- (Exam Topic 3)
You need to recommend a procedure to implement the build agent for Project1.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Solution:
Scenario:

Step 1: Sign in to Azure Devops by using an account that is assigned the Administrator service connection
security role.
Note: Under Agent Phase, click Deploy Service Fabric Application. Click Docker Settings and then click Configure Docker settings. In Registry Credentials Source, select Azure Resource Manager Service Connection. Then select your Azure subscription.
Step 2: Create a personal access token..
A personal access token or PAT is required so that a machine can join the pool created with the Agent Pools (read, manage) scope.
Step 3: Install and register the Azure Pipelines agent on an Azure virtual machine.
By running a Azure Pipeline agent in the cluster, we make it possible to test any service, regardless of type. References:
https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-tutorial-deploy-container-app-with-cicd-vst https://mohitgoyal.co/2019/01/10/run-azure-devops-private-agents-in-kubernetes-clusters/

Does this meet the goal?

Correct Answer:A

- (Exam Topic 2)
You store source code in a Git repository in Azure repos. You use a third-party continuous integration (CI) tool to control builds.
What will Azure DevOps use to authenticate with the tool?

Correct Answer:B
Personal access tokens (PATs) give you access to Azure DevOps and Team Foundation Server (TFS), without using your username and password directly.
Reference:
https://docs.microsoft.com/en-us/azure/devops/repos/git/auth-overview

- (Exam Topic 2)
You need to deploy Azure Kubernetes Service (AKS) to host an application. The solution must meet the following requirements:
Containers must only be published internally.
AKS clusters must be able to create and manage containers in Azure.
What should you use for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
Box 1: Azure Container Registry
Azure services like Azure Container Registry (ACR) and Azure Container Instances (ACI) can be used and connected from independent container orchestrators like kubernetes (k8s). You can set up a custom ACR and connect it to an existing k8s cluster to ensure images will be pulled from the private container registry instead of the public docker hub.
Box 2: An Azure service principal
When you're using Azure Container Registry (ACR) with Azure Kubernetes Service (AKS), an authentication mechanism needs to be established. You can set up AKS and ACR integration during the initial creation of your AKS cluster. To allow an AKS cluster to interact with ACR, an Azure Active Directory service principal is used.
References:
https://thorsten-hans.com/how-to-use-private-azure-container-registry-with-kubernetes https://docs.microsoft.com/en-us/azure/aks/cluster-container-registry-integration

Does this meet the goal?

Correct Answer:A

- (Exam Topic 2)
You have an Azure DevOps project that contains a build pipeline. The build pipeline uses approximately 50 open source libraries.
You need to ensure that all the open source libraries comply with your company’s licensing standards. Which service should you use?

Correct Answer:C
WhiteSource provides WhiteSource Bolt, a lightweight open source security and management solution developed specifically for integration with Azure DevOps and Azure DevOps Server.
Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated denitive database of open source repositories.
Note: Blackduck would also be a good answer, but it is not an option here. Reference: https://www.azuredevopslabs.com/labs/vstsextend/whitesource/

- (Exam Topic 2)
You have an Azure DevOps organization named Contoso.
You need to receive Microsoft Teams notifications when work items are updated. What should you do?

Correct Answer:B
https://azuredevopslabs.com/labs/vstsextend/teams/

- (Exam Topic 2)
Your company uses Azure Artifacts for package management.
You need to configure an upstream source in Azure Artifacts for Python packages. Which repository type should you use as an upstream source?

Correct Answer:A
Get started with Python packages in Azure Artifacts Create a feed
Select Artifacts (in the left navigation of your Azure DevOps project).
On the Artifacts page, select Create Feed.
In the Create new feed dialog box:
In the Name field, give the feed a name.
PyPI is the default repository name for twine, which is a tool for publishing Python packages. Reference:
https://docs.microsoft.com/en-us/azure/devops/artifacts/quickstarts/python-packages