Exam AZ-400 topic 9 question 12 discussion

Actual exam question from Microsoft's AZ-400

Question #: 12
Topic #: 9

You have an Azure subscription that contains an Azure pipeline named Pipeline1 and a GitHub repository named Repo1. Repo1 contains Bicep modules. Pipeline1 deploys Azure resources by using the Bicep modules.

You need to ensure that all releases comply with Azure Policy before they are deployed to production.

What should you do?

A. To Pipeline1, add a step that runs a What if deployment before the deployment step.
B. Configure a deployment gate for Pipeline1 that uses Azure Automation to run a What If deployment.
C. Create an Azure DevOps build that runs on the creation of a pull request and assesses the code for compliance.
D. Configure a deployment gate for Pipeline1 and include the Azure DevOps Security and compliance assessment task.

Show Suggested Answer

Suggested Answer: D 🗳️

by pal40sg at Oct. 7, 2023, 5:46 a.m.

Comments

Submit Cancel

pal40sg

Highly Voted 1 year, 8 months ago

Selected Answer: D

Option D is the correct choice because it involves configuring a deployment gate in Azure DevOps Pipeline1 and using the Azure DevOps Security and compliance assessment task as part of the gate. By including this task in the deployment gate, you can assess the resources and configurations against Azure Policy before allowing the deployment to proceed to production. This ensures that all releases comply with Azure Policy before they are deployed to production.

upvoted 5 times

...

Miten94

Most Recent 11 months, 2 weeks ago

Came in Exam June 23, 2024

upvoted 2 times

...

FeriAZ

1 year, 2 months ago

Selected Answer: D

A deployment gate pauses the pipeline until a specific condition is met. In this case, the condition would be successful completion of the Azure DevOps Security and compliance assessment task, which can be configured to enforce Azure Policy checks.

upvoted 2 times

...

vsvaid

1 year, 5 months ago

Selected Answer: D

Correct answer

upvoted 1 times

...