In Azure DevOps, you create Project3.
You need to meet the requirements of the project.
What should you do first?

• A.From Azure DevOps, create a service endpoint.
• B.From SonarQube, obtain an authentication token.
• C.From Azure DevOps, modify the build definition.
• D.From SonarQube, create a project.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Kubernetes Service (AKS) cluster.
You need to deploy an application to the cluster by using Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Reference:
https://cloudblogs.microsoft.com/opensource/2018/11/27/tutorial-azure-devops-setup-cicd-pipeline-kubernetes-docker-helm/

Comment: *

Name: *

Email: *

Verification: *

You are configuring the settings of a new Git repository in Azure Repos.
You need to ensure that pull requests in a branch meet the following criteria before they are merged:
* Committed code must compile successfully.
* Pull requests must have a Quality Gate status of Passed in SonarCloud.
Which policy type should you configure for each requirement? To answer, drag the appropriate policy types to the correct requirements. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1: A check-in policy
Administrators of Team Foundation version control can add check-in policy requirements. These check-in policies require the user to take actions when they conduct a check-in to source control.
By default, the following check-in policy types are available:
* Builds Requires that the last build was successful before a check-in.
* Code Analysis Requires that code analysis is run before check-in.
* Work Items Requires that one or more work items be associated with the check-in.
Box 2: Build policy
Reference:
https://docs.microsoft.com/en-us/azure/devops/repos/tfvc/add-check-policies
https://azuredevopslabs.com/labs/vstsextend/sonarcloud/

Comment: *

Name: *

Email: *

Verification: *

You need to increase the security of your team's development process.
Which type of security tool should you recommend for each stage of the development process? To answer, drag the appropriate security toots to the correct stages. Each security tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
https://docs.microsoft.com/en-us/azure/devops/migrate/security-validation-cicd-pipeline?view=azure- devops&viewFallbackFrom=vsts So:
PR: Static Code Analysis
CI: Static Code Analysis
CD: PenTest

Comment: *

Name: *

Email: *

Verification: *

You need to implement Project4.
What should you do first?

• A.Add the FROM instruction in the Dockerfile file.
• B.Adda Copy and Publish Build Artifacts task to the build pipeline.
• C.Add a Docker task to the build pipeline.
• D.Add the MAINTAINER instruction in the Dockerfile file.

Correct Answer: C

Scenario: Implement Project4 and configure the project to push Docker images to Azure Container Registry.

You use Azure Container Registry Tasks commands to quickly build, push, and run a Docker container image natively within Azure, showing how to offload your "inner-loop" development cycle to the cloud. ACR Tasks is a suite of features within Azure Container Registry to help you manage and modify container images across the container lifecycle.
References:
https://docs.microsoft.com/en-us/azure/container-registry/container-registry-quickstart-task-cli

Comment: *

Name: *

Email: *

Verification: *