MICROSOFTMicrosoft Certified:DevOps Engineer Expert
The Microsoft Certified: DevOps Engineer Expert certification validates your expertise in designing and implementing DevOps solutions for continuous value delivery. It is ideal for professionals managing security, integration, testing, and deployment of Microsoft DevOps solutions. This certification highlights your ability to enhance collaboration, communication, and automation within cross-functional teams.
534 practice questions · Updated 2026-07-30
5Domains
15Objectives
124Concepts
534Questions
AZ-400 Curriculum
Every domain, objective, and concept the AZ-400 exam measures.
- GitHub FlowUnderstand and implement GitHub Flow for managing the flow of work in software development.
- Feedback Cycle StrategyDesign a strategy for effective feedback cycles using notifications and GitHub Issues.
- Work Tracking IntegrationImplement integration for tracking work using tools like GitHub projects, Azure Boards, and repositories.
- Source TraceabilityDesign and implement traceability for source code changes throughout the development lifecycle.
- Bug TraceabilityEstablish a system for tracking and managing bugs effectively.
- Quality TraceabilityImplement traceability mechanisms to ensure quality standards are met throughout the development process.
- Dashboard DesignDesign a dashboard to visualize key DevOps metrics such as cycle times, time to recovery, and lead time.
- Flow of Work MetricsImplement metrics to track the flow of work, including cycle times and lead time, to optimize processes.
- Time to Recovery MetricsDesign metrics to measure and improve the time taken to recover from failures.
- Project Planning MetricsCreate and implement metrics and queries to support effective project planning in DevOps.
- Development MetricsDesign and implement metrics and queries to assess and improve the software development process.
- Testing MetricsDevelop metrics and queries to evaluate the effectiveness and efficiency of testing processes.
- Security MetricsImplement metrics and queries to monitor and enhance security practices within the DevOps lifecycle.
- Delivery MetricsDesign metrics and queries to measure the efficiency and reliability of software delivery processes.
- Operations MetricsCreate and implement metrics and queries to optimize operational performance and reliability.
- Wiki ConfigurationConfigure project documentation using wikis with Markdown and Mermaid syntax.
- Process DiagramsCreate and integrate process diagrams using Mermaid syntax in project documentation.
- Release DocumentationSet up and manage release notes and API documentation for project releases.
- Automated Documentation from GitAutomate the generation of project documentation using Git history.
- Webhook IntegrationConfigure webhooks for integrating external services with development workflows.
- Azure Boards and GitHub IntegrationSet up integration between Azure Boards and GitHub repositories to streamline project management.
- GitHub and Azure DevOps with TeamsConfigure integration between GitHub or Azure DevOps and Microsoft Teams for enhanced communication and collaboration.
- Trunk-Based DevelopmentUnderstand and design a trunk-based development strategy for efficient code integration.
- Feature Branch StrategyDesign a feature branch strategy to manage and isolate new feature development.
- Release Branch StrategyDesign a release branch strategy to manage code stabilization and deployment.
- Pull Request WorkflowDesign a pull request workflow that incorporates branch policies to ensure code quality.
- Branch PoliciesImplement branch policies to enforce code review and testing requirements before merging.
- Branch Protection RulesApply branch protection rules to safeguard critical branches from unauthorized changes.
- Branch Merging RestrictionsImplement restrictions on branch merging to control code integration and maintain stability.
- Git LFSImplement Git Large File Storage to manage large files in a repository.
- git-fatUse git-fat to handle large files in a Git repository.
- Repository ScalingDesign a strategy for scaling a Git repository using tools like Scalar.
- Cross-Repository SharingOptimize Git repositories by implementing cross-repository sharing techniques.
- Repository PermissionsConfigure user permissions in a source control repository to manage access.
- Tag ConfigurationOrganize a source control repository by configuring and using tags effectively.
- Data Recovery with GitRecover specific data in a repository using Git commands.
- Data Removal from Source ControlRemove specific data from a source control repository using appropriate Git commands.
- Package Management ToolsRecommend appropriate package management tools such as GitHub Packages and Azure Artifacts for specific scenarios.
- Package FeedsDesign package feeds to manage local and upstream packages effectively.
- Package ViewsImplement package views to organize and filter packages in a feed.
- Dependency Versioning StrategyDesign a dependency versioning strategy for code assets and packages using semantic versioning (SemVer) and date-based versioning (CalVer).
- Semantic Versioning (SemVer)Apply semantic versioning principles to manage package versions.
- Date-based Versioning (CalVer)Implement date-based versioning strategies for packages.
- Pipeline Artifact VersioningDesign a versioning strategy for pipeline artifacts to ensure traceability and consistency.
- Quality Gates DesignDesign quality gates to ensure code meets defined standards before progressing in the pipeline.
- Release Gates ImplementationImplement release gates to control the deployment process based on predefined criteria.
- Security Gates DesignDesign security gates to enforce security policies within the pipeline.
- Governance Gates ImplementationImplement governance gates to ensure compliance with organizational policies.
- Local Testing StrategyDesign a strategy for executing tests locally before committing code to the pipeline.
- Unit Testing StrategyDesign a strategy for implementing unit tests to validate individual components of the application.
- Integration Testing StrategyDesign a strategy for implementing integration tests to verify interactions between components.
- Load Testing StrategyDesign a strategy for implementing load tests to assess application performance under stress.
- Pipeline Test ImplementationImplement tests within a pipeline to automate the validation process.
- Test Task ConfigurationConfigure test tasks in the pipeline to execute various types of tests.
- Test Agent ConfigurationConfigure test agents to run tests in different environments.
- Test Results IntegrationIntegrate test results into the pipeline to provide feedback on code quality.
- Code Coverage AnalysisImplement code coverage analysis to measure the extent of code tested by the test suite.
- Deployment Automation SolutionsSelect appropriate deployment automation solutions, including GitHub Actions and Azure Pipelines.
- Runner and Agent Infrastructure DesignDesign a GitHub runner or Azure DevOps agent infrastructure considering cost, tool selection, licenses, connectivity, and maintainability.
- GitHub and Azure Pipelines IntegrationDesign and implement integration between GitHub repositories and Azure Pipelines.
- Pipeline Trigger RulesDevelop and implement rules for triggering pipelines.
- YAML Pipeline DevelopmentDevelop pipelines using YAML syntax.
- Job Execution StrategyDesign and implement strategies for job execution order, including parallelism and multi-stage pipelines.
- Complex Pipeline ScenariosDevelop and implement complex pipeline scenarios such as hybrid pipelines, VM templates, and self-hosted runners or agents.
- Reusable Pipeline ElementsCreate reusable pipeline elements including YAML templates, task groups, variables, and variable groups.
- Checks and Approvals in YAMLDesign and implement checks and approvals using YAML-based environments.
- Deployment Strategy DesignDesign deployment strategies including blue-green, canary, ring, progressive exposure, feature flags, and A/B testing.
- Pipeline Dependency ManagementDesign a pipeline that ensures dependency deployments are reliably ordered.
- Downtime Minimization PlanningPlan for minimizing downtime during deployments using load balancing, rolling deployments, and deployment slot usage and swap.
- Hotfix Path PlanningDesign a hotfix path plan for responding to high-priority code fixes.
- Deployment Resiliency StrategyDesign and implement a resiliency strategy for deployment.
- Feature Flags ImplementationImplement feature flags using Azure App Configuration Feature Manager.
- Application Deployment TechniquesImplement application deployment using containers, binaries, and scripts.
- Database Task DeploymentImplement a deployment that includes database tasks.
- Configuration Management TechnologiesIdentify and recommend appropriate configuration management technologies for managing application infrastructure.
- Configuration Management StrategyDevelop and implement a strategy for managing application infrastructure using configuration management tools.
- IaC Strategy DefinitionDefine an infrastructure as code strategy that includes source control integration and automation of testing and deployment processes.
- Desired State Configuration DesignDesign desired state configurations for environments using tools like Azure Automation State Configuration and Azure Resource Manager.
- Azure Automation State ConfigurationImplement desired state configuration using Azure Automation State Configuration to manage and automate infrastructure settings.
- Azure Resource Manager and BicepUtilize Azure Resource Manager and Bicep to design and implement infrastructure as code solutions.
- Azure Machine ConfigurationImplement Azure Machine Configuration to ensure compliance and consistency across Azure environments.
- Azure Deployment Environments DesignDesign Azure Deployment Environments to enable on-demand self-deployment for development and testing.
- Azure Deployment Environments ImplementationImplement Azure Deployment Environments to facilitate scalable and repeatable infrastructure deployments.
- Monitor Pipeline HealthAssess and track the overall health of pipelines by evaluating metrics such as failure rate, duration, and flaky tests.
- Optimize Pipeline CostIdentify and implement strategies to reduce the cost associated with running pipelines.
- Optimize Pipeline TimeImplement techniques to minimize the time taken for pipeline execution while maintaining quality.
- Optimize Pipeline PerformanceEnhance the performance of pipelines by improving efficiency and resource utilization.
- Optimize Pipeline ReliabilityIncrease the reliability of pipelines by reducing failures and ensuring consistent execution.
- Optimize Pipeline ConcurrencyManage and adjust the level of concurrency in pipelines to balance performance and cost.
- Design Retention StrategyCreate a strategy for retaining pipeline artifacts and dependencies to ensure availability and compliance.
- Implement Retention StrategyApply and enforce the retention strategy for pipeline artifacts and dependencies within the pipeline configuration.
- Migrate Pipeline to YAMLConvert existing classic pipelines to YAML format in Azure Pipelines to leverage modern pipeline features.
- Microsoft Entra Service PrincipalsUnderstand how to choose and configure Microsoft Entra service principals for authentication in Azure.
- Managed Identities for Azure ResourcesDifferentiate between system-assigned and user-assigned managed identities and how to implement them for Azure resources.
- GitHub Authentication MethodsImplement and manage GitHub authentication using GitHub Apps, GITHUB_TOKEN, and personal access tokens.
- Azure DevOps Service ConnectionsSet up and manage service connections in Azure DevOps for secure resource access.
- Azure DevOps Personal Access TokensCreate and manage personal access tokens for Azure DevOps to authenticate and authorize access.
- GitHub Permissions and RolesDesign and implement appropriate permissions and roles within GitHub to control access.
- Azure DevOps Permissions and Security GroupsDesign and implement permissions and security groups in Azure DevOps to manage user access effectively.
- Access Levels in Azure DevOpsRecommend and configure appropriate access levels, including stakeholder access, in Azure DevOps.
- Collaborator Access in GitHubRecommend and configure outside collaborator access in GitHub for project collaboration.
- Azure DevOps Project ConfigurationConfigure projects and teams within Azure DevOps to align with organizational needs and security requirements.
- Azure Key Vault BasicsUnderstand the purpose and functionality of Azure Key Vault for managing secrets, keys, and certificates.
- Managing Secrets in Azure Key VaultLearn how to store, retrieve, and manage secrets using Azure Key Vault.
- Managing Keys in Azure Key VaultLearn how to store, retrieve, and manage cryptographic keys using Azure Key Vault.
- Managing Certificates in Azure Key VaultLearn how to store, retrieve, and manage certificates using Azure Key Vault.
- Secrets Management in GitHub ActionsImplement and manage secrets within GitHub Actions for secure automation workflows.
- Secrets Management in Azure PipelinesImplement and manage secrets within Azure Pipelines for secure automation workflows.
- Secretless Authentication with Workload Identity FederationUnderstand and implement secretless authentication using workload identity federation and OpenID Connect.
- Managing Sensitive Files in DeploymentDesign strategies for handling sensitive files securely during deployment processes.
- Azure Pipelines Secure FilesLearn how to use Azure Pipelines secure files to manage sensitive files securely during deployments.
- Preventing Sensitive Information LeakageDesign pipelines that incorporate best practices to prevent the leakage of sensitive information.
- Security and Compliance Scanning StrategyDesign a comprehensive strategy for security and compliance scanning, including dependency, code, secret, and licensing scanning.
- Microsoft Defender for Cloud DevOps SecurityConfigure Microsoft Defender for Cloud DevOps Security to enhance security measures in the development process.
- GitHub Advanced Security ConfigurationConfigure GitHub Advanced Security for both GitHub and Azure DevOps to ensure robust security practices.
- Integration of GitHub Advanced Security with DefenderIntegrate GitHub Advanced Security with Microsoft Defender for Cloud to streamline security operations.
- Automated Container ScanningAutomate the scanning of container images and configure actions to run CodeQL analysis within containers.
- Dependabot Alerts for Vulnerability AnalysisAutomate the analysis of vulnerabilities in open-source components using Dependabot alerts to maintain secure dependencies.
- Azure Monitor ConfigurationConfigure Azure Monitor to integrate with DevOps tools for effective monitoring.
- Azure Monitor Logs IntegrationIntegrate Azure Monitor Logs with DevOps tools to enable centralized log management.
- Telemetry Collection with Application InsightsSet up Azure Monitor Application Insights to collect telemetry data from applications.
- Azure VM Insights TelemetryConfigure Azure VM Insights to gather telemetry data from virtual machines.
- Azure Container Insights SetupImplement Azure Container Insights to monitor and collect telemetry from containerized environments.
- Azure Monitor for Storage ConfigurationConfigure Azure Monitor for Storage to collect and analyze telemetry data from storage resources.
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for AZ-400, so none is invented.