100% Latest & Updated Microsoft AZ-400 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 610
A build pushes a container to Azure Container Registry but later loses evidence of which scanned image is in production. Which risk is directly created by the described failure?
- Misconfigured swaps can move sensitive settings or send customers to an unready application.
- An incorrect function slot configuration can process data in the wrong environment or break event handling.
- Mutable container references can replace verified software with an unknown image and compromise rollback.
- An ungoverned hotfix can introduce new defects or disappear from the next ordinary release.
Explanation
Correct Answer
C:Mutable container references can replace verified software with an unknown image and compromise rollback. This is the directly relevant business or security consequence of acr image provenance and deployment by immutable digest. Root cause: Container tags may change; digests identify the actual immutable bytes that were scanned and deployed.
Incorrect Answers
A:Misconfigured swaps can move sensitive settings or send customers to an unready application. That risk is relevant to blue-green azure app service deployment slot swap and rollback, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.
B:An incorrect function slot configuration can process data in the wrong environment or break event handling. That risk is relevant to azure functions deployment slots and settings isolation, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.
D:An ungoverned hotfix can introduce new defects or disappear from the next ordinary release. That risk is relevant to hotfix release path with independent emergency approval, but the specific unresolved condition here concerns acr image provenance and deployment by immutable digest and has a different direct consequence.
Question 611
An AKS deployment reports pods Running while its new app has no database connectivity and customer requests fail. What action is MOST appropriate given these constraints?
- Implement staged ring or canary rollout with scoped traffic, objective health thresholds, and automatic rollback.
- Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks.
- Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints.
- Use App Configuration Feature Manager targeting and controlled flag rollout independently from application binaries.
Explanation
Correct Answer
C:Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints. Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity. Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
Incorrect Answers
A:Implement staged ring or canary rollout with scoped traffic, objective health thresholds, and automatic rollback. That applies to progressive canary and ring-based production exposure, not aks readiness and rolling update capacity.
B:Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks. That applies to deployment dependencies and downstream api coordination, not aks readiness and rolling update capacity.
D:Use App Configuration Feature Manager targeting and controlled flag rollout independently from application binaries. That applies to azure app configuration feature flags for independent rollout, not aks readiness and rolling update capacity.
Question 612
An AKS deployment reports pods Running while its new app has no database connectivity and customer requests fail. Which test MOST directly confirms the solution?
- Introduce a controlled bad revision and confirm the promotion stops and the prior healthy service is restored.
- Replay the end-to-end service path before and after staged component upgrades and record compatible versions.
- Simulate a failed dependency during rollout and confirm ready endpoints and capacity remain within service objectives.
- Compare errors and customer transactions by release ring and confirm failed thresholds halt wider promotion.
Explanation
Correct Answer
C:Simulate a failed dependency during rollout and confirm ready endpoints and capacity remain within service objectives. Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
Incorrect Answers
A:Introduce a controlled bad revision and confirm the promotion stops and the prior healthy service is restored. That applies to rollback on failed health gates in azure release pipelines, not aks readiness and rolling update capacity.
B:Replay the end-to-end service path before and after staged component upgrades and record compatible versions. That applies to deployment dependencies and downstream api coordination, not aks readiness and rolling update capacity.
D:Compare errors and customer transactions by release ring and confirm failed thresholds halt wider promotion. That applies to progressive canary and ring-based production exposure, not aks readiness and rolling update capacity.
Question 613
An AKS deployment reports pods Running while its new app has no database connectivity and customer requests fail. What is the underlying reason the existing approach fails?
- Independent deployment stages may overlap in time, so schema compatibility must span both active application revisions.
- Urgency can shorten process timing but does not remove the need for authorized, traceable production changes.
- Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
- Infrastructure task completion is not equivalent to customer-serving health after a software change.
Explanation
Correct Answer
C:Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity. Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
Incorrect Answers
A:Independent deployment stages may overlap in time, so schema compatibility must span both active application revisions. That applies to backward-compatible database schema deployment ordering, not controlling principle for aks readiness and rolling update capacity.
B:Urgency can shorten process timing but does not remove the need for authorized, traceable production changes. That applies to hotfix release path with independent emergency approval, not controlling principle for aks readiness and rolling update capacity.
D:Infrastructure task completion is not equivalent to customer-serving health after a software change. That applies to rollback on failed health gates in azure release pipelines, not controlling principle for aks readiness and rolling update capacity.
Question 614
An AKS deployment reports pods Running while its new app has no database connectivity and customer requests fail. Which recurring control most directly sustains the required behavior?
- Restrict tag changes and retain deployment digests and rollback images for supported releases.
- Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes.
- Review readiness gates, resource requests, and replica headroom after application startup changes.
- Maintain dependency maps and automated contract checks on relevant release changes.
Explanation
Correct Answer
C:Review readiness gates, resource requests, and replica headroom after application startup changes. Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
Incorrect Answers
A:Restrict tag changes and retain deployment digests and rollback images for supported releases. This helps sustain a control for acr image provenance and deployment by immutable digest; it does not directly stop recurrence of aks readiness and rolling update capacity described in this case.
B:Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes. This helps sustain a control for progressive canary and ring-based production exposure; it does not directly stop recurrence of aks readiness and rolling update capacity described in this case.
D:Maintain dependency maps and automated contract checks on relevant release changes.
Question 615
An AKS deployment reports pods Running while its new app has no database connectivity and customer requests fail. What is the MOST important consequence if this issue remains unresolved?
- Misconfigured swaps can move sensitive settings or send customers to an unready application.
- Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
- An ungoverned hotfix can introduce new defects or disappear from the next ordinary release.
- Without automatic detection and recovery, a defective rollout may remain live during manual incident diagnosis.
Explanation
Correct Answer
B:Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases. This is the directly relevant business or security consequence of aks readiness and rolling update capacity. Root cause: Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
Incorrect Answers
A:Misconfigured swaps can move sensitive settings or send customers to an unready application. That risk is relevant to blue-green azure app service deployment slot swap and rollback, but the specific unresolved condition here concerns aks readiness and rolling update capacity and has a different direct consequence.
C:An ungoverned hotfix can introduce new defects or disappear from the next ordinary release. That risk is relevant to hotfix release path with independent emergency approval, but the specific unresolved condition here concerns aks readiness and rolling update capacity and has a different direct consequence.
D:Without automatic detection and recovery, a defective rollout may remain live during manual incident diagnosis. That risk is relevant to rollback on failed health gates in azure release pipelines, but the specific unresolved condition here concerns aks readiness and rolling update capacity and has a different direct consequence.
Question 616
A namespace sets maximum unavailable replicas too high during an update and drops below required service capacity. What change should the DevOps engineer implement FIRST for the stated Azure DevOps requirement?
- Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints.
- Use App Configuration Feature Manager targeting and controlled flag rollout independently from application binaries.
- Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks.
- Implement staged ring or canary rollout with scoped traffic, objective health thresholds, and automatic rollback.
Explanation
Correct Answer
A:Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints. Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity. Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
Incorrect Answers
B:Use App Configuration Feature Manager targeting and controlled flag rollout independently from application binaries. That applies to azure app configuration feature flags for independent rollout, not aks readiness and rolling update capacity.
C:Model service deployment order and use backward-compatible API or message contracts with explicit readiness checks. That applies to deployment dependencies and downstream api coordination, not aks readiness and rolling update capacity.
D:Implement staged ring or canary rollout with scoped traffic, objective health thresholds, and automatic rollback. That applies to progressive canary and ring-based production exposure, not aks readiness and rolling update capacity.
Question 617
A namespace sets maximum unavailable replicas too high during an update and drops below required service capacity. What check would most directly verify this Microsoft DevOps control?
- Introduce a controlled bad revision and confirm the promotion stops and the prior healthy service is restored.
- Simulate a failed dependency during rollout and confirm ready endpoints and capacity remain within service objectives.
- Replay the end-to-end service path before and after staged component upgrades and record compatible versions.
- Compare errors and customer transactions by release ring and confirm failed thresholds halt wider promotion.
Explanation
Correct Answer
B:Simulate a failed dependency during rollout and confirm ready endpoints and capacity remain within service objectives. Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
Incorrect Answers
A:Introduce a controlled bad revision and confirm the promotion stops and the prior healthy service is restored. That applies to rollback on failed health gates in azure release pipelines, not aks readiness and rolling update capacity.
C:Replay the end-to-end service path before and after staged component upgrades and record compatible versions. That applies to deployment dependencies and downstream api coordination, not aks readiness and rolling update capacity.
D:Compare errors and customer transactions by release ring and confirm failed thresholds halt wider promotion. That applies to progressive canary and ring-based production exposure, not aks readiness and rolling update capacity.
Question 618
A namespace sets maximum unavailable replicas too high during an update and drops below required service capacity. What is the underlying reason the existing approach fails?
- Infrastructure task completion is not equivalent to customer-serving health after a software change.
- Urgency can shorten process timing but does not remove the need for authorized, traceable production changes.
- Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
- Independent deployment stages may overlap in time, so schema compatibility must span both active application revisions.
Explanation
Correct Answer
C:Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity. Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
Incorrect Answers
A:Infrastructure task completion is not equivalent to customer-serving health after a software change. That applies to rollback on failed health gates in azure release pipelines, not controlling principle for aks readiness and rolling update capacity.
B:Urgency can shorten process timing but does not remove the need for authorized, traceable production changes. That applies to hotfix release path with independent emergency approval, not controlling principle for aks readiness and rolling update capacity.
D:Independent deployment stages may overlap in time, so schema compatibility must span both active application revisions. That applies to backward-compatible database schema deployment ordering, not controlling principle for aks readiness and rolling update capacity.
Question 619
A namespace sets maximum unavailable replicas too high during an update and drops below required service capacity. Which recurring control most directly sustains the required behavior?
- Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes.
- Review readiness gates, resource requests, and replica headroom after application startup changes.
- Restrict tag changes and retain deployment digests and rollback images for supported releases.
- Maintain dependency maps and automated contract checks on relevant release changes.
Explanation
Correct Answer
B:Review readiness gates, resource requests, and replica headroom after application startup changes. Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
Incorrect Answers
A:Review ring selection, alert thresholds, and rollback triggers after traffic and architecture changes. This helps sustain a control for progressive canary and ring-based production exposure; it does not directly stop recurrence of aks readiness and rolling update capacity described in this case.
C:Restrict tag changes and retain deployment digests and rollback images for supported releases. This helps sustain a control for acr image provenance and deployment by immutable digest; it does not directly stop recurrence of aks readiness and rolling update capacity described in this case.
D:Maintain dependency maps and automated contract checks on relevant release changes.
Question 620
A namespace sets maximum unavailable replicas too high during an update and drops below required service capacity. Choose TWO measures that implement and verify an effective Azure DevOps response to this specific situation. (Choose TWO.)
- Declare aks readiness and rolling update capacity successful solely from a green pipeline status and skip checking its actual control outcome.
- Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints.
- Simulate a failed dependency during rollout and confirm ready endpoints and capacity remain within service objectives.
- Dismiss the known risk for aks readiness and rolling update capacity and keep no evidence or accountable owner after deployment.
- Bypass review and testing for aks readiness and rolling update capacity whenever the release deadline is urgent, applying the change to production immediately.
Explanation
Correct Answers
B:Configure meaningful readiness probes and rollout maxSurge/maxUnavailable or equivalent service availability constraints. Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity. Unready pods or aggressive rollout settings can cause avoidable downtime during routine releases.
C:Simulate a failed dependency during rollout and confirm ready endpoints and capacity remain within service objectives. Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
Incorrect Answers
A:Declare aks readiness and rolling update capacity successful solely from a green pipeline status and skip checking its actual control outcome. It conflicts with the stated operating condition: Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
D:Dismiss the known risk for aks readiness and rolling update capacity and keep no evidence or accountable owner after deployment. It conflicts with the stated operating condition: Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
E:Bypass review and testing for aks readiness and rolling update capacity whenever the release deadline is urgent, applying the change to production immediately. It conflicts with the stated operating condition: Kubernetes scheduling does not establish application readiness, and update policy determines surviving healthy capacity.
Designing and Implementing Microsoft DevOps Solutions (AZ-400) Practice Tests