Design and Implement Infrastructure as Code (IaC) AZ-400 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   A development team needs to create isolated environments for testing new features. They want to allow developers to self-service deploy these environments without manual intervention from IT. Which Azure service should they use?

   • AAzure DevTest Labs
   • BAzure Virtual Machines
   • CAzure App Service
   • DAzure Deployment Environments
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company wants to provide developers with a self-service portal to create Azure environments for testing. The environments must be created from a set of approved templates and must be automatically deleted after 48 hours. The company also wants to assign costs to the specific development teams. Which Azure service should they use?

   • AAzure Resource Manager templates with a custom web app
   • BAzure Deployment Environments
   • CAzure Blueprints
   • DAzure DevTest Labs
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company has Azure VMs that must meet a set of regulatory compliance requirements, including specific file contents, installed software, and registry values. The compliance team wants to audit these settings continuously and receive reports on which VMs are non-compliant. The team does not want to manage custom DSC configurations. Which Azure feature should the team use?

   • AAzure Monitor with a custom log query that checks for the required settings on each VM.
   • BAzure Automation State Configuration with a custom DSC configuration for each compliance requirement.
   • CAzure Security Center's regulatory compliance dashboard with built-in recommendations.
   • DAzure Machine Configuration (guest configuration) with custom policies that check the required settings.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company has a large number of Azure VMs that must comply with internal security baselines. The compliance team wants to continuously audit the VMs and automatically remediate any non-compliant settings. The solution must be integrated with Azure Policy and should not require installing additional agents on the VMs. Which service should the company use?

   • AAzure Automation State Configuration
   • BAzure Security Center
   • CAzure Resource Manager templates
   • DAzure Machine Configuration
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company runs a fleet of Windows virtual machines that must have a specific set of security settings, installed features, and registry keys. The team wants to manage these settings centrally, detect drift automatically, and remediate non-compliant VMs without manual intervention. The VMs are already enrolled in Azure Automation. Which solution should the team implement?

   • AUse Azure Policy to assign a built-in initiative that enforces the required security settings on the VMs.
   • BCreate a DSC configuration that defines the desired state, compile it to a node configuration, and assign it to the VMs in Azure Automation State Configuration.
   • CCreate a custom VM image with all settings baked in and redeploy VMs whenever changes are needed.
   • DDeploy a custom PowerShell script via Azure Automation Runbook that runs on a schedule to apply the settings.
   Reveal Solution Discussion Select an answer first