Microsoft AZ-400 Exam Dumps, Practice Test Questions

100% Latest & Updated Microsoft AZ-400 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Microsoft AZ-400 Premium Bundle
$79.97
$59.98

AZ-400 Premium Bundle

  • Premium File: 398 Questions & Answers. Last update: Nov 7, 2026
  • Training Course: 27 Video Lectures
  • Study Guide: 784 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

AZ-400 Premium Bundle

Microsoft AZ-400 Premium Bundle
  • Premium File: 398 Questions & Answers. Last update: Nov 7, 2026
  • Training Course: 27 Video Lectures
  • Study Guide: 784 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Microsoft AZ-400 Practice Test 61

Question 600

A production release has an error alarm but no automation to pause traffic or restore the prior revision. Choose THREE measures that implement and verify an effective Azure DevOps response to this specific situation. (Choose THREE.)

  1. Connect representative application health checks and alarms to pipeline rollback or safe deployment halt decisions.
  2. Periodically rehearse rollback while maintaining known-good artifacts and previous deployment manifests.
  3. Introduce a controlled bad revision and confirm the promotion stops and the prior healthy service is restored.
  4. Bypass review and testing for rollback on failed health gates in azure release pipelines whenever the release deadline is urgent, applying the change to production immediately.
  5. Dismiss the known risk for rollback on failed health gates in azure release pipelines and keep no evidence or accountable owner after deployment.
  6. Declare rollback on failed health gates in azure release pipelines successful solely from a green pipeline status and skip checking its actual control outcome.

Explanation

Correct Answers

A:

Connect representative application health checks and alarms to pipeline rollback or safe deployment halt decisions. Infrastructure task completion is not equivalent to customer-serving health after a software change. Without automatic detection and recovery, a defective rollout may remain live during manual incident diagnosis.

B:

Periodically rehearse rollback while maintaining known-good artifacts and previous deployment manifests. Without automatic detection and recovery, a defective rollout may remain live during manual incident diagnosis.

C:

Introduce a controlled bad revision and confirm the promotion stops and the prior healthy service is restored. Infrastructure task completion is not equivalent to customer-serving health after a software change.

Incorrect Answers

D:

Bypass review and testing for rollback on failed health gates in azure release pipelines whenever the release deadline is urgent, applying the change to production immediately. It conflicts with the stated operating condition: Infrastructure task completion is not equivalent to customer-serving health after a software change.

E:

Dismiss the known risk for rollback on failed health gates in azure release pipelines and keep no evidence or accountable owner after deployment. It conflicts with the stated operating condition: Infrastructure task completion is not equivalent to customer-serving health after a software change.

F:

Declare rollback on failed health gates in azure release pipelines successful solely from a green pipeline status and skip checking its actual control outcome. It conflicts with the stated operating condition: Infrastructure task completion is not equivalent to customer-serving health after a software change.

Question 601

An AKS manifest uses a mutable latest tag and a different image is pulled after staging acceptance. Which solution should be prioritized to resolve the stated failure?

  1. Implement staged ring or canary rollout with scoped traffic, objective health thresholds, and automatic rollback.
  2. Promote signed or validated ACR image digests with release manifests and narrow registry pull permissions.
  3. Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks.
  4. Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints.

Explanation

Correct Answer

B:

Promote signed or validated ACR image digests with release manifests and narrow registry pull permissions. Container tags may change; digests identify the actual immutable bytes that were scanned and deployed. Mutable container references can replace verified software with an unknown image and compromise rollback.

Incorrect Answers

A:

Implement staged ring or canary rollout with scoped traffic, objective health thresholds, and automatic rollback. That applies to progressive canary and ring-based production exposure, not acr image provenance and deployment by immutable digest.

C:

Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks. That applies to deployment dependencies and downstream api coordination, not acr image provenance and deployment by immutable digest.

D:

Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints. That applies to aks readiness and rolling update capacity, not acr image provenance and deployment by immutable digest.

Question 602

An AKS manifest uses a mutable latest tag and a different image is pulled after staging acceptance. Which evidence would BEST demonstrate that the fix operates as intended?

  1. Compare errors and customer transactions by release ring and confirm failed thresholds halt wider promotion.
  2. Replay the end-to-end service path before and after staged component upgrades and record compatible versions.
  3. Compare running pod image digests with the approved build and registry vulnerability evidence.
  4. Verify consistent variant assignment and compare conversion, error, and latency metrics for each cohort.

Explanation

Correct Answer

C:

Compare running pod image digests with the approved build and registry vulnerability evidence. Container tags may change; digests identify the actual immutable bytes that were scanned and deployed.

Incorrect Answers

A:

Compare errors and customer transactions by release ring and confirm failed thresholds halt wider promotion. That applies to progressive canary and ring-based production exposure, not acr image provenance and deployment by immutable digest.

B:

Replay the end-to-end service path before and after staged component upgrades and record compatible versions. That applies to deployment dependencies and downstream api coordination, not acr image provenance and deployment by immutable digest.

D:

Verify consistent variant assignment and compare conversion, error, and latency metrics for each cohort. That applies to feature a-b experiments with telemetry and customer segmentation, not acr image provenance and deployment by immutable digest.

Question 603

An AKS manifest uses a mutable latest tag and a different image is pulled after staging acceptance. Which design distinction is MOST relevant in these conditions?

  1. Infrastructure task completion is not equivalent to customer-serving health after a software change.
  2. Independent deployment stages may overlap in time, so schema compatibility must span both active application revisions.
  3. Deployment sequencing and contract compatibility protect distributed systems from partial version mismatches.
  4. Container tags may change; digests identify the actual immutable bytes that were scanned and deployed.

Explanation

Correct Answer

D:

Container tags may change; digests identify the actual immutable bytes that were scanned and deployed. Mutable container references can replace verified software with an unknown image and compromise rollback.

Incorrect Answers

A:

Infrastructure task completion is not equivalent to customer-serving health after a software change.

B:

Independent deployment stages may overlap in time, so schema compatibility must span both active application revisions. That applies to backward-compatible database schema deployment ordering, not controlling principle for acr image provenance and deployment by immutable digest.

C:

Deployment sequencing and contract compatibility protect distributed systems from partial version mismatches. That applies to deployment dependencies and downstream api coordination, not controlling principle for acr image provenance and deployment by immutable digest.

Question 604

An AKS manifest uses a mutable latest tag and a different image is pulled after staging acceptance. Which ongoing guardrail would BEST prevent this problem from recurring?

  1. Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes.
  2. Periodically rehearse rollback while maintaining known-good artifacts and previous deployment manifests.
  3. Restrict tag changes and retain deployment digests and rollback images for supported releases.
  4. Test slot-specific settings and rollback under realistic traffic before high-impact releases.

Explanation

Correct Answer

C:

Restrict tag changes and retain deployment digests and rollback images for supported releases. Mutable container references can replace verified software with an unknown image and compromise rollback.

Incorrect Answers

A:

Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes. This helps sustain a control for progressive canary and ring-based production exposure; it does not directly stop recurrence of acr image provenance and deployment by immutable digest described in this case.

B:

Periodically rehearse rollback while maintaining known-good artifacts and previous deployment manifests.

D:

Test slot-specific settings and rollback under realistic traffic before high-impact releases. This helps sustain a control for blue-green azure app service deployment slot swap and rollback; it does not directly stop recurrence of acr image provenance and deployment by immutable digest described in this case.

Question 605

An AKS manifest uses a mutable latest tag and a different image is pulled after staging acceptance. Which risk is directly created by the described failure?

  1. Mutable container references can replace verified software with an unknown image and compromise rollback.
  2. An incorrect function slot configuration can process data in the wrong environment or break event handling.
  3. An ungoverned hotfix can introduce new defects or disappear from the next ordinary release.
  4. Misconfigured swaps can move sensitive settings or send customers to an unready application.

Explanation

Correct Answer

A:

Mutable container references can replace verified software with an unknown image and compromise rollback. This is the directly relevant business or security consequence of acr image provenance and deployment by immutable digest. Root cause: Container tags may change; digests identify the actual immutable bytes that were scanned and deployed.

Incorrect Answers

B:

An incorrect function slot configuration can process data in the wrong environment or break event handling. That risk is relevant to azure functions deployment slots and settings isolation, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.

C:

An ungoverned hotfix can introduce new defects or disappear from the next ordinary release. That risk is relevant to hotfix release path with independent emergency approval, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.

D:

Misconfigured swaps can move sensitive settings or send customers to an unready application. That risk is relevant to blue-green azure app service deployment slot swap and rollback, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.

Question 606

A build pushes a container to Azure Container Registry but later loses evidence of which scanned image is in production. Which implementation BEST addresses the operational issue?

  1. Implement staged ring or canary rollout with scoped traffic, objective health thresholds, and automatic rollback.
  2. Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints.
  3. Promote signed or validated ACR image digests with release manifests and narrow registry pull permissions.
  4. Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks.

Explanation

Correct Answer

C:

Promote signed or validated ACR image digests with release manifests and narrow registry pull permissions. Container tags may change; digests identify the actual immutable bytes that were scanned and deployed. Mutable container references can replace verified software with an unknown image and compromise rollback.

Incorrect Answers

A:

Implement staged ring or canary rollout with scoped traffic, objective health thresholds, and automatic rollback. That applies to progressive canary and ring-based production exposure, not acr image provenance and deployment by immutable digest.

B:

Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints. That applies to aks readiness and rolling update capacity, not acr image provenance and deployment by immutable digest.

D:

Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks. That applies to deployment dependencies and downstream api coordination, not acr image provenance and deployment by immutable digest.

Question 607

A build pushes a container to Azure Container Registry but later loses evidence of which scanned image is in production. How should the team validate the intended result?

  1. Compare running pod image digests with the approved build and registry vulnerability evidence.
  2. Verify consistent variant assignment and compare conversion, error, and latency metrics for each cohort.
  3. Compare errors and customer transactions by release ring and confirm failed thresholds halt wider promotion.
  4. Replay the end-to-end service path before and after staged component upgrades and record compatible versions.

Explanation

Correct Answer

A:

Compare running pod image digests with the approved build and registry vulnerability evidence. Container tags may change; digests identify the actual immutable bytes that were scanned and deployed.

Incorrect Answers

B:

Verify consistent variant assignment and compare conversion, error, and latency metrics for each cohort. That applies to feature a-b experiments with telemetry and customer segmentation, not acr image provenance and deployment by immutable digest.

C:

Compare errors and customer transactions by release ring and confirm failed thresholds halt wider promotion. That applies to progressive canary and ring-based production exposure, not acr image provenance and deployment by immutable digest.

D:

Replay the end-to-end service path before and after staged component upgrades and record compatible versions. That applies to deployment dependencies and downstream api coordination, not acr image provenance and deployment by immutable digest.

Question 608

A build pushes a container to Azure Container Registry but later loses evidence of which scanned image is in production. Which design distinction is MOST relevant in these conditions?

  1. Deployment sequencing and contract compatibility protect distributed systems from partial version mismatches.
  2. Independent deployment stages may overlap in time, so schema compatibility must span both active application revisions.
  3. Infrastructure task completion is not equivalent to customer-serving health after a software change.
  4. Container tags may change; digests identify the actual immutable bytes that were scanned and deployed.

Explanation

Correct Answer

D:

Container tags may change; digests identify the actual immutable bytes that were scanned and deployed. Mutable container references can replace verified software with an unknown image and compromise rollback.

Incorrect Answers

A:

Deployment sequencing and contract compatibility protect distributed systems from partial version mismatches. That applies to deployment dependencies and downstream api coordination, not controlling principle for acr image provenance and deployment by immutable digest.

B:

Independent deployment stages may overlap in time, so schema compatibility must span both active application revisions. That applies to backward-compatible database schema deployment ordering, not controlling principle for acr image provenance and deployment by immutable digest.

C:

Infrastructure task completion is not equivalent to customer-serving health after a software change.

Question 609

A build pushes a container to Azure Container Registry but later loses evidence of which scanned image is in production. Which ongoing guardrail would BEST prevent this problem from recurring?

  1. Periodically rehearse rollback while maintaining known-good artifacts and previous deployment manifests.
  2. Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes.
  3. Restrict tag changes and retain deployment digests and rollback images for supported releases.
  4. Test slot-specific settings and rollback under realistic traffic before high-impact releases.

Explanation

Correct Answer

C:

Restrict tag changes and retain deployment digests and rollback images for supported releases. Mutable container references can replace verified software with an unknown image and compromise rollback.

Incorrect Answers

A:

Periodically rehearse rollback while maintaining known-good artifacts and previous deployment manifests.

B:

Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes. This helps sustain a control for progressive canary and ring-based production exposure; it does not directly stop recurrence of acr image provenance and deployment by immutable digest described in this case.

D:

Test slot-specific settings and rollback under realistic traffic before high-impact releases. This helps sustain a control for blue-green azure app service deployment slot swap and rollback; it does not directly stop recurrence of acr image provenance and deployment by immutable digest described in this case.

Question 610

A build pushes a container to Azure Container Registry but later loses evidence of which scanned image is in production. Which risk is directly created by the described failure?

  1. Misconfigured swaps can move sensitive settings or send customers to an unready application.
  2. An incorrect function slot configuration can process data in the wrong environment or break event handling.
  3. Mutable container references can replace verified software with an unknown image and compromise rollback.
  4. An ungoverned hotfix can introduce new defects or disappear from the next ordinary release.

Explanation

Correct Answer

C:

Mutable container references can replace verified software with an unknown image and compromise rollback. This is the directly relevant business or security consequence of acr image provenance and deployment by immutable digest. Root cause: Container tags may change; digests identify the actual immutable bytes that were scanned and deployed.

Incorrect Answers

A:

Misconfigured swaps can move sensitive settings or send customers to an unready application. That risk is relevant to blue-green azure app service deployment slot swap and rollback, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.

B:

An incorrect function slot configuration can process data in the wrong environment or break event handling. That risk is relevant to azure functions deployment slots and settings isolation, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.

D:

An ungoverned hotfix can introduce new defects or disappear from the next ordinary release. That risk is relevant to hotfix release path with independent emergency approval, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.

Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.