Design and Implement Infrastructure as Code (IaC) AZ-400 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A development team needs to spin up isolated test environments on demand for each feature branch. Each environment must include a web app, a database, and a storage account with a consistent configuration. The team wants to avoid managing the lifecycle of these environments manually and wants developers to self-serve without needing Azure subscription permissions. Which solution should the team implement?

   • AProvide developers with contributor access to a shared resource group and a runbook that creates the resources.
   • BUse Azure DevTest Labs with a formula that creates the required resources for each environment.
   • CCreate a pipeline that developers trigger manually with parameters for the environment name and resources.
   • DCreate an Azure Deployment Environments project with a catalog of environment definitions that deploy the required resources.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A company uses Azure Automation State Configuration to manage its VMs. What is the primary benefit of using this service over manually applying configurations?

   • AIt requires no agent to be installed on the VMs
   • BIt eliminates the need for any configuration management on the VMs
   • CIt provides continuous monitoring and automatic remediation of configuration drift
   • DIt allows configuration to be applied only once during initial deployment
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is adopting infrastructure as code for a new microservices application. The team wants to define Azure resources declaratively, validate changes in a pull request before merging, and ensure that the same template works for both development and production environments with only parameter differences. The team has no existing investment in ARM templates and wants the most readable syntax. Which approach should the team use?

   • AAuthor ARM templates directly in JSON, store them in Git, and use the Azure Resource Manager deployment task in a pipeline.
   • BUse Azure Deployment Environments to create a catalog of predefined templates and let developers deploy resources on demand.
   • CUse Azure Automation State Configuration to define the desired state of the Azure resources and apply it during deployment.
   • DAuthor Bicep files, store them in Git, and use the bicep build command in a pipeline to generate ARM templates for deployment.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company has a set of Windows VMs that need to be configured with a specific application and security settings. The team wants to use a configuration management solution that is fully managed by Azure and can automatically remediate any drift. The solution must also provide compliance reporting. Which service should the team use?

   • AAzure Resource Manager templates
   • BCustom DSC pull server
   • CAzure Machine Configuration
   • DAzure Automation State Configuration
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   A team wants to use desired state configuration (DSC) to ensure that all web servers have the same IIS configuration. What is the primary artifact they need to create?

   • AA DSC configuration script that defines the desired state
   • BA PowerShell script that installs IIS manually
   • CA JSON file that describes the network topology
   • DAn ARM template that provisions the web servers
   Reveal Solution Discussion Select an answer first