular intervals from points around the world. It can "alert" you if your application isn't responding, or if it responds too slowly. https://docs.microsoft.com/en-us/azure/azure-monitor/app/monitor-web-app-availability

    Adapted from community discussion by silverdeath · 2020-10-12 · 24 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. S

       silverdeath

       2020-10-12

       24 upvotes

       the correct answer is B, After you've deployed your web app/website, you can set up recurring tests to monitor availability and responsiveness. Azure Application Insights sends web requests to your application at regular intervals from points around the world. It can "alert" you if your application isn't responding, or if it responds too slowly. https://docs.microsoft.com/en-us/azure/azure-monitor/app/monitor-web-app-availability

    2. A

       Abhishek81

       2021-01-04

       23 upvotes

       B is correct. https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-alert

    3. P

       Peisi

       2022-02-23

       5 upvotes

       D is the answer. The question with info of the backend should lead you to a more complex scenario than just pinging the site with availability test. There could be a problem with the SQL database or Storage, and you can't catch those errors with a simple availability test, but with Application Map you can. If you test with availability test, you can check that the site is up but it isn't necesserily working properly. https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-map?tabs=net

    4. Z

       zellck

       2023-12-06

       Selected B3 upvotes

       B is the answer. https://learn.microsoft.com/en-us/azure/azure-monitor/app/availability-overview After you've deployed your web app or website, you can set up recurring tests to monitor availability and responsiveness. Application Insights sends web requests to your application at regular intervals from points around the world. It can alert you if your application isn't responding or responds too slowly. You can set up availability tests for any HTTP or HTTPS endpoint that's accessible from the public internet. You don't have to make any changes to the website you're testing. In fact, it doesn't even have to be a site that you own. You can test the availability of a REST API that your service depends on.

15. Question 15 of 25

    You have a project in Azure DevOps named Project1. Project1 contains a published wiki. You need to change the order of pages in the navigation pane of the published wiki in the Azure DevOps portal. What should you do?

    • AAt the root of the wiki, create a file named .order that defines the page hierarchy.
    • BAt the root of the wiki, create a file named wiki.md that defines the page hierarchy.
    • CRename the pages in the navigation pane.
    • DDrag and drop the pages in the navigation pane.

    Show answer

    Correct answer: A

    How others answered

    • A67%
    • D33%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    "To structure the list of pages in the navigation pane for a *publish code as wiki*, define the .order file at the root, and for each subfolder or parent page that contains subpages." "The *provisioned* wiki manages the page sequence and page list automatically as you add or move pages within the navigation pane." https://docs.microsoft.com/en-us/azure/devops/project/wiki/provisioned-vs-published-wiki?view=azure-devops#page-sequence-and-page-list-in-navigation-pane

    Adapted from community discussion by franekfranek · 2022-06-07 · 22 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. F

       franekfranek

       2022-06-07

       Selected A22 upvotes

       "To structure the list of pages in the navigation pane for a *publish code as wiki*, define the .order file at the root, and for each subfolder or parent page that contains subpages." "The *provisioned* wiki manages the page sequence and page list automatically as you add or move pages within the navigation pane." https://docs.microsoft.com/en-us/azure/devops/project/wiki/provisioned-vs-published-wiki?view=azure-devops#page-sequence-and-page-list-in-navigation-pane

    2. S

       syu31svc

       2022-08-15

       Selected A11 upvotes

       https://docs.microsoft.com/en-us/azure/devops/project/wiki/wiki-file-structure?view=azure-devops#order-file "The .order file defines the sequence of pages within the wiki." Answer is A

    3. D

       Darkeh

       2022-08-24

       5 upvotes

       This is a stupid question. A or D can be correct. They should change it to provisioned wiki or published as code wiki. Important Info: The provisioned wiki manages the page sequence and page list automatically as you add or move pages within the navigation pane. To structure the list of pages in the navigation pane for a publish code as wiki, define the .order file at the root, and for each subfolder or parent page that contains subpages.

    4. S

       Simon_G

       2022-05-03

       Selected A4 upvotes

       A. At the root of the wiki, create a file named .order that defines the page hierarchy. Provisioned wikis vs. published code as a wiki The provisioned wiki manages the page sequence and page list automatically as you add or move pages within the navigation pane. To structure the list of pages in the navigation pane for a publish code as wiki, define the .order file at the root, and for each subfolder or parent page that contains subpages.

16. Question 16 of 25

    Select 3

    Your company uses cloud-hosted Jenkins for builds. You need to ensure that Jenkins can retrieve source code from Azure Repos. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    • ACreate a webhook in Jenkins.
    • BAdd the Team Foundation Server (TFS) plug-in to Jenkins.
    • CAdd a personal access token to your Jenkins account.
    • DCreate a personal access token (PAT) in your Azure DevOps account.
    • ECreate a service hook in Azure DevOps.

    Show answer

    Correct answer: C, D, E

    How others answered

    • CDE51%
    • BCD40%

    Only 51% agreed on this answer — treat it as contested rather than settled.

    Explanation

    B,C,D (the given answer is correct) URL:https://docs.microsoft.com/en-us/azure/developer/jenkins/deploy-to-linux-vm-using-azure-devops-services by the way, webhook is used for Jenkins + Github, not for Azure Repos.

    Adapted from community discussion by fflyin2k · 2021-05-13 · 30 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. F

       fflyin2k

       2021-05-13

       30 upvotes

       B,C,D (the given answer is correct) URL:https://docs.microsoft.com/en-us/azure/developer/jenkins/deploy-to-linux-vm-using-azure-devops-services by the way, webhook is used for Jenkins + Github, not for Azure Repos.

    2. C

       ChauPhan

       2021-11-08

       14 upvotes

       Why E? "You need to ensure that Jenkins can retrieve source code from Azure Repos." That's mean Jenkins access to Azure Repo, get the repo and run build. Not from Azure DevOps to trigger Jenkins 1. You need to install something at Jenkins to access Azure Repo --> B 2. Generate PAT at Azure Repo/DevOps --> D 3. Input this PAT at Jenkins to access the repo --> C

    3. D

       dipti927

       2023-06-09

       8 upvotes

       To ensure that Jenkins can retrieve source code from Azure Repos, you need to perform the following three actions: C. Add a personal access token to your Jenkins account: You should add a personal access token (PAT) to your Jenkins account. This token will be used for authentication when accessing Azure Repos from Jenkins. D. Create a personal access token (PAT) in your Azure DevOps account: In your Azure DevOps account, you need to create a personal access token. This token will provide the necessary permissions for Jenkins to retrieve source code from Azure Repos. E. Create a service hook in Azure DevOps: You should create a service hook in Azure DevOps. This hook will allow you to configure notifications and trigger actions in Jenkins whenever there are changes or events in Azure Repos. The correct actions are: C. Add a personal access token to your Jenkins account, D. Create a personal access token (PAT) in your Azure DevOps account, and E. Create a service hook in Azure DevOps.

    4. D

       devex

       2022-12-14

       Selected C, D, E8 upvotes

       TFS plug-in for Jenkins is deprecated: https://plugins.jenkins.io/vsts-cd/ Using PAT should be enough and although service hook is not needed to access the git repo, it is needed for CI (code pushed event).

17. Question 17 of 25

    You have a private project in Azure DevOps. You need to ensure that a project manager can create custom work item queries to report on the project's progress. The solution must use the principle of least privilege. To which security group should you add the project manager?

    • AReader
    • BProject Collection Administrators
    • CProject Administrators
    • DContributor

    Show answer

    Correct answer: D

    How others answered

    • D68%
    • A29%

    Only 68% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Come on guys... Readers cannot create things. Only read things. This is an expert level exam. Don't be embarrassing. To the people using this link as evidence of reader being a valid answer: https://docs.microsoft.com/en-us/azure/devops/boards/queries/set-query-permissions?view=azure-devops#default-query-permissions Read more carefully. Readers can only create "My queries" they cannot create shared queries. The question is about creating queries for team reporting.

    Adapted from community discussion by PlumpyTumbler · 2022-01-29 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. W

       Windscar

       2020-11-08

       44 upvotes

       Answer is correct. There is no reference for shared querires. so its Contributor

    2. I

       igorole

       2021-06-22

       28 upvotes

       It is contributor. See the issue I opened on github: https://github.com/MicrosoftDocs/azure-devops-docs/issues/10963 Reader has no rights to save anything.

    3. A

       Akc0

       2023-05-08

       8 upvotes

       I take it back, it should be contributor Reader > View and run managed queries, view query charts Contributor > Create and save managed My queries, query charts Question says they should "Create" queries, reader is not valid boys https://learn.microsoft.com/en-us/azure/devops/boards/queries/set-query-permissions?view=azure-devops

    4. P

       PlumpyTumbler

       2022-01-29

       Selected D6 upvotes

       Come on guys... Readers cannot create things. Only read things. This is an expert level exam. Don't be embarrassing. To the people using this link as evidence of reader being a valid answer: https://docs.microsoft.com/en-us/azure/devops/boards/queries/set-query-permissions?view=azure-devops#default-query-permissions Read more carefully. Readers can only create "My queries" they cannot create shared queries. The question is about creating queries for team reporting.

18. Question 18 of 25

    You have an Azure solution that contains a build pipeline in Azure Pipelines. You experience intermittent delays before the build pipeline starts. You need to reduce the time it takes to start the build pipeline. What should you do?

    • AEnable self-hosted build agents.
    • BCreate a new agent pool.
    • CSplit the build pipeline into multiple stages.
    • DPurchase an additional parallel job.

    Show answer

    Correct answer: A

    How others answered

    • A51%
    • D49%

    Only 51% agreed on this answer — treat it as contested rather than settled.

    Explanation

    build delays are related wit concurrence! self hosted vs windows hosted does not affect the delays. Hence, I believe given answer is correct. It is D.

    Adapted from community discussion by alpars · 2022-05-27 · 34 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. A

       alpars

       2022-05-27

       34 upvotes

       build delays are related wit concurrence! self hosted vs windows hosted does not affect the delays. Hence, I believe given answer is correct. It is D.

    2. J

       jose

       2022-11-22

       Selected A19 upvotes

       "You experience intermittent delays before the build pipeline starts." Before starts... So (A) "Enable self-hosted build agents" reduce the time it taks to start the build pipeline. Purchase and additional parallel job could help to reduce the execution time of the build pipeline, not the delay to start, because the build pipeline has to wait for a free agent to start

    3. S

       syu31svc

       2022-08-15

       Selected A7 upvotes

       https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser "An agent that you set up and manage on your own to run jobs is a self-hosted agent. You can use self-hosted agents in Azure Pipelines or Azure DevOps Server, formerly named Team Foundation Server (TFS). Self-hosted agents give you more control to install dependent software needed for your builds and deployments. Also, machine-level caches and configuration persist from run to run, which can boost speed." Answer is A

    4. P

       ppo12

       2022-05-04

       9 upvotes

       I think should be A, since the questions mentioned single pipeline. Hence, not using Microsoft public agent that can take longer time

19. Question 19 of 25

    Select 3

    You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant. You are configuring a build pipeline in Azure Pipelines that will include a task named Task1. Task1 will authenticate by using an Azure AD service principal. Which three values should you configure for Task1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

    • Athe tenant ID
    • Bthe subscription ID
    • Cthe client secret
    • Dthe app ID
    • Ethe object ID

    Show answer

    Correct answer: A, C, D

    How others answered

    • ACD77%
    • ABD23%

    Explanation

    From https://azuredevopslabs.com/labs/devopsserver/azureserviceprincipal/ (see also the screenshots there) ... 4. Run "az ad sp create-for-rbac --name ServicePrincipalName" 5. Azure will generate an appID, which is the Service principal client ID used by Azure DevOps Server. It will also generate a strong password, which is the Service principal key. The final value of interest is the tenant, which is the Tenant ID... 6. Execute "az account show" 7. The id is the Subscription ID you need to create the service connection. The name is the Subscription name you need. >> I validated this approach . >> Conclusion: The given answer ABD is correct. It is a bit confusing because the fields in Azure Devops "Create service connection" have different names than in the CLI output. But there is no "client secret" and no "object id".

    Adapted from community discussion by tom999 · 2022-02-17 · 27 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. W

       wblom

       2021-11-05

       87 upvotes

       Should be A. the tenant ID D. the app ID C. the client secret

    2. T

       tom999

       2022-02-17

       27 upvotes

       From https://azuredevopslabs.com/labs/devopsserver/azureserviceprincipal/ (see also the screenshots there) ... 4. Run "az ad sp create-for-rbac --name ServicePrincipalName" 5. Azure will generate an appID, which is the Service principal client ID used by Azure DevOps Server. It will also generate a strong password, which is the Service principal key. The final value of interest is the tenant, which is the Tenant ID... 6. Execute "az account show" 7. The id is the Subscription ID you need to create the service connection. The name is the Subscription name you need. >> I validated this approach . >> Conclusion: The given answer ABD is correct. It is a bit confusing because the fields in Azure Devops "Create service connection" have different names than in the CLI output. But there is no "client secret" and no "object id".

    3. [

       [Removed]

       2021-11-05

       7 upvotes

       Per this KB - https://docs.microsoft.com/en-us/azure/devops/pipelines/library/connect-to-azure - A and B are obvious, I would say C is the third, as client secret is referenced by "Either the service principal client key or, if you have selected Certificate, enter the contents of both the certificate and private key sections of the *.pem file."

    4. 2

       27close

       2021-11-06

       7 upvotes

       Subscription ID (B) Service principal ID /secret key -C Either the service principal client key or, if you have selected Certificate, enter the contents of both the certificate and private key sections of the *.pem file. Tenant ID (A)

20. Question 20 of 25

    Select 2

    You have an Azure DevOps organization named Contoso and an Azure DevOps project named Project1. You plan to use Microsoft-hosted agents to build container images that will host full Microsoft .NET Framework apps in a YAML pipeline in Project1. What are two possible virtual machine images that you can use for the Microsoft-hosted agent pool? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • Avs2017-win2016
    • Bubuntu-16.04
    • Cwin1803
    • DmacOS-10.13
    • Evs.2015-win2012r2

    Show answer

    Correct answer: A, B

    How others answered

    • AB45%
    • AE30%
    • BC15%

    Only 45% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Correct answer is A/C. You can not have Full .NET framework on Linux (only .NET core). No reason to have any further discussions. I bet my life on my answer.

    Adapted from community discussion by artisticcheese · 2019-12-05 · 77 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. A

       artisticcheese

       2019-12-05

       77 upvotes

       Correct answer is A/C. You can not have Full .NET framework on Linux (only .NET core). No reason to have any further discussions. I bet my life on my answer.

    2. M

       Miles19

       2021-04-16

       35 upvotes

       You're not right. The correct answers are A and B. From March 2020, Win1803 is not supported anymore. Here is the link: https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops&tabs=yaml#software

    3. M

       Mefguine

       2020-05-03

       16 upvotes

       On March 23, 2020, we'll be removing the following Azure Pipelines hosted images: Windows Server 2012R2 with Visual Studio 2015 (vs2015-win2012r2) macOS X High Sierra 10.13 (macOS-10.13) Windows Server Core 1803 - (win1803) Ref: https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops

    4. W

       wlfjck

       2020-01-27

       14 upvotes

       It should be A & E, refer to https://github.com/microsoft/azure-pipelines-image-generation/blob/d80f81d6c98f8ce2c74b034309bb774ea8d31cfb/images/win/Vs2015-Server2012R2-Readme.md https://github.com/actions/virtual-environments/blob/master/images/win/Windows2016-Readme.md C is not correct as it only has .Net Core https://github.com/Microsoft/azure-pipelines-image-generation/blob/master/images/win/WindowsContainer1803-Readme.md

21. Question 21 of 25

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources: ✑ Two resource groups ✑ Four Azure virtual machines in one resource group ✑ Two Azure SQL databases in other resource group You need to recommend a solution to deploy the resources. Solution: Create two standalone templates, each of which will deploy the resources in its respective group. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: B

    How others answered

    • B64%
    • A36%

    Only 64% agreed on this answer — treat it as contested rather than settled.

    Explanation

    A is correct - you can deploy several ARM templates in one deployment - just add different tasks or multiple ARM deployment steps in the task

    Adapted from community discussion by TosO · 2020-09-20 · 52 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. T

       TosO

       2020-09-20

       52 upvotes

       A is correct - you can deploy several ARM templates in one deployment - just add different tasks or multiple ARM deployment steps in the task

    2. A

       AzureJobsTillRetire

       2023-07-19

       Selected B7 upvotes

       I think that we all agree that this is not best practice. The question asks what you would “recommend” as a solution, I do not think we should recommend this solution for the reason that this is not the best practice. Hence the answer has to be No – we do not recommend.

    3. K

       kcinofni

       2020-11-13

       6 upvotes

       https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/cross-resource-group-deployment?tabs=azure-powershell https://samcogan.com/deploying-resource-groups-with-arm-templates/ If you use two standalone templates you should anyway use nested or linked templates with dependsOn parameter, because before creating any resources in resource groups they must already exist. According to the solution statement, I think, the answer is No.

    4. D

       dx

       2021-01-19

       5 upvotes

       https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/linked-templates "For small to medium solutions, a single template is easier to understand and maintain. You can see all the resources and values in a single file. For advanced scenarios, linked templates enable you to break down the solution into targeted components. You can easily reuse these templates for other scenarios." I get the impression that they would recommend a single standalone or multiple linked/nested, but not two separate standalone templates. I'm going with B - No

22. Question 22 of 25

    You have a project in Azure DevOps named Project1. Project1 contains a pipeline that builds a container image named Image1 and pushes Image1 to an Azure container registry named ACR1. Image1 uses a base image stored in Docker Hub. You need to ensure that Image1 is updated automatically whenever the base image is updated. What should you do?

    • AEnable the Azure Event Grid resource provider and subscribe to registry events.
    • BAdd a Docker Hub service connection to Azure Pipelines.
    • CCreate and run an Azure Container Registry task.
    • DCreate a service hook in Project1.

    Show answer

    Correct answer: C

    How others answered

    • C92%

    Explanation

    Creating and running an Azure Container Registry task is one approach you could take to update Image1 automatically whenever the base image is updated on Docker Hub. Here is an example of how you could do this: In your build pipeline in Azure DevOps, add an Azure Container Registry task to the build step that generates Image1. In the Azure Container Registry task, specify the container registry (ACR1) where Image1 is stored and the name of the base image on Docker Hub. Set the task to check for updates to the base image on Docker Hub before building Image1. Save the changes to your build pipeline and run the pipeline to build and push Image1 to ACR1. Verify that the Azure Container Registry task updates Image1 automatically whenever the base image is updated on Docker Hub.

    Adapted from community discussion by badaboom · 2023-06-20 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. B

       badaboom

       2023-06-20

       Selected C3 upvotes

       Creating and running an Azure Container Registry task is one approach you could take to update Image1 automatically whenever the base image is updated on Docker Hub. Here is an example of how you could do this: In your build pipeline in Azure DevOps, add an Azure Container Registry task to the build step that generates Image1. In the Azure Container Registry task, specify the container registry (ACR1) where Image1 is stored and the name of the base image on Docker Hub. Set the task to check for updates to the base image on Docker Hub before building Image1. Save the changes to your build pipeline and run the pipeline to build and push Image1 to ACR1. Verify that the Azure Container Registry task updates Image1 automatically whenever the base image is updated on Docker Hub.

    2. S

       Sylph

       2021-10-10

       5 upvotes

       Base images from a public repo in Docker Hub or MCR - For base images in public repositories, an ACR task checks for image updates at a random interval of between 10 and 60 minutes. Dependent tasks are run accordingly. https://docs.microsoft.com/en-us/azure/container-registry/container-registry-tasks-base-images#base-image-notifications

    3. D

       Dalias

       2021-12-29

       6 upvotes

       got this in 30 Jun 2021 exams. scored 800+ marks. C is correct

    4. R

       renzoku

       2024-01-29

       Selected C1 upvote

       C. Create and run an Azure Container Registry task. Can automatically build and update container images whenever the base image is changed. >Enable Task in ACR -ACR tasks allow you to automate container image builds whenever there are changes to the base image. >Create ACR Task -Automating actions based on changes in external container registries like Docker Hub. >Save and Run Task Run the task manually, this will be automatically triggered whenever the base image is updated in Docker Hub. https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-base-images I think you can achieve the same using Docker Hub service connection in Azure Pipelines, but involves a lot more configuration than using Azure Container Registry task.

23. Question 23 of 25

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources: ✑ Two resource groups ✑ Four Azure virtual machines in one resource group ✑ Two Azure SQL databases in other resource group You need to recommend a solution to deploy the resources. Solution: Create a main template that will deploy the resources in one resource group and a nested template that will deploy the resources in the other resource group. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Correct answer: B

    How others answered

    • B58%
    • A42%

    Only 58% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Ok guys, I have been looking at this question for days. Going From A to B and then back to A etc. But we seem to be over complicating the question. Solution says: Create a main template that will deploy the resources in one resource group and a nested template that will deploy the resources in the other resource group. Where in the Solution are the resource groups created? Answer is a straight B.

    Adapted from community discussion by D_zone · 2022-02-13 · 103 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. D

       D_zone

       2022-02-13

       103 upvotes

       Ok guys, I have been looking at this question for days. Going From A to B and then back to A etc. But we seem to be over complicating the question. Solution says: Create a main template that will deploy the resources in one resource group and a nested template that will deploy the resources in the other resource group. Where in the Solution are the resource groups created? Answer is a straight B.

    2. A

       artisticcheese

       2020-12-05

       36 upvotes

       Correct answer is A. Nested template will able to fulfill requirement.

    3. F

       fflyin2k

       2022-05-16

       7 upvotes

       Answer is No. This question is part of a a series of questions. You can find 4 questions in this dump. Only correct answer is, one parent ARM (to create resource groups) + 2 linked ARM (to deploy resources to each resource group)

    4. P

       poplovic

       2022-09-19

       5 upvotes

       This question is part of a a series of questions. You can find 4 questions in this dump. 1. two standalone templates. each will deploy the resources in its respective group. 2. a single standalone template that will deploy all the resources 3. a main template to deploy one resource group and a nested template to deploy another resource group. 4. a main template with two linked templates, each of which will deploy a resource group. two standalone templates should work one main template with one nested or linked template should work one main template with two nested or linked template should work https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-to-resource-group?tabs=azure-powershell

24. Question 24 of 25

    You plan to share packages that you wrote, tested, validated, and deployed by using Azure Artifacts. You need to release multiple builds of each package by using a single feed. The solution must limit the release of packages that are in development. What should you use?

    • Alocal symbols
    • Bviews
    • Cglobal symbols
    • Dupstream sources

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    Views enable you to share subsets of the NuGet, npm, Maven, and Python package-versions in your feed with consumers. A common use for views is to share package versions that have been tested, validated, or deployed but hold back packages still under development and packages that didn't meet a quality bar. Ref: https://docs.microsoft.com/en-us/azure/devops/artifacts/concepts/views?view=azure-devops

    Adapted from community discussion by Mefguine · 2020-05-06 · 20 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. A

       artisticcheese

       2019-12-05

       62 upvotes

       Correct answers is B. Upstream sources has nothing to do with having several versions of your package

    2. M

       Mefguine

       2020-05-06

       20 upvotes

       Views enable you to share subsets of the NuGet, npm, Maven, and Python package-versions in your feed with consumers. A common use for views is to share package versions that have been tested, validated, or deployed but hold back packages still under development and packages that didn't meet a quality bar. Ref: https://docs.microsoft.com/en-us/azure/devops/artifacts/concepts/views?view=azure-devops

    3. L

       lolit

       2020-03-31

       8 upvotes

       https://docs.microsoft.com/en-us/azure/devops/artifacts/concepts/views?view=azure-devops

    4. Z

       zyxphreez

       2020-06-20

       5 upvotes

       answer is B. "The solution must limit the release of packages that are in development.", Use of Views: "A common use for views is to share package versions that have been tested, validated, or deployed but hold back packages still under development and packages that didn't meet a quality bar." https://docs.microsoft.com/en-us/azure/devops/artifacts/concepts/views?view=azure-devops Upstream allows access to packages that are still under development....

25. Question 25 of 25

    You are designing a build pipeline in Azure Pipelines. The pipeline requires a self-hosted agent. The build pipeline will run once daily and will take 30 minutes to complete. You need to recommend a compute type for the agent. The solution must minimize costs. What should you recommend?

    • Aan Azure Kubernetes Service (AKS) cluster
    • BAzure Container Instances
    • Can Azure virtual machine scale set
    • DAzure virtual machines

    Show answer

    Correct answer: B

    How others answered

    • B58%
    • C35%

    Only 58% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Should be C It requires self-hosted agent rather than Microsoft-hosted agent. It is better to use scale set according to the following link https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser Azure virtual machine scale set agents Azure virtual machine scale set agents are a form of self-hosted agents that can be auto-scaled to meet your demands. This elasticity reduces your need to run dedicated agents all the time. Unlike Microsoft-hosted agents, you have flexibility over the size and the image of machines on which agents run. You specify a virtual machine scale set, a number of agents to keep on standby, a maximum number of virtual machines in the scale set, and Azure Pipelines manages the scaling of your agents for you. For more information, see Azure virtual machine scale set agents.

    Adapted from community discussion by passtest100 · 2020-12-01 · 34 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by AZ-400 or CertExamHQ.

    1. P

       passtest100

       2020-12-01

       34 upvotes

       Should be C It requires self-hosted agent rather than Microsoft-hosted agent. It is better to use scale set according to the following link https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser Azure virtual machine scale set agents Azure virtual machine scale set agents are a form of self-hosted agents that can be auto-scaled to meet your demands. This elasticity reduces your need to run dedicated agents all the time. Unlike Microsoft-hosted agents, you have flexibility over the size and the image of machines on which agents run. You specify a virtual machine scale set, a number of agents to keep on standby, a maximum number of virtual machines in the scale set, and Azure Pipelines manages the scaling of your agents for you. For more information, see Azure virtual machine scale set agents.

    2. L

       lugospod

       2022-02-04

       15 upvotes

       Got this January 2022. Container services...got 100% on that part.

    3. P

       poplovic

       2021-09-19

       10 upvotes

       there are two questions in this problem 1. could ACI be used in the scenario when a self-hosted agent is used? It is a 'Yes' 2. compared with VMSS, is ACI cheaper? It is a "Yes", https://docs.microsoft.com/en-us/azure/container-instances/container-instances-restart-policy "The ease and speed of deploying containers in Azure Container Instances provides a compelling platform for executing run-once tasks like build, test, and image rendering in a container instance. With a configurable restart policy, you can specify that your containers are stopped when their processes have completed. Because container instances are billed by the second, you're charged only for the compute resources used while the container executing your task is running." here is the solution with details https://devblogs.microsoft.com/devops/azure-devops-agents-on-azure-container-instances-aci/

    4. E

       ETKap

       2021-01-06

       9 upvotes

       C is correct. You can also configure the scale set agent pool to have zero agents on standby to save cost. https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser#faq

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-400 practice, question 1 of 25