A company has a set of Windows VMs that must have a specific application installed and a particular service running. The team wants to use Azure Automation State Configuration, but they also need to ensure that the configuration is applied to new VMs automatically and that any drift is remediated. The team is concerned about the complexity of managing DSC configurations. Which approach should the team take to minimize management overhead?

Use Azure Automation State Configuration with a compiled node configuration and assign it to a VM scale set, so new instances automatically get the configuration.

Use a PowerShell script that runs during VM provisioning to install the application and start the service.

Use Azure Policy with guest configuration to audit the application and service and remediate if needed.

Create a custom VM image with the application and service configured and use it for all new VMs.

A team wants to use Azure Machine Configuration to enforce a policy that requires a specific software installation on all VMs. What should they create to define this requirement?

A guest configuration policy definition

An ARM template that installs the software

A team is using Bicep to deploy a multi-tier application. They want to ensure that the Bicep code is reusable across multiple environments and that changes are validated before deployment. They also want to use a single pipeline to deploy to all environments. Which approach should they use?

Use Azure Deployment Environments to deploy to all environments.

Use ARM templates with copy loops to deploy to all environments in one deployment.

Use separate Bicep files for each environment and deploy them with separate pipelines.

Use Bicep modules with parameters for each environment, and deploy using a single pipeline with environment-specific parameter files.

Microsoft Certified:DevOps Engineer Expert

Domain 3Objective 5

Design and Implement Infrastructure as Code (IaC) AZ-400 Practice Questions (Page 9)

Part of the Design and implement build and release pipelines domain, which makes up ~41% of our current practice bank. Microsoft does not publish an official question count, but from its 140-minute exam (~55–95 total, ~23–39 in this domain), expect 4–7 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

9concepts

9 Concepts in This Objective

Configuration Management Technologies
Configuration Management Strategy
IaC Strategy Definition
Desired State Configuration Design
Azure Automation State Configuration
Azure Resource Manager and Bicep
Azure Machine Configuration
Azure Deployment Environments Design
Azure Deployment Environments Implementation

Questions 41–43

41expert · hard
A company has a set of Windows VMs that must have a specific application installed and a particular service running. The team wants to use Azure Automation State Configuration, but they also need to ensure that the configuration is applied to new VMs automatically and that any drift is remediated. The team is concerned about the complexity of managing DSC configurations. Which approach should the team take to minimize management overhead?
Select an answer first
42foundation · easy
A team wants to use Azure Machine Configuration to enforce a policy that requires a specific software installation on all VMs. What should they create to define this requirement?
Select an answer first
43expert · hard
A team is using Bicep to deploy a multi-tier application. They want to ensure that the Bicep code is reusable across multiple environments and that changes are validated before deployment. They also want to use a single pipeline to deploy to all environments. Which approach should they use?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to AZ-400

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-400” is a trademark of its owner, used for identification only.

Design and Implement Infrastructure as Code (IaC) AZ-400 Practice Questions (Page 9)

Questions 41–43

A team wants to use Azure Machine Configuration to enforce a policy that requires a specific software installation on all VMs. What should they create to define this requirement?

A team is using Bicep to deploy a multi-tier application. They want to ensure that the Bicep code is reusable across multiple environments and that changes are validated before deployment. They also want to use a single pipeline to deploy to all environments. Which approach should they use?

Keep studying — Design and implement build and release pipelines