Exam AZ-400 topic 3 question 17 discussion

Actual exam question from Microsoft's AZ-400

Question #: 17
Topic #: 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage a project in Azure DevOps.
You need to prevent the configuration of the project from changing over time.
Solution: Perform a Subscription Health scan when packages are created.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by somnathpate at May 14, 2021, 11:38 a.m.

Comments

Submit Cancel

somnathpate

Highly Voted 3 years, 7 months ago

Ans is correct!

upvoted 6 times

...

nikolayivanov

Most Recent 5 months, 1 week ago

Selected Answer: B

Performing a Subscription Health scan when packages are created does not directly prevent the configuration of the project from changing over time. A Subscription Health scan primarily helps identify potential issues related to subscription-level resources and their compliance with best practices, but it does not specifically enforce configuration immutability within a project. To prevent changes to a project’s configuration, you would typically use other mechanisms, such as: Azure DevOps policies: These can be used to enforce rules around code changes, including branch policies and approval requirements, to prevent unwanted configuration changes. Infrastructure as Code (IaC): Using tools like ARM templates, Terraform, or Azure DevOps pipelines to manage and enforce configurations programmatically. Role-Based Access Control (RBAC): Limiting permissions for users who can make changes to the project's configuration.

upvoted 1 times

...

ozbonny

10 months, 1 week ago

Selected Answer: B

Correct is B

upvoted 1 times

...

yana_b

1 year, 4 months ago

Selected Answer: B

Correct answer is no

upvoted 1 times

...

BlueYeti998

1 year, 11 months ago

“Secure DevOps Kit for Azure (AzSK) is being sunset”. Some of the tools that will phase out seem to be ARM Checker, DevOps Kit CICD Extension and AAD Scanner (AzSK.AAD). The tool that will replace them is Azure Tenant Security Solution (AzTS). Based on the original note, ADO Scanner - used to secure your Azure DevOps set-up will continue to be updated. If you are looking for ARM template validation and verification only you can also check the following approaches: Test-AzDeployment What-if operation Validate templates So, if you have a dependency on Secure DevOps Kit for Azure (AzSK) make sure the update, there are options available. DevSecOps in Azure Reference architecture is available here. https://github.com/azsk/AzTS-docs https://learn.microsoft.com/en-us/azure/architecture/solution-ideas/articles/devsecops-in-azure

upvoted 3 times

...

Samu74

2 years ago

Probably no longer relevant because DevOps Kit (AzSK) is being sunset by end of FY21. https://github.com/azsk/DevOpsKit-docs/blob/master/04-Continous-Assurance/Readme.md

upvoted 3 times

...