Microsoft Designing and Implementing DevOps Solutions AZ-400 Exam Questions in PDF

Free Microsoft AZ-400 Dumps Questions (page: 4)

SIMULATION

You need to write a KQL query that will count the number of inbound requests for each source IP address, for any connection made during the last three months of 2021.

On Azure Data Explorer by using the following link:

https://dataexplorer.azure.corn/clusters/help/databases/SecurityLogs

The requests are contained in a table named InboundBrowsing in the SecurityLogs connection.

The query must return two columns named NumberOfRequests and SourceIP.

Export the query result to C:\Samples.

  1. See Explanation section for answer.

Answer(s): A

Explanation:

Task l: Add connection

Azure Data Explorer, To add a new cluster connection, do the following:

Step 1: On the left menu, select Query.
Step 2: In the upper left pane, select Add connection.

Step 3: In the Add connection dialog box, enter the cluster Connection URI and Display name. [Enter; https://dataexplorer.azure.corn/clusters/help/databases/SecurityLogs]

Step 4: Select Add to add the connection.

Tasks 2: Build and run a query
Run queries
To run a query, you must select the database on which you want to run the query in order to set the query context.

Step 5: In the Cluster connection pane, under the help cluster, select the SecurityLogs database [if it is not already selected].



Step 6: Enter the following query into the query windows:
InboundBrowsing
Project NumberOfRequests SourceIP

Step 7: Click Run

Sample query output:



Task 3: Download/export query resutl
To download a KQL file of the query, follow these steps:

Step 8: In the query window, select the query that you want to download.

Step 9: Select Export > Download.


Reference:

https://learn.microsoft.com/en-us/azure/data-explorer/web-query-data https://learn.microsoft.com/en-us/azure/data-explorer/web-share-queries



HOTSPOT (Drag and Drop is not supported)

You have an Azure subscription that contains multiple web apps.

You need to enable Change Analysis for the web apps.

How should you complete the script? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Register-AzResourceProvider-ProviderNamespace
Enable Change Analysis at scale using PowerShell
Run the following script.

# Log in to your Azure subscription
Connect-AzAccount

# Get subscription Id
$SubscriptionId = Read-Host -Prompt 'Input your subscription Id'

# Make Feature Flag visible to the subscription
Set-AzContext -SubscriptionId $SubscriptionId

# Register resource provider
Register-AzResourceProvider -ProviderNamespace "Microsoft.ChangeAnalysis" [Box 1]

# Enable each web app
$webapp_list = Get-AzWebApp | Where-Object {$_.kind -eq 'app'} foreach ($webapp in $webapp_list)
{
$tags = $webapp.Tags
$tags["hidden-related:diagnostics/changeAnalysisScanEnabled"]=$true Set-AzResource -ResourceId $webapp.Id -Tag $tags -Force [Box 2] }

Box 2: Set-AzResource -ResourceId


Reference:

https://learn.microsoft.com/en-us/azure/azure-monitor/change/change-analysis-enable



You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named Cluster1 and an Azure Monitor workspace named WS1. WS1 uses the Azure Monitor managed service for Prometheus.

You need to send the metrics data of Cluster1 to WS1.

Which two actions should you perform? Each correct answer presents part of the solution.

Note: Each correct selection is worth one point.

  1. Integrate Microsoft Entra ID and AKS.
  2. Install the metrics add-on.
  3. Create a managed identity.
  4. Disable the snapshot controller.
  5. Configure a Microsoft Defender for Cloud security profile.

Answer(s): B,C

Explanation:

Install the metrics add-on
The metrics add-on for Azure Monitor allows AKS to send metrics to Azure Monitor. This includes Prometheus metrics in clusters using the managed service.
Create a managed identity
A managed identity is required to provide the necessary permissions for the AKS cluster to communicate with Azure Monitor. This identity will authenticate the AKS cluster with Azure Monitor without requiring credentials in your code.



You have an Azure App Service app named App1.

You need to identify when App1 was offline. The solution must minimize administrative effort.

Which troubleshooting category in App Service diagnostics should you use?

  1. Availability and Performance
  2. Configuration and Management
  3. Diagnostic Tools
  4. Navigator

Answer(s): A

Explanation:

The tiles or the Troubleshoot link show the available diagnostics for the category. If you were interested in investigating Availability and performance the following diagnostics are offered:
Overview
*-> Web App Down
Web App Slow

High CPU Analysis
Memory Analysis
Web App Restarted
Application Change (Preview)
Application Crashes
HTTP 4xx Errors
SNAT Failed Connection Endpoints
SWAP Effects on Availability
TCP Connections
Testing in Production
WebJob Details


Reference:

https://learn.microsoft.com/en-us/azure/app-service/overview-diagnostics



HOTSPOT (Drag and Drop is not supported)

You have an Azure web app named webapp1 that uses the .NET Core runtime stack. You have an Azure Application Insights resource named AppInsights1 that collects telemetry data generated by webapp1.

You plan to deploy webapp1 by using an Azure DevOps pipeline.

You need to modify the sampling rate of the telemetry data processed by AppInsights1 without having to redeploy webapp1 after each modification.

What should you do? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Modify ApplicationInsights.config
In ApplicationInsights.config, you can adjust several parameters in the AdaptiveSamplingTelemetryProcessor node. The figures shown are the default values:

<MaxTelemetryItemsPerSecond>5</MaxTelemetryItemsPerSecond>

The target rate of logical operations that the adaptive algorithm aims to collect on each server host. If your web app runs on many hosts, reduce this value so as to remain within your target rate of traffic at the Application Insights portal.

<EvaluationInterval>00:00:15</EvaluationInterval>

The interval at which the current rate of telemetry is reevaluated. Evaluation is performed as a moving average. You might want to shorten this interval if your telemetry is liable to sudden bursts.

Etc.

Box 2: Modify the Usage and estimated costs settings.
Ingestion sampling
Use this type of sampling if your app often goes over its monthly quota and you don't have the option of using either of the SDK-based types of sampling.

Set the sampling rate in the Usage and estimated costs page:

Incorrect:
* Smart detection
Proactive diagnostics is a recent feature. Without any special configuration by you, Application Insights automatically detects and alerts you about unusual rises in failure rates in your app. It's smart enough to ignore a background of occasional failures, and also rises that are simply proportionate to a rise in requests. So for example, if there's a failure in one of the services you depend on, or if the new build you just deployed isn't working so well, then you'll know about it as soon as you look at your email. (And there are webhooks so that you can trigger other apps.)

Another aspect of this feature performs a daily in-depth analysis of your telemetry, looking for unusual patterns of performance that are hard to discover. For example, it can find slow performance associated with a particular geographical area, or with a particular browser version.

* Continuous Export
Want to keep your telemetry for longer than the standard retention period? Or process it in some specialized way? Continuous Export is ideal for this purpose. The events you see in the Application Insights portal can be exported to storage in Microsoft Azure in JSON format. From there, you can download your data and write whatever code you need to process it.


Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/app/sampling https://docs.microsoft.com/en-us/azure/azure-monitor/app/devops#smart-detection



DRAG DROP (Drag and Drop is not supported)

Your company wants to use Azure Application Insights to understand how user behaviors affect an application.

Which Application Insights tool should you use to analyze each behavior? To answer, drag the appropriate tools to the correct behaviors. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Note: Each correct selection is worth one point.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: User Flows
Feature usage

User Flows - Visualize user paths to identify the most common routes and pinpointing areas where users are most engaged users or may encounter issues.

The User Flows tool visualizes how users move between the pages and features of your site. It's great for answering questions like:

How do users move away from a page on your site?
What do users select on a page on your site?
Where are the places that users churn most from your site?
Are there places where users repeat the same action over and over?

Box 2: Users
Number of people who used actions and its features

Users tool: How many people used your app and its features? Users are counted by using anonymous IDs stored in browser cookies. A single person using different browsers or machines will be counted as more than one user.

Box 3: Impact
The effect that the performance of applications has on the usage of a page or a feature.

Impact Analysis - Discover how different properties influence conversion rates Impact Analysis discovers how any dimension of a page view, custom event, or request affects the usage of a different page view or custom event.

One way to think of Impact is as the ultimate tool for settling arguments with someone on your team about how slowness in some aspect of your site is affecting whether users stick around. Users might tolerate some slowness, but Impact gives you insight into how best to balance optimization and performance to maximize user conversion.


Reference:

https://learn.microsoft.com/en-us/azure/azure-monitor/app/usage



You use Azure Pipelines to build and test code.

You need to analyze the agent pool usage.

What are two ways to achieve the goal? Each correct answer presents a complete solution.

Note: Each correct selection is worth one point.

  1. Query the PipelineRun/PipelineRuns endpoint.
  2. Review the historical graph for the agent pools.
  3. Query the TaskAgentPoolSizeSnapshot/TaskAgentPoolSizeSnapshots endpoint.
  4. Review the Pipeline duration report.

Answer(s): B,C

Explanation:

B: Azure Pipelines, Historical graph for agent pools
The pool consumption report enables you to view jobs running in your agent pools graphed with agent pool job concurrency over a span of up to 30 days. You can use this information to help decide whether your jobs aren't running because of concurrency limits. If you have many jobs queued or running jobs at the concurrency or online agents limit, you may wish to purchase additional parallel jobs or provision more self-hosted agents.
C: This endpoint provides historical data on the available agents in your pool over time. By querying this endpoint, you can identify periods where the number of available agents dipped, potentially causing queues and increased wait times for jobs.


Reference:

https://learn.microsoft.com/en-us/azure/devops/report/analytics/entity-reference-pipelines?view=azure- devops#taskagentpoolsizesnapshots https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/pool-consumption-report



HOTSPOT (Drag and Drop is not supported)

You are using Agile process methodologies in Azure DevOps.

You need to deploy a dashboard that will provide progress reports for the following work items:

How long it took to close a work item after it was created.

How long it took to close a work item after the work was started.

Which type of widget should you use for each work item? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Lead time
How long it took to close a work item after it was created.

Lead time measures the total time elapsed from the creation of work items to their completion.

Box 2: Cycle time
How long it took to close a work item after the work was started.

Cycle time measures the time it takes for your team to complete work items once they begin actively working on them.

Incorrect:
* Burndown chart, Burnup chart
Burndown and burnup charts support project management to visually track work completed over time.

Burndown charts begin with the total amount of planned work and then as work is completed graphs the remaining work. With the progression of time, the amount of to-do work decreases.

Burnup charts track work as it is completed over time. They're useful to show the rate at which work is getting completed.


Reference:

https://learn.microsoft.com/en-us/azure/devops/report/dashboards/burndown-guidance



Share your comments for Microsoft AZ-400 exam with other users:

A
Anonymous User
4/13/2026 1:00:51 PM

Question 2:

  • Answer: D. Azure Advisor

  • Why: To view security-related recommendations for resources in the Compute and Apps area (including App Service Web Apps and Functions), you use Azure Advisor. Advisor surfaces personalized best-practice recommendations across resources, including security, and shows which resources are affected and the severity.

  • Why not the others:
- Azure Log Analytics is for ad-hoc querying of telemetry, not for viewing security recommendations. - Azure Event Hubs is for streaming telemetry data, not for security recommendations.
  • Quick tip: In the portal, navigate to Azure Advisor and check the Security recommendations for App Services to see actionable items and affe

R
Rian
3/19/2026 9:12:10 AM

This is very good and accurate. Explanation is very helpful even thou some are not 100% right but good enough to pass.

AI Tutor 👋 I’m here to help!