100% Latest & Updated Microsoft AZ-400 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 140
A team cherry-picks a security fix between branches and accidentally includes unrelated commits that are not authorized for production. Choose TWO measures that implement and verify an effective Azure DevOps response to this specific situation. (Choose TWO.)
- Compare cherry-pick commit identities, diff scope, approvals, and test runs across hotfix and trunk branches.
- Bypass review and testing for release branching and hotfix cherry-pick integrity whenever the release deadline is urgent, applying the change to production immediately.
- Dismiss the known risk for release branching and hotfix cherry-pick integrity and keep no evidence or accountable owner after deployment.
- Apply a documented release-branch and hotfix strategy with traceable cherry-picks, conflict resolution, and back-merges.
- Declare release branching and hotfix cherry-pick integrity successful solely from a green pipeline status and skip checking its actual control outcome.
Explanation
Correct Answers
A:Compare cherry-pick commit identities, diff scope, approvals, and test runs across hotfix and trunk branches. A hotfix must be portable between supported releases without silently omitting future development or widening its scope.
D:Apply a documented release-branch and hotfix strategy with traceable cherry-picks, conflict resolution, and back-merges. A hotfix must be portable between supported releases without silently omitting future development or widening its scope. A defect can reappear in the next release or unrelated code can enter an emergency production patch.
Incorrect Answers
B:Bypass review and testing for release branching and hotfix cherry-pick integrity whenever the release deadline is urgent, applying the change to production immediately. It conflicts with the stated operating condition: A hotfix must be portable between supported releases without silently omitting future development or widening its scope.
C:Dismiss the known risk for release branching and hotfix cherry-pick integrity and keep no evidence or accountable owner after deployment. It conflicts with the stated operating condition: A hotfix must be portable between supported releases without silently omitting future development or widening its scope.
E:Declare release branching and hotfix cherry-pick integrity successful solely from a green pipeline status and skip checking its actual control outcome. It conflicts with the stated operating condition: A hotfix must be portable between supported releases without silently omitting future development or widening its scope.
Question 141
A repository permits direct pushes to main even though the team requires two reviews and successful security scans. Which implementation BEST addresses the operational issue?
- Use small short-lived branches, protected trunk integration, and fast automated tests with feature flags for unfinished features.
- Require meaningful Azure Repos build validation and independent reviewers for sensitive branches or paths.
- Configure protected branches with required status checks, reviewer thresholds, and tightly scoped bypass authority.
- Use merge queues or equivalent up-to-date integration checks against the candidate merged branch state.
Explanation
Correct Answer
C:Configure protected branches with required status checks, reviewer thresholds, and tightly scoped bypass authority. Branch protection enforces declared integration conditions before code becomes a release baseline. Unauthorized or failing changes can reach the default branch while review statistics still appear healthy.
Incorrect Answers
A:Use small short-lived branches, protected trunk integration, and fast automated tests with feature flags for unfinished features. That applies to trunk-based development with short-lived feature branches, not github branch protection and mandatory status checks.
B:Require meaningful Azure Repos build validation and independent reviewers for sensitive branches or paths. That applies to azure repos branch policies and reviewer separation, not github branch protection and mandatory status checks.
D:Use merge queues or equivalent up-to-date integration checks against the candidate merged branch state. That applies to merge queue revalidation of stale pull-request results, not github branch protection and mandatory status checks.
Question 142
A repository permits direct pushes to main even though the team requires two reviews and successful security scans. How should the team validate the intended result?
- Compare cherry-pick commit identities, diff scope, approvals, and test runs across hotfix and trunk branches.
- Attempt an unreviewed or failed-check merge under test identities and confirm protection rejects it.
- Measure branch age, merge conflicts, required check results, and code integration frequency across a release cycle.
- Submit a test PR with a missing independent approval and a failing build to confirm merge restrictions.
Explanation
Correct Answer
B:Attempt an unreviewed or failed-check merge under test identities and confirm protection rejects it. Branch protection enforces declared integration conditions before code becomes a release baseline.
Incorrect Answers
A:Compare cherry-pick commit identities, diff scope, approvals, and test runs across hotfix and trunk branches.
C:Measure branch age, merge conflicts, required check results, and code integration frequency across a release cycle.
D:Submit a test PR with a missing independent approval and a failing build to confirm merge restrictions. That applies to azure repos branch policies and reviewer separation, not github branch protection and mandatory status checks.
Question 143
A repository permits direct pushes to main even though the team requires two reviews and successful security scans. Which DevOps implementation principle BEST explains the issue?
- Branch protection enforces declared integration conditions before code becomes a release baseline.
- Checks from an old branch base do not prove the actual combined merge result is safe.
- A policy is effective only if its approval separation and validation pipeline apply to the actual changed code.
- A hotfix must be portable between supported releases without silently omitting future development or widening its scope.
Explanation
Correct Answer
A:Branch protection enforces declared integration conditions before code becomes a release baseline. Unauthorized or failing changes can reach the default branch while review statistics still appear healthy.
Incorrect Answers
B:Checks from an old branch base do not prove the actual combined merge result is safe.
C:A policy is effective only if its approval separation and validation pipeline apply to the actual changed code. That applies to azure repos branch policies and reviewer separation, not controlling principle for github branch protection and mandatory status checks.
D:A hotfix must be portable between supported releases without silently omitting future development or widening its scope. That applies to release branching and hotfix cherry-pick integrity, not controlling principle for github branch protection and mandatory status checks.
Question 144
A repository permits direct pushes to main even though the team requires two reviews and successful security scans. What preventive practice should be maintained after the fix?
- Review protection rule changes and approved bypasses with audit logs and periodic ownership attestation.
- Set branch-age review and required PR checks and encourage incremental compatible changes.
- Monitor merge queue failures and required-check freshness as repository activity increases.
- Inspect branch policy configuration after restructuring repositories, paths, and approver groups.
Explanation
Correct Answer
A:Review protection rule changes and approved bypasses with audit logs and periodic ownership attestation. Unauthorized or failing changes can reach the default branch while review statistics still appear healthy.
Incorrect Answers
B:Set branch-age review and required PR checks and encourage incremental compatible changes. This helps sustain a control for trunk-based development with short-lived feature branches; it does not directly stop recurrence of github branch protection and mandatory status checks described in this case.
C:Monitor merge queue failures and required-check freshness as repository activity increases. This helps sustain a control for merge queue revalidation of stale pull-request results; it does not directly stop recurrence of github branch protection and mandatory status checks described in this case.
D:Inspect branch policy configuration after restructuring repositories, paths, and approver groups. This helps sustain a control for azure repos branch policies and reviewer separation; it does not directly stop recurrence of github branch protection and mandatory status checks described in this case.
Question 145
A repository permits direct pushes to main even though the team requires two reviews and successful security scans. What outcome most clearly explains the business impact?
- Self-approved or incorrectly validated edits can bypass intended segregation of duties.
- Individually green pull requests can still create a broken integration branch when merged together.
- Unauthorized or failing changes can reach the default branch while review statistics still appear healthy.
- A defect can reappear in the next release or unrelated code can enter an emergency production patch.
Explanation
Correct Answer
C:Unauthorized or failing changes can reach the default branch while review statistics still appear healthy. This is the directly relevant business or security consequence of github branch protection and mandatory status checks. Root cause: Branch protection enforces declared integration conditions before code becomes a release baseline.
Incorrect Answers
A:Self-approved or incorrectly validated edits can bypass intended segregation of duties. That risk is relevant to azure repos branch policies and reviewer separation, but the specific unresolved condition here concerns github branch protection and mandatory status checks and has a different direct consequence.
B:Individually green pull requests can still create a broken integration branch when merged together. That risk is relevant to merge queue revalidation of stale pull-request results, but the specific unresolved condition here concerns github branch protection and mandatory status checks and has a different direct consequence.
D:A defect can reappear in the next release or unrelated code can enter an emergency production patch. That risk is relevant to release branching and hotfix cherry-pick integrity, but the specific unresolved condition here concerns github branch protection and mandatory status checks and has a different direct consequence.
Question 146
An engineer disables a required CI check to merge urgent work, bypassing the enterprise protection rule unnoticed. Which solution should be prioritized to resolve the stated failure?
- Use small short-lived branches, protected trunk integration, and fast automated tests with feature flags for unfinished features.
- Require meaningful Azure Repos build validation and independent reviewers for sensitive branches or paths.
- Use merge queues or equivalent up-to-date integration checks against the candidate merged branch state.
- Configure protected branches with required status checks, reviewer thresholds, and tightly scoped bypass authority.
Explanation
Correct Answer
D:Configure protected branches with required status checks, reviewer thresholds, and tightly scoped bypass authority. Branch protection enforces declared integration conditions before code becomes a release baseline. Unauthorized or failing changes can reach the default branch while review statistics still appear healthy.
Incorrect Answers
A:Use small short-lived branches, protected trunk integration, and fast automated tests with feature flags for unfinished features. That applies to trunk-based development with short-lived feature branches, not github branch protection and mandatory status checks.
B:Require meaningful Azure Repos build validation and independent reviewers for sensitive branches or paths. That applies to azure repos branch policies and reviewer separation, not github branch protection and mandatory status checks.
C:Use merge queues or equivalent up-to-date integration checks against the candidate merged branch state. That applies to merge queue revalidation of stale pull-request results, not github branch protection and mandatory status checks.
Question 147
An engineer disables a required CI check to merge urgent work, bypassing the enterprise protection rule unnoticed. Which evidence would BEST demonstrate that the fix operates as intended?
- Submit a test PR with a missing independent approval and a failing build to confirm merge restrictions.
- Attempt an unreviewed or failed-check merge under test identities and confirm protection rejects it.
- Compare cherry-pick commit identities, diff scope, approvals, and test runs across hotfix and trunk branches.
- Measure branch age, merge conflicts, required check results, and code integration frequency across a release cycle.
Explanation
Correct Answer
B:Attempt an unreviewed or failed-check merge under test identities and confirm protection rejects it. Branch protection enforces declared integration conditions before code becomes a release baseline.
Incorrect Answers
A:Submit a test PR with a missing independent approval and a failing build to confirm merge restrictions. That applies to azure repos branch policies and reviewer separation, not github branch protection and mandatory status checks.
C:Compare cherry-pick commit identities, diff scope, approvals, and test runs across hotfix and trunk branches.
D:Measure branch age, merge conflicts, required check results, and code integration frequency across a release cycle.
Question 148
An engineer disables a required CI check to merge urgent work, bypassing the enterprise protection rule unnoticed. Which DevOps implementation principle BEST explains the issue?
- Branch protection enforces declared integration conditions before code becomes a release baseline.
- Trunk-based flow reduces integration risk by merging small changes frequently while protecting production exposure separately.
- A policy is effective only if its approval separation and validation pipeline apply to the actual changed code.
- Checks from an old branch base do not prove the actual combined merge result is safe.
Explanation
Correct Answer
A:Branch protection enforces declared integration conditions before code becomes a release baseline. Unauthorized or failing changes can reach the default branch while review statistics still appear healthy.
Incorrect Answers
B:Trunk-based flow reduces integration risk by merging small changes frequently while protecting production exposure separately. That applies to trunk-based development with short-lived feature branches, not controlling principle for github branch protection and mandatory status checks.
C:A policy is effective only if its approval separation and validation pipeline apply to the actual changed code. That applies to azure repos branch policies and reviewer separation, not controlling principle for github branch protection and mandatory status checks.
D:Checks from an old branch base do not prove the actual combined merge result is safe.
Question 149
An engineer disables a required CI check to merge urgent work, bypassing the enterprise protection rule unnoticed. What preventive practice should be maintained after the fix?
- Set branch-age review and required PR checks and encourage incremental compatible changes.
- Inspect branch policy configuration after restructuring repositories, paths, and approver groups.
- Require back-merge completion and branch comparison as part of hotfix closure.
- Review protection rule changes and approved bypasses with audit logs and periodic ownership attestation.
Explanation
Correct Answer
D:Review protection rule changes and approved bypasses with audit logs and periodic ownership attestation. Unauthorized or failing changes can reach the default branch while review statistics still appear healthy.
Incorrect Answers
A:Set branch-age review and required PR checks and encourage incremental compatible changes. This helps sustain a control for trunk-based development with short-lived feature branches; it does not directly stop recurrence of github branch protection and mandatory status checks described in this case.
B:Inspect branch policy configuration after restructuring repositories, paths, and approver groups. This helps sustain a control for azure repos branch policies and reviewer separation; it does not directly stop recurrence of github branch protection and mandatory status checks described in this case.
C:Require back-merge completion and branch comparison as part of hotfix closure. This helps sustain a control for release branching and hotfix cherry-pick integrity; it does not directly stop recurrence of github branch protection and mandatory status checks described in this case.
Question 150
An engineer disables a required CI check to merge urgent work, bypassing the enterprise protection rule unnoticed. What outcome most clearly explains the business impact?
- A defect can reappear in the next release or unrelated code can enter an emergency production patch.
- Self-approved or incorrectly validated edits can bypass intended segregation of duties.
- Unauthorized or failing changes can reach the default branch while review statistics still appear healthy.
- Individually green pull requests can still create a broken integration branch when merged together.
Explanation
Correct Answer
C:Unauthorized or failing changes can reach the default branch while review statistics still appear healthy. This is the directly relevant business or security consequence of github branch protection and mandatory status checks. Root cause: Branch protection enforces declared integration conditions before code becomes a release baseline.
Incorrect Answers
A:A defect can reappear in the next release or unrelated code can enter an emergency production patch. That risk is relevant to release branching and hotfix cherry-pick integrity, but the specific unresolved condition here concerns github branch protection and mandatory status checks and has a different direct consequence.
B:Self-approved or incorrectly validated edits can bypass intended segregation of duties. That risk is relevant to azure repos branch policies and reviewer separation, but the specific unresolved condition here concerns github branch protection and mandatory status checks and has a different direct consequence.
D:Individually green pull requests can still create a broken integration branch when merged together. That risk is relevant to merge queue revalidation of stale pull-request results, but the specific unresolved condition here concerns github branch protection and mandatory status checks and has a different direct consequence.
Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Tests