- (Exam Topic 2)
You have an Azure DevOps organization named Contoso that contains a project named Project 1. You provision an Azure key vault name Keyvault1.
You need to reference Keyvault1 secrets in a build pipeline of Project1. What should you do first?
Correct Answer:B
Before this will work, the build needs permission to access the Azure Key Vault. This can be added in the Azure Portal.
Open the Access Policies in the Key Vault and add a new one. Choose the principle used in the DevOps build. Reference:
https://docs.microsoft.com/en-us/azure/devops/pipelines/release/azure-key-vault
- (Exam Topic 2)
Your company plans to deploy an application to the following endpoints: 
Ten virtual machines hosted in Azure
Ten virtual machines hosted in an on-premises data center environment
All the virtual machines have the Azure Pipelines agent.
You need to implement a release strategy for deploying the application to the endpoints.
What should you recommend using to deploy the application to the endpoints? To answer, drag the appropriate components to the correct endpoints. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Solution:
Box 1: A deployment group
When authoring an Azure Pipelines or TFS Release pipeline, you can specify the deployment targets for a job using a deployment group.
If the target machines are Azure VMs, you can quickly and easily prepare them by installing the Azure Pipelines Agent Azure VM extension on each of the VMs, or by using the Azure Resource Group Deployment task in your release pipeline to create a deployment group dynamically.
Box 2: A deployment group
References: https://docs.microsoft.com/en-us/azure/devops/pipelines/release/deployment-groups
Does this meet the goal?
Correct Answer:A
- (Exam Topic 1)
To resolve the current technical issue, what should you do to the Register-AzureRmAutomationDscNode command?
Correct Answer:A
Change the ConfigurationMode parameter from ApplyOnly to ApplyAndAutocorrect.
The Register-AzureRmAutomationDscNode cmdlet registers an Azure virtual machine as an APS Desired State Configuration (DSC) node in an Azure Automation account.
Scenario: Current Technical Issue
The test servers are configured correctly when first deployed, but they experience configuration drift over time. Azure Automation State Configuration fails to correct the configurations.
Azure Automation State Configuration nodes are registered by using the following command.
References:
https://docs.microsoft.com/en-us/powershell/module/azurerm.automation/register-azurermautomationdscnode?v
- (Exam Topic 2)
You are developing a multi-tier application. The application will use Azure App Service web apps as the front end and an Azure SQL database as the back end. The application will use Azure functions to write some data to Azure Storage.
You need to send the Azure DevOps team an email message when the front end fails to return a status code of 200.
Which feature should you use?
Correct Answer:C
https://docs.microsoft.com/en-us/azure/azure-monitor/app/monitor-web-app-availability
- (Exam Topic 2)
Your company plans to implement a new compliance strategy that will require all Azure web apps to be backed up every five hours.
You need to back up an Azure web app named az400-11566895-main every five hours to an Azure Storage account in your resource group.
To complete this task, sign in to the Microsoft Azure portal.
Solution:
With the storage account ready, you can configure backs up in the web app or App Service.
Open the App Service az400-11566895-main, which you want to protect, in the Azure Portal and browse to Settings > Backups. Click Configure and a Backup Configuration blade should appear.
Select the storage account.
Select the container. If you want to schedule backups, then set Scheduled Backup to On and configure a schedule: every five hours Select your retention. Note that 0 means never delete backups. Decide if at least one backup should always be retained. Choose if any connected databases should be included in the web app backup. Click Save to finalize the backup configuration.
Reference:
https://petri.com/backing-azure-app-service
Does this meet the goal?
Correct Answer:A