- (Exam Topic 2)
Your company develops an application named App1 that is deployed in production.
As part of an application update, a new service is being added to App1. The new service requires access to an application named App2 that is currently in development.
You need to ensure that you can deploy the update to App1 before App2 becomes available. You must be able to enable the service in App1 once App2 is deployed.
What should you do?

Correct Answer:D
Reference:
https://docs.microsoft.com/en-us/azure/devops/migrate/phase-features-with-feature-flags

- (Exam Topic 3)
You add the virtual machines as managed nodes in Azure Automation State Configuration. You need to configure the computer in Group7.
What should you do?

Correct Answer:A
The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State Configuration (DSC) node in an Azure Automation account.
Scenario: The Azure DevOps organization includes: The Docker extension
A deployment pool named Pool7 that contains 10 Azure virtual machines that run Windows Server 2016

References:
https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/register-azurermautomationdscnode

- (Exam Topic 2)
You are building an ASP.NET Core application.
You plan to create an application utilization baseline by capturing telemetry data.
You need to add code to the application to capture the telemetry data. The solution must minimize the costs of storing the telemetry data.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A)

B)

C)

D)

E)

Correct Answer:BE

- (Exam Topic 2)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage a project in Azure DevOps.
You need to prevent the configuration of the project from changing over time. Solution: Implement Continuous Integration for the project.
Does this meet the goal?

Correct Answer:B
Instead implement Continuous Assurance for the project. Reference:
https://azsk.azurewebsites.net/04-Continous-Assurance/Readme.html

- (Exam Topic 2)
You have an Azure DevOps release pipeline as shown in the following exhibit.

You need to complete the pipeline to configure OWASP ZAP for security testing.
Which five Azure CLI tasks should you add in sequence? To answer, move the tasks from the list of tasks to the answer area and arrange them in the correct order.

Solution:
Defining the Release Pipeline
Once the application portion of the Release pipeline has been configured, the security scan portion can be
defined. In our example, this consists of 8 tasks, primarily using the Azure CLI task to create and use the ACI instance (and supporting structures).
Otherwise specified, all the Azure CLI tasks are Inline tasks, using the default configuration options.

Reference:
https://devblogs.microsoft.com/premier-developer/azure-devops-pipelines-leveraging-owasp-zap-in-the-release

Does this meet the goal?

Correct Answer:A

- (Exam Topic 2)
You need to prepare a network security group (NSG) named az400-9940427-nsg1 to host an Azure DevOps pipeline agent. The solution must allow only the required outbound port for Azure DevOps and deny all other inbound and outbound access to the Internet.
To complete this task, sign in to the Microsoft Azure portal.
Solution:
* 1. Open Microsoft Azure Portal and Log into your Azure account.
* 2. Select network security group (NSG) named az400-9940427-nsg1
* 3. Select Settings, Outbound security rules, and click Add
* 4. Click Advanced

* 5. Change the following settings:
Destination Port range: 8080
Protocol. TCP
Action: Allow
Note: By default, Azure DevOps Server uses TCP Port 8080. References:
https://robertsmit.wordpress.com/2017/09/11/step-by-step-azure-network-security-groups-nsg-security-center-az https://docs.microsoft.com/en-us/azure/devops/server/architecture/required-ports?view=azure-devops

Does this meet the goal?

Correct Answer:A