Microsoft AZ-400: Designing and Implementing Microsoft DevOps Solutions

Last checked October 22, 2026 against the official Microsoft exam page.

1. Question 1Pipelines and CI/CD

   A YAML pipeline must run the same build steps for every branch but deploy only from the main branch. Which pipeline feature controls this?

   1. ARunning the deploy step on individual developers' laptops
   2. BConditions on the deployment stage or job checking the source branch
   3. CManual copy of build artifacts to the production servers
   4. DSeparate copies of the pipeline YAML for every branch
   Show answer and explanationHide answer

   Correct answer: B

   Conditions based on the branch let the same pipeline build everywhere and deploy only from main. Copying pipelines, manual artifact copies, and laptop deployments are error-prone and inconsistent.

2. Question 2Security and compliance

   A team wants to detect secrets accidentally committed to a repository. Which control provides this automatically?

   1. AStoring secrets in the README file for easy access
   2. BTurning off repository history tracking on main
   3. CA monthly manual review of the commit message log
   4. DSecret scanning or credential detection in the pipeline
   Show answer and explanationHide answer

   Correct answer: D

   Secret scanning detects credentials in code and history and can block or alert on them. Commit message review misses secrets in code, deleting history does not remove exposure, and README storage is insecure.

3. Question 3Source control strategy

   A team of 80 developers works in one Azure Repos Git repository and wants a branching strategy that protects the main branch and requires review before merging. Which configuration is most appropriate?

   1. ADisable pull requests on main to speed up merges and skip the reviewer approval step
   2. BStore the code in a shared network folder without version control
   3. CBranch policies on the main branch requiring pull requests and reviewers
   4. DGrant every developer direct push rights to main so commits can skip pull request review
   Show answer and explanationHide answer

   Correct answer: C

   Branch policies enforce pull requests, required reviewers, and build validation before changes reach protected branches. Direct pushes, disabled reviews, and shared folders each remove that protection.

4. Question 4Instrumentation and monitoring

   A team wants alerts when a production service's error rate rises, and dashboards for trends over time. Which Azure service provides these capabilities?

   1. AAzure Artifacts for hosting NuGet and npm packages
   2. BAzure Repos for Git code storage and commits
   3. CAzure Boards for work item tracking and sprints
   4. DAzure Monitor with Application Insights
   Show answer and explanationHide answer

   Correct answer: D

   Azure Monitor and Application Insights collect telemetry, provide dashboards, and drive alerts for failures and performance. Boards, Artifacts, and Repos manage work, packages, and code.

5. Question 5Dependency and package management

   A team wants to store internal NuGet and npm packages and control which public packages can be used. Which Azure DevOps service fits best?

   1. AAzure Test Plans with manual tests
   2. BAzure Artifacts with upstream sources
   3. CAzure Monitor with Log Analytics
   4. DAzure Boards for tracking work items
   Show answer and explanationHide answer

   Correct answer: B

   Azure Artifacts hosts feeds for internal packages and can use upstream sources to control access to public packages. Boards tracks work, Test Plans manages testing, and Monitor observes running systems.