Design and Implement Infrastructure as Code (IaC) AZ-400 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   A company wants to automate the testing of its infrastructure as code templates before deployment. Which approach should be part of their IaC strategy?

   • ARun a static analysis tool on the templates as part of the CI pipeline
   • BUse a spreadsheet to track template changes and test results
   • CManually review templates in a meeting before each deployment
   • DDeploy templates to production and then verify the result
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company wants to implement a policy as code strategy for its Azure environment. They want to define Azure Policy definitions in Git, validate them in a pipeline, and deploy them to multiple subscriptions. Which approach should they use?

   • AUse Azure Blueprints to define policies and deploy them.
   • BStore policy definitions as ARM templates in Git and deploy them using Azure DevOps.
   • CUse Azure Policy's built-in definitions and assign them manually.
   • DUse Azure Automation State Configuration to manage policies.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A team is deploying a multi-region application using Bicep. They need to deploy the same resources to multiple regions with different configurations (e.g., different VM sizes, different storage account SKUs). The team wants to avoid duplicating code and wants to manage the regional differences in a single place. Which approach should the team use?

   • ACreate separate Bicep files for each region, each with hardcoded values for that region.
   • BUse ARM templates with a copy loop and a parameter file for each region.
   • CUse a single Bicep file with a parameter for the region and conditional expressions to deploy different resources.
   • DCreate a Bicep module that takes parameters for region-specific settings and deploy it to each region using a loop in the main Bicep file.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company wants to provide developers with self-service environments for testing new features. Each environment must be isolated, include a specific set of Azure resources, and be automatically deleted after a defined period. The company wants to enforce cost limits and ensure that only approved templates are used. Which combination of features should the company implement?

   • AAzure Resource Manager templates stored in a shared repository with a script that developers run locally to deploy.
   • BAzure Deployment Environments with a catalog of approved environment definitions and a lifecycle policy that deletes environments after a set time.
   • CA shared Azure subscription with a pipeline that developers trigger manually and a cleanup task that runs on a schedule.
   • DAzure DevTest Labs with a custom formula and an auto-shutdown schedule for all VMs.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company has a fleet of Windows virtual machines in Azure that must have specific software installed and security settings applied. The team wants to use a configuration management approach that is integrated with Azure and can automatically remediate any drift. The solution must not require managing a separate pull server. Which approach should the team use?

   • AUse Azure Automation State Configuration to push configurations to the VMs and monitor compliance.
   • BDeploy a custom DSC pull server on an Azure VM and configure all VMs to use it.
   • CUse Azure Resource Manager templates to deploy the software and settings at provisioning time only.
   • DUse Azure Policy guest configuration to audit settings and manually remediate any non-compliant VMs.
   Reveal Solution Discussion Select an answer first