100% Latest & Updated Microsoft AZ-400 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 290
An infrastructure package uses date-based releases but a backported fix receives an ambiguous version older than the running deployment. What is the MOST important consequence if this issue remains unresolved?
- Unreviewed dependencies can be consumed by production services despite passing their own source-control checks.
- Dependency substitution or disappearance can make releases unreproducible or inject malicious code.
- Premature artifact deletion can make incident reconstruction and safe restoration impossible.
- Ambiguous baseline versions make rollback, compliance evidence, and vulnerability remediation unreliable.
Explanation
Correct Answer
D:Ambiguous baseline versions make rollback, compliance evidence, and vulnerability remediation unreliable. This is the directly relevant business or security consequence of calver version coordination for frequent infrastructure modules. Root cause: Date-based versions communicate release timing but do not by themselves establish patch lineage or artifact content.
Incorrect Answers
A:Unreviewed dependencies can be consumed by production services despite passing their own source-control checks. That risk is relevant to azure artifacts feed views for verified package promotion, but the specific unresolved condition here concerns calver version coordination for frequent infrastructure modules and has a different direct consequence.
B:Dependency substitution or disappearance can make releases unreproducible or inject malicious code. That risk is relevant to upstream feed sources and dependency cache integrity, but the specific unresolved condition here concerns calver version coordination for frequent infrastructure modules and has a different direct consequence.
C:Premature artifact deletion can make incident reconstruction and safe restoration impossible. That risk is relevant to build artifact retention and reproducible rollback windows, but the specific unresolved condition here concerns calver version coordination for frequent infrastructure modules and has a different direct consequence.
Question 291
A team tests a compiled executable in staging but rebuilds the same branch in production with newer dependencies. What action is MOST appropriate given these constraints?
- Define version-specific artifact retention and immutable references aligned to recovery and evidence requirements.
- Publish artifacts to controlled Azure Artifacts feeds and promote verified package versions through appropriate feed views.
- Publish uniquely identified pipeline artifacts and reuse the same tested run output across all environments.
- Define a consistent CalVer and backport convention with immutable artifacts and explicit environment adoption records.
Explanation
Correct Answer
C:Publish uniquely identified pipeline artifacts and reuse the same tested run output across all environments. Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software. Production may contain software not covered by earlier quality and security gates.
Incorrect Answers
A:Define version-specific artifact retention and immutable references aligned to recovery and evidence requirements. That applies to build artifact retention and reproducible rollback windows, not pipeline artifact identity and cross-stage immutability.
B:Publish artifacts to controlled Azure Artifacts feeds and promote verified package versions through appropriate feed views. That applies to azure artifacts feed views for verified package promotion, not pipeline artifact identity and cross-stage immutability.
D:Define a consistent CalVer and backport convention with immutable artifacts and explicit environment adoption records. That applies to calver version coordination for frequent infrastructure modules, not pipeline artifact identity and cross-stage immutability.
Question 292
A team tests a compiled executable in staging but rebuilds the same branch in production with newer dependencies. Which test MOST directly confirms the solution?
- Compare deployment manifests and published date versions to validate the exact baseline on representative hosts.
- Test package publishing and download with restricted test workflows and confirm unauthorized repositories cannot pull it.
- Rebuild a recorded release against the approved feed and compare exact package versions and checksums.
- Compare source revision, pipeline run ID, and artifact hash in test approval and production deployment logs.
Explanation
Correct Answer
D:Compare source revision, pipeline run ID, and artifact hash in test approval and production deployment logs. Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
Incorrect Answers
A:Compare deployment manifests and published date versions to validate the exact baseline on representative hosts. That applies to calver version coordination for frequent infrastructure modules, not pipeline artifact identity and cross-stage immutability.
B:Test package publishing and download with restricted test workflows and confirm unauthorized repositories cannot pull it. That applies to github packages access using least-privilege workflow credentials, not pipeline artifact identity and cross-stage immutability.
C:Rebuild a recorded release against the approved feed and compare exact package versions and checksums. That applies to upstream feed sources and dependency cache integrity, not pipeline artifact identity and cross-stage immutability.
Question 293
A team tests a compiled executable in staging but rebuilds the same branch in production with newer dependencies. Which DevOps implementation principle BEST explains the issue?
- Dependency-resolution order and namespace trust can allow an external package to impersonate a private library.
- A rollback plan depends on preserving the actual validated bytes, not just the source commit or pipeline log.
- Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
- Date-based versions communicate release timing but do not by themselves establish patch lineage or artifact content.
Explanation
Correct Answer
C:Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software. Production may contain software not covered by earlier quality and security gates.
Incorrect Answers
A:Dependency-resolution order and namespace trust can allow an external package to impersonate a private library. That applies to package feed namespace protection and dependency confusion, not controlling principle for pipeline artifact identity and cross-stage immutability.
B:A rollback plan depends on preserving the actual validated bytes, not just the source commit or pipeline log. That applies to build artifact retention and reproducible rollback windows, not controlling principle for pipeline artifact identity and cross-stage immutability.
D:Date-based versions communicate release timing but do not by themselves establish patch lineage or artifact content. That applies to calver version coordination for frequent infrastructure modules, not controlling principle for pipeline artifact identity and cross-stage immutability.
Question 294
A team tests a compiled executable in staging but rebuilds the same branch in production with newer dependencies. What preventive practice should be maintained after the fix?
- Review retention exceptions for supported versions and archive release digests before automatic cleanup.
- Enforce run-specific artifact references and reject mismatches in release-stage checks.
- Document emergency patch numbering and link every calendar version to an immutable build digest.
- Audit upstream-source changes and implement dependency lock files and package provenance checks.
Explanation
Correct Answer
B:Enforce run-specific artifact references and reject mismatches in release-stage checks. Production may contain software not covered by earlier quality and security gates.
Incorrect Answers
A:Review retention exceptions for supported versions and archive release digests before automatic cleanup. This helps sustain a control for build artifact retention and reproducible rollback windows; it does not directly stop recurrence of pipeline artifact identity and cross-stage immutability described in this case.
C:Document emergency patch numbering and link every calendar version to an immutable build digest.
D:Audit upstream-source changes and implement dependency lock files and package provenance checks. This helps sustain a control for upstream feed sources and dependency cache integrity; it does not directly stop recurrence of pipeline artifact identity and cross-stage immutability described in this case.
Question 295
A team tests a compiled executable in staging but rebuilds the same branch in production with newer dependencies. What outcome most clearly explains the business impact?
- Consumers may silently adopt breaking updates and experience preventable production failures.
- Production may contain software not covered by earlier quality and security gates.
- Unreviewed dependencies can be consumed by production services despite passing their own source-control checks.
- A dependency confusion attack may insert attacker-controlled code into otherwise reviewed builds.
Explanation
Correct Answer
B:Production may contain software not covered by earlier quality and security gates. This is the directly relevant business or security consequence of pipeline artifact identity and cross-stage immutability. Root cause: Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
Incorrect Answers
A:Consumers may silently adopt breaking updates and experience preventable production failures. That risk is relevant to semantic versioning for shared api contract packages, but the specific unresolved condition here concerns pipeline artifact identity and cross-stage immutability and has a different direct consequence.
C:Unreviewed dependencies can be consumed by production services despite passing their own source-control checks. That risk is relevant to azure artifacts feed views for verified package promotion, but the specific unresolved condition here concerns pipeline artifact identity and cross-stage immutability and has a different direct consequence.
D:A dependency confusion attack may insert attacker-controlled code into otherwise reviewed builds. That risk is relevant to package feed namespace protection and dependency confusion, but the specific unresolved condition here concerns pipeline artifact identity and cross-stage immutability and has a different direct consequence.
Question 296
An Azure Pipeline deploy stage downloads a latest artifact rather than the package produced by its approved build run. What change should the DevOps engineer implement FIRST for the stated Azure DevOps requirement?
- Define version-specific artifact retention and immutable references aligned to recovery and evidence requirements.
- Publish uniquely identified pipeline artifacts and reuse the same tested run output across all environments.
- Define a consistent CalVer and backport convention with immutable artifacts and explicit environment adoption records.
- Publish artifacts to controlled Azure Artifacts feeds and promote verified package versions through appropriate feed views.
Explanation
Correct Answer
B:Publish uniquely identified pipeline artifacts and reuse the same tested run output across all environments. Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software. Production may contain software not covered by earlier quality and security gates.
Incorrect Answers
A:Define version-specific artifact retention and immutable references aligned to recovery and evidence requirements. That applies to build artifact retention and reproducible rollback windows, not pipeline artifact identity and cross-stage immutability.
C:Define a consistent CalVer and backport convention with immutable artifacts and explicit environment adoption records. That applies to calver version coordination for frequent infrastructure modules, not pipeline artifact identity and cross-stage immutability.
D:Publish artifacts to controlled Azure Artifacts feeds and promote verified package versions through appropriate feed views. That applies to azure artifacts feed views for verified package promotion, not pipeline artifact identity and cross-stage immutability.
Question 297
An Azure Pipeline deploy stage downloads a latest artifact rather than the package produced by its approved build run. What check would most directly verify this Microsoft DevOps control?
- Test package publishing and download with restricted test workflows and confirm unauthorized repositories cannot pull it.
- Compare deployment manifests and published date versions to validate the exact baseline on representative hosts.
- Rebuild a recorded release against the approved feed and compare exact package versions and checksums.
- Compare source revision, pipeline run ID, and artifact hash in test approval and production deployment logs.
Explanation
Correct Answer
D:Compare source revision, pipeline run ID, and artifact hash in test approval and production deployment logs. Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
Incorrect Answers
A:Test package publishing and download with restricted test workflows and confirm unauthorized repositories cannot pull it. That applies to github packages access using least-privilege workflow credentials, not pipeline artifact identity and cross-stage immutability.
B:Compare deployment manifests and published date versions to validate the exact baseline on representative hosts. That applies to calver version coordination for frequent infrastructure modules, not pipeline artifact identity and cross-stage immutability.
C:Rebuild a recorded release against the approved feed and compare exact package versions and checksums. That applies to upstream feed sources and dependency cache integrity, not pipeline artifact identity and cross-stage immutability.
Question 298
An Azure Pipeline deploy stage downloads a latest artifact rather than the package produced by its approved build run. Which DevOps implementation principle BEST explains the issue?
- Package registries need separately managed publish and consume permissions, not blanket source repository ownership.
- Date-based versions communicate release timing but do not by themselves establish patch lineage or artifact content.
- Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
- A rollback plan depends on preserving the actual validated bytes, not just the source commit or pipeline log.
Explanation
Correct Answer
C:Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software. Production may contain software not covered by earlier quality and security gates.
Incorrect Answers
A:Package registries need separately managed publish and consume permissions, not blanket source repository ownership. That applies to github packages access using least-privilege workflow credentials, not controlling principle for pipeline artifact identity and cross-stage immutability.
B:Date-based versions communicate release timing but do not by themselves establish patch lineage or artifact content. That applies to calver version coordination for frequent infrastructure modules, not controlling principle for pipeline artifact identity and cross-stage immutability.
D:A rollback plan depends on preserving the actual validated bytes, not just the source commit or pipeline log. That applies to build artifact retention and reproducible rollback windows, not controlling principle for pipeline artifact identity and cross-stage immutability.
Question 299
An Azure Pipeline deploy stage downloads a latest artifact rather than the package produced by its approved build run. What preventive practice should be maintained after the fix?
- Review retention exceptions for supported versions and archive release digests before automatic cleanup.
- Audit upstream-source changes and implement dependency lock files and package provenance checks.
- Enforce run-specific artifact references and reject mismatches in release-stage checks.
- Require changelog review and compatibility validation before publishing shared package versions.
Explanation
Correct Answer
C:Enforce run-specific artifact references and reject mismatches in release-stage checks. Production may contain software not covered by earlier quality and security gates.
Incorrect Answers
A:Review retention exceptions for supported versions and archive release digests before automatic cleanup. This helps sustain a control for build artifact retention and reproducible rollback windows; it does not directly stop recurrence of pipeline artifact identity and cross-stage immutability described in this case.
B:Audit upstream-source changes and implement dependency lock files and package provenance checks. This helps sustain a control for upstream feed sources and dependency cache integrity; it does not directly stop recurrence of pipeline artifact identity and cross-stage immutability described in this case.
D:Require changelog review and compatibility validation before publishing shared package versions. This helps sustain a control for semantic versioning for shared api contract packages; it does not directly stop recurrence of pipeline artifact identity and cross-stage immutability described in this case.
Question 300
An Azure Pipeline deploy stage downloads a latest artifact rather than the package produced by its approved build run. Choose THREE measures that implement and verify an effective Azure DevOps response to this specific situation. (Choose THREE.)
- Dismiss the known risk for pipeline artifact identity and cross-stage immutability and keep no evidence or accountable owner after deployment.
- Bypass review and testing for pipeline artifact identity and cross-stage immutability whenever the release deadline is urgent, applying the change to production immediately.
- Compare source revision, pipeline run ID, and artifact hash in test approval and production deployment logs.
- Enforce run-specific artifact references and reject mismatches in release-stage checks.
- Publish uniquely identified pipeline artifacts and reuse the same tested run output across all environments.
- Declare pipeline artifact identity and cross-stage immutability successful solely from a green pipeline status and skip checking its actual control outcome.
Explanation
Correct Answers
C:Compare source revision, pipeline run ID, and artifact hash in test approval and production deployment logs. Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
D:Enforce run-specific artifact references and reject mismatches in release-stage checks. Production may contain software not covered by earlier quality and security gates.
E:Publish uniquely identified pipeline artifacts and reuse the same tested run output across all environments. Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software. Production may contain software not covered by earlier quality and security gates.
Incorrect Answers
A:Dismiss the known risk for pipeline artifact identity and cross-stage immutability and keep no evidence or accountable owner after deployment. It conflicts with the stated operating condition: Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
B:Bypass review and testing for pipeline artifact identity and cross-stage immutability whenever the release deadline is urgent, applying the change to production immediately. It conflicts with the stated operating condition: Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
F:Declare pipeline artifact identity and cross-stage immutability successful solely from a green pipeline status and skip checking its actual control outcome. It conflicts with the stated operating condition: Rebuilding or selecting mutable latest artifacts breaks the chain between verified tests and deployed software.
Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Tests