100% Latest & Updated Microsoft AZ-400 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 540
An Azure Pipeline service connection fails after credential rotation because its workload identity federation subject no longer matches. Choose TWO measures that implement and verify an effective Azure DevOps response to this specific situation. (Choose TWO.)
- Declare federated workload identity for azure deployment workflows successful solely from a green pipeline status and skip checking its actual control outcome.
- Inspect the federated subject and audience and run an authorized and unauthorized test deployment.
- Configure supported OpenID Connect workload identity federation with scoped Entra app or managed identity trust claims.
- Bypass review and testing for federated workload identity for azure deployment workflows whenever the release deadline is urgent, applying the change to production immediately.
- Dismiss the known risk for federated workload identity for azure deployment workflows and keep no evidence or accountable owner after deployment.
Explanation
Correct Answers
B:Inspect the federated subject and audience and run an authorized and unauthorized test deployment. Federated credentials use short-lived token exchange and must bind trust to the intended repository, branch, or service connection.
C:Configure supported OpenID Connect workload identity federation with scoped Entra app or managed identity trust claims. Federated credentials use short-lived token exchange and must bind trust to the intended repository, branch, or service connection. Overbroad federation or leaked permanent credentials may permit unauthorized Azure deployments.
Incorrect Answers
A:Declare federated workload identity for azure deployment workflows successful solely from a green pipeline status and skip checking its actual control outcome. It conflicts with the stated operating condition: Federated credentials use short-lived token exchange and must bind trust to the intended repository, branch, or service connection.
D:Bypass review and testing for federated workload identity for azure deployment workflows whenever the release deadline is urgent, applying the change to production immediately. It conflicts with the stated operating condition: Federated credentials use short-lived token exchange and must bind trust to the intended repository, branch, or service connection.
E:Dismiss the known risk for federated workload identity for azure deployment workflows and keep no evidence or accountable owner after deployment. It conflicts with the stated operating condition: Federated credentials use short-lived token exchange and must bind trust to the intended repository, branch, or service connection.
Question 541
A retail API is updated directly in its production App Service slot and customer sessions fail during startup. Which implementation BEST addresses the operational issue?
- Deploy to a separate App Service staging slot, validate configuration and endpoints, then use controlled slot swap with rollback.
- Connect representative application health checks and alarms to pipeline rollback or safe deployment halt decisions.
- Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks.
- Use App Configuration Feature Manager targeting and controlled flag rollout independently from application binaries.
Explanation
Correct Answer
A:Deploy to a separate App Service staging slot, validate configuration and endpoints, then use controlled slot swap with rollback. Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood. Misconfigured swaps can move sensitive settings or send customers to an unready application.
Incorrect Answers
B:Connect representative application health checks and alarms to pipeline rollback or safe deployment halt decisions.
C:Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks.
D:Use App Configuration Feature Manager targeting and controlled flag rollout independently from application binaries.
Question 542
A retail API is updated directly in its production App Service slot and customer sessions fail during startup. How should the team validate the intended result?
- Run before and after swap probes and inspect effective slot settings, warmup behavior, and rollback outcome.
- Verify trigger state, dependent storage connections, slot configuration, and post-swap invocation outcome.
- Toggle the flag in a test cohort and verify both feature behavior and telemetry before expanding exposure.
- Test both application versions against intermediate schema and rehearse rollback before removing obsolete columns.
Explanation
Correct Answer
A:Run before and after swap probes and inspect effective slot settings, warmup behavior, and rollback outcome. Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood.
Incorrect Answers
B:Verify trigger state, dependent storage connections, slot configuration, and post-swap invocation outcome.
C:Toggle the flag in a test cohort and verify both feature behavior and telemetry before expanding exposure.
D:Test both application versions against intermediate schema and rehearse rollback before removing obsolete columns.
Question 543
A retail API is updated directly in its production App Service slot and customer sessions fail during startup. Which design distinction is MOST relevant in these conditions?
- Deployment sequencing and contract compatibility protect distributed systems from partial version mismatches.
- Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood.
- Feature flags separate code deployment from feature availability and must still be governed as live configuration changes.
- Urgency can shorten process timing but does not remove the need for authorized, traceable production changes.
Explanation
Correct Answer
B:Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood. Misconfigured swaps can move sensitive settings or send customers to an unready application.
Incorrect Answers
A:Deployment sequencing and contract compatibility protect distributed systems from partial version mismatches.
C:Feature flags separate code deployment from feature availability and must still be governed as live configuration changes.
D:Urgency can shorten process timing but does not remove the need for authorized, traceable production changes.
Question 544
A retail API is updated directly in its production App Service slot and customer sessions fail during startup. Which ongoing guardrail would BEST prevent this problem from recurring?
- Test slot-specific settings and rollback under realistic traffic before high-impact releases.
- Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes.
- Automate pre-swap validation and periodically review slot-sticky settings when triggers change.
- Restrict tag changes and retain deployment digests and rollback images for supported releases.
Explanation
Correct Answer
A:Test slot-specific settings and rollback under realistic traffic before high-impact releases. Misconfigured swaps can move sensitive settings or send customers to an unready application.
Incorrect Answers
B:Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes.
C:Automate pre-swap validation and periodically review slot-sticky settings when triggers change.
D:Restrict tag changes and retain deployment digests and rollback images for supported releases.
Question 545
A retail API is updated directly in its production App Service slot and customer sessions fail during startup. Which risk is directly created by the described failure?
- An ungoverned hotfix can introduce new defects or disappear from the next ordinary release.
- Poorly instrumented experiments can harm users or lead to unjustified product decisions.
- Misconfigured swaps can move sensitive settings or send customers to an unready application.
- Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
Explanation
Correct Answer
C:Misconfigured swaps can move sensitive settings or send customers to an unready application. This is the directly relevant business or security consequence of blue-green azure app service deployment slot swap and rollback. Root cause: Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood.
Incorrect Answers
A:An ungoverned hotfix can introduce new defects or disappear from the next ordinary release. That risk is relevant to hotfix release path with independent emergency approval, but the specific unresolved condition here concerns blue-green azure app service deployment slot swap and rollback and has a different direct consequence.
B:Poorly instrumented experiments can harm users or lead to unjustified product decisions. That risk is relevant to feature a-b experiments with telemetry and customer segmentation, but the specific unresolved condition here concerns blue-green azure app service deployment slot swap and rollback and has a different direct consequence.
D:Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases. That risk is relevant to aks readiness and rolling update capacity, but the specific unresolved condition here concerns blue-green azure app service deployment slot swap and rollback and has a different direct consequence.
Question 546
A candidate staging slot passes health checks but settings intended to remain slot-specific swap unexpectedly on promotion. Which solution should be prioritized to resolve the stated failure?
- Use App Configuration Feature Manager targeting and controlled flag rollout independently from application binaries.
- Deploy to a separate App Service staging slot, validate configuration and endpoints, then use controlled slot swap with rollback.
- Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks.
- Connect representative application health checks and alarms to pipeline rollback or safe deployment halt decisions.
Explanation
Correct Answer
B:Deploy to a separate App Service staging slot, validate configuration and endpoints, then use controlled slot swap with rollback. Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood. Misconfigured swaps can move sensitive settings or send customers to an unready application.
Incorrect Answers
A:Use App Configuration Feature Manager targeting and controlled flag rollout independently from application binaries.
C:Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks.
D:Connect representative application health checks and alarms to pipeline rollback or safe deployment halt decisions.
Question 547
A candidate staging slot passes health checks but settings intended to remain slot-specific swap unexpectedly on promotion. Which evidence would BEST demonstrate that the fix operates as intended?
- Test both application versions against intermediate schema and rehearse rollback before removing obsolete columns.
- Run before and after swap probes and inspect effective slot settings, warmup behavior, and rollback outcome.
- Toggle the flag in a test cohort and verify both feature behavior and telemetry before expanding exposure.
- Verify trigger state, dependent storage connections, slot configuration, and post-swap invocation outcome.
Explanation
Correct Answer
B:Run before and after swap probes and inspect effective slot settings, warmup behavior, and rollback outcome. Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood.
Incorrect Answers
A:Test both application versions against intermediate schema and rehearse rollback before removing obsolete columns.
C:Toggle the flag in a test cohort and verify both feature behavior and telemetry before expanding exposure.
D:Verify trigger state, dependent storage connections, slot configuration, and post-swap invocation outcome.
Question 548
A candidate staging slot passes health checks but settings intended to remain slot-specific swap unexpectedly on promotion. Which design distinction is MOST relevant in these conditions?
- Urgency can shorten process timing but does not remove the need for authorized, traceable production changes.
- Deployment sequencing and contract compatibility protect distributed systems from partial version mismatches.
- Feature flags separate code deployment from feature availability and must still be governed as live configuration changes.
- Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood.
Explanation
Correct Answer
D:Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood. Misconfigured swaps can move sensitive settings or send customers to an unready application.
Incorrect Answers
A:Urgency can shorten process timing but does not remove the need for authorized, traceable production changes.
B:Deployment sequencing and contract compatibility protect distributed systems from partial version mismatches.
C:Feature flags separate code deployment from feature availability and must still be governed as live configuration changes.
Question 549
A candidate staging slot passes health checks but settings intended to remain slot-specific swap unexpectedly on promotion. Which ongoing guardrail would BEST prevent this problem from recurring?
- Automate pre-swap validation and periodically review slot-sticky settings when triggers change.
- Restrict tag changes and retain deployment digests and rollback images for supported releases.
- Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes.
- Test slot-specific settings and rollback under realistic traffic before high-impact releases.
Explanation
Correct Answer
D:Test slot-specific settings and rollback under realistic traffic before high-impact releases. Misconfigured swaps can move sensitive settings or send customers to an unready application.
Incorrect Answers
A:Automate pre-swap validation and periodically review slot-sticky settings when triggers change.
B:Restrict tag changes and retain deployment digests and rollback images for supported releases.
C:Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes.
Question 550
A candidate staging slot passes health checks but settings intended to remain slot-specific swap unexpectedly on promotion. Which risk is directly created by the described failure?
- An ungoverned hotfix can introduce new defects or disappear from the next ordinary release.
- Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
- Poorly instrumented experiments can harm users or lead to unjustified product decisions.
- Misconfigured swaps can move sensitive settings or send customers to an unready application.
Explanation
Correct Answer
D:Misconfigured swaps can move sensitive settings or send customers to an unready application. This is the directly relevant business or security consequence of blue-green azure app service deployment slot swap and rollback. Root cause: Blue-green slot releases separate validation from production traffic, while sticky configuration must be understood.
Incorrect Answers
A:An ungoverned hotfix can introduce new defects or disappear from the next ordinary release. That risk is relevant to hotfix release path with independent emergency approval, but the specific unresolved condition here concerns blue-green azure app service deployment slot swap and rollback and has a different direct consequence.
B:Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases. That risk is relevant to aks readiness and rolling update capacity, but the specific unresolved condition here concerns blue-green azure app service deployment slot swap and rollback and has a different direct consequence.
C:Poorly instrumented experiments can harm users or lead to unjustified product decisions. That risk is relevant to feature a-b experiments with telemetry and customer segmentation, but the specific unresolved condition here concerns blue-green azure app service deployment slot swap and rollback and has a different direct consequence.
Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Tests