You have an Azure DevOps pipeline that is used to deploy a Node.js app.
You need to ensure that the dependencies are cached between builds.
How should you configure the deployment YAML? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE Each correct selection is worth one point.
Answer is in the explanation below.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Question 2(Mixed Questions)
DRAG DROP
You have a private project in Azure DevOps and two users named User1 and User2.
You need to add User1 and User2 to groups to meet the following requirements:
User1 must be able to create a code wiki.
User2 must be able to edit wiki pages.
The solution must use the principle of least privilege.
To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Answer is in the explanation below.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
User1: Project Administrators
You must have the permission Create Repository to publish code as wiki. By default, this permission is set for members of the Project Administrators group.
User2: Contributors
Anyone who is a member of the Contributors security group can add or edit wiki pages.
Anyone with access to the team project, including stakeholders, can view the wiki.
How should you configure the release retention policy for the investment planning applications suite? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer is in the explanation below.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Scenario: By default, all releases must remain available for 30 days, except for production releases, which must be kept for 60 days.
Box 1: Set the default retention policy to 30 days
The Global default retention policy sets the default retention values for all the build pipelines. Authors of build pipelines can override these values.
Box 2: Set the stage retention policy to 60 days
You may want to retain more releases that have been deployed to specific stages.
Your company plans to implement a new compliance strategy that will require all Azure web apps to be backed up every five hours.
You need to back up an Azure web app named az400-123456789-main every five hours to an Azure Storage account in your resource group.
To complete this task, sign in to the Microsoft Azure portal.
Answer is in the explanation below.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
See explanation below.
With the storage account ready, you can configure backs up in the web app or App Service.
1. Open the App Service az400-123456789-main, which you want to protect, in the Azure Portal and browse to Settings > Backups. Click Configure and a Backup Configuration blade should appear.
2. Select the storage account.
3. Click + to create a private container. You could name this container after the web app or App Service.
4. Select the container.
5. If you want to schedule backups, then set Scheduled Backup to On and configure a schedule: every five hours 6. Select your retention. Note that 0 means never delete backups.
7. Decide if at least one backup should always be retained.
8. Choose if any connected databases should be included in the web app backup.
9. Click Save to finalize the backup configuration.
Reference:
https://petri.com/backing-azure-app-service
Question 7(Mixed Questions)
You plan to use Terraform to deploy an Azure resource group from a Windows system.
You need to install the required frameworks to support the planned deployment.
Which two frameworks should you install? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Select all that apply, then click Submit answer.
○
Vault
○
Terratest
○
Node.js
○
Yeoman
○
Tiller
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Terratest
Yeoman
You can use the combination of Terraform and Yeoman. Terraform is a tool for creating infrastructure on Azure. Yeoman makes it easy to create Terraform modules.
Terratest provides a collection of helper functions and patterns for common infrastructure testing tasks, like making HTTP requests and using SSH to access a specific virtual machine. The following list describes some of the major advantages of using Terratest:
Convenient helpers to check infrastructure - This feature is useful when you want to verify your real infrastructure in the real environment.
Organized folder structure - Your test cases are organized clearly and follow the standard Terraform module folder structure.
Test cases are written in Go - Many developers who use Terraform are Go developers. If you're a Go developer, you don't have to learn another programming language to use Terratest. Extensible infrastructure - You can extend additional functions on top of Terratest, including Azure-specific features.
You have an Azure DevOps project named Project1 and an Azure subscription named Sub1. Sub1 contains an Azure virtual machine scale set named VMSS1. VMSS1 hosts a web application named
WebApp1. WebApp1 uses stateful sessions.
The WebApp1 installation is managed by using the Custom Script extension. The script resides in an Azure Storage account named sa1.
You plan to make a minor change to a UI element of WebApp1 and to gather user feedback about the change.
You need to implement limited user testing for the new version of WebApp1 on VMSS1.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Select all that apply, then click Submit answer.
○
Modify the load balancer settings of VMSS1.
○
Redeploy VMSS1.
○
Upload a custom script file to sa1.
○
Modify the Custom Script extension settings of VMSS1.
○
Update the configuration of a virtual machine in VMSS1.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Redeploy VMSS1.
Upload a custom script file to sa1.
Modify the Custom Script extension settings of VMSS1.
Question 9(New Update)
You use GitHub for source control.
A file that contains sensitive data is committed accidentally to the Git repository of a project.
You need to delete the file and its history form the repository.
Which two tools can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Select all that apply, then click Submit answer.
○
the git filter-branch command
○
BFG Repo-Cleaner
○
the git rebase command
○
GitHub Desktop
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
the git filter-branch command
BFG Repo-Cleaner
To entirely remove unwanted files from a repository's history you can use either the git filter-branch command or the BFG Repo-Cleaner open source tool.
You use GitHub for source control and Azure Boards for project management. GitHub and Azure Boards are integrated.
You plan to create a pull request in GitHub.
You need to automatically link the request to an existing Azure Boards work item by using the text of AB#.
To which two elements can you add the text? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Select all that apply, then click Submit answer.
○
milestone
○
comment
○
title
○
description
○
label
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
title
description
You can add the text "AB#" to the title or description of the pull request in GitHub, which will automatically link the request to an existing Azure Boards work item with that number.
Reference:
Question 11(Mixed Questions)
You are building an ASP.NET Core application.
You plan to create an application utilization baseline by capturing telemetry data.
You need to add code to the application to capture the telemetry data. The solution must minimize the costs of storing the telemetry data.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point
Select all that apply, then click Submit answer.
○
Add the 99 parameter to the ApplicationInsights.config file.
○
From the code of the application, enable adaptive sampling.
○
From the code of the application, add Azure Application Insights telemetry.
○
Add the 5 parameter to the ApplicationInsights.config file.
○
From the code of the application, disable adaptive sampling.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
From the code of the application, enable adaptive sampling.
Add the 5 parameter to the ApplicationInsights.config file.
Sampling is a feature in Azure Application Insights. It is the recommended way to reduce telemetry traffic, data costs, and storage costs, while preserving a statistically correct analysis of application data.
The Application Insights SDK for ASP.NET Core supports both fixed-rate and adaptive sampling. Adaptive sampling is enabled by default.
D: For adaptive sampling: The volume is adjusted automatically to keep within a specified maximum rate of traffic, and is controlled via the setting MaxTelemetryItemsPerSecond. If the application produces a low amount of telemetry, such as when debugging or due to low usage, items won't be dropped by the sampling processor as long as volume is below MaxTelemetryItemsPerSecond.
Note: In ApplicationInsights.config, you can adjust several parameters in the AdaptiveSamplingTelemetryProcessor node. The figures shown are the default values: 5
Your company has a project in Azure DevOps for a new web application.
The company uses ServiceNow for change management.
You need to ensure that a change request is processed before any components can be deployed to the production environment.
What are two ways to integrate ServiceNow into the Azure DevOps release pipeline? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Select all that apply, then click Submit answer.
○
Define a deployment control that invokes the ServiceNow REST API.
○
Define a pre-deployment gate before the deployment to the Prod stage.
○
Define a deployment control that invokes the ServiceNow SOAP API.
○
Define a post-deployment gate after the deployment to the QA stage.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Define a pre-deployment gate before the deployment to the Prod stage.
Define a post-deployment gate after the deployment to the QA stage.
An example of a release pipeline that can be modeled through a release pipeline in shown below:
In this example, a release of a website is created by collecting specific versions of two builds (artifacts), each from a different build pipeline. The release is first deployed to a Dev stage and then forked to two QA stages in parallel. If the deployment succeeds in both the QA stages, the release is deployed to Prod ring 1 and then to Prod ring 2. Each production ring represents multiple instances of the same website deployed at various locations around the globe.
You are deploying a server application that will run on a Server Core installation of Windows Server 2019.
You create an Azure key vault and a secret.
You need to use the key vault to secure API secrets for third-party integrations.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
D18912E1457D5D1DDCBD40AB3BF70D5D
Select all that apply, then click Submit answer.
○
Configure RBAC for the key vault.
○
Modify the application to access the key vault.
○
Configure a Key Vault access policy.
○
Deploy an Azure Desired State Configuration (DSC) extension.
○
Deploy a virtual machine that uses a system-assigned managed identity.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Modify the application to access the key vault.
Configure a Key Vault access policy.
Deploy a virtual machine that uses a system-assigned managed identity.
BE: An app deployed to Azure can take advantage of Managed identities for Azure resources, which allows the app to authenticate with Azure Key Vault using Azure AD authentication without credentials (Application ID and Password/Client Secret) stored in the app.
You have an Azure subscription that contains an Azure pipeline named Pipeline1 and a GitHub repository named Repo1, Repo1 contains Bicep modules. Pipeline1 deploys Azure resources by using the Bicep modules.
You need to ensure that all releases comply With Azure Policy before they are deployed to production.
What should you do?
Select an option, then click Submit answer.
○
Configure a deployment gate for Pipeline' include the Azure DevOps Security and compliance assessment task.
○
Create an Azure DevOps build runs on the creation of a pull request assesses the code tor compliance.
○
To Pipeline1, add a step that runs a What If deployment before the deployment step.
○
Configure a deployment gate for Pipeline' that uses Azure Automation to run a What If deployment
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Configure a deployment gate for Pipeline' include the Azure DevOps Security and compliance assessment task.
Question 17(Mixed Questions)
You have a project in Azure DevOps. You have an Azure Resource Group deployment project in Microsoft Visual Studio that is checked in to the Azure DevOps project.
You need to create a release pipeline that will deploy resources by using Azure Resource Manager templates. The solution must minimize administrative effort.
Which task type should you include in the solution?
Select an option, then click Submit answer.
○
Azure Cloud Service Deployment
○
Azure RM Web App Deployment
○
Azure PowerShell
○
Azure App Service Manage
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Azure PowerShell
There are two different ways to deploy templates to Azure DevOps Services. Both methods provide the same results, so choose the one that best fits your workflow.
1. Add a single step to your build pipeline that runs the PowerShell script that’s included in the Azure Resource Group deployment project (Deploy-AzureResourceGroup.ps1). The script copies artifacts and then deploys the template.
2. Add multiple Azure DevOps Services build steps, each one performing a stage task.
The first option has the advantage of using the same script used by developers in Visual Studio and providing consistency throughout the lifecycle.
You plan to share packages that you wrote, tested, validated, and deployed by using Azure Artifacts.
You need to release multiple builds of each package by using a single feed. The solution must limit the release of packages that are in development.
What should you use?
Select an option, then click Submit answer.
○
local symbols
○
views
○
global symbols
○
upstream sources
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
upstream sources
Upstream sources enable you to manage all of your product's dependencies in a single feed. We recommend publishing all of the packages for a given product to that product's feed, and managing that product's dependencies from remote feeds in the same feed, via upstream sources. This setup has a few benefits:
Simplicity: your NuGet.config, .npmrc, or settings.xml contains exactly one feed (your feed).
Determinism: your feed resolves package requests in order, so rebuilding the same codebase at the same commit or changeset uses the same set of packages
Provenance: your feed knows the provenance of packages it saved via upstream sources, so you can verify that you're using the original package, not a custom or malicious copy published to your feed Peace of mind: packages used via upstream sources are guaranteed to be saved in the feed on first use; if the upstream source is disabled/removed, or the remote feed goes down or deletes a package you depend on, you can continue to develop and build
You have a project in Azure DevOps named Project1. Project1 contains a build pipeline named Pipe1 that builds an application named Appl.
You have an agent pool named Pool1 that contains a Windows Server 2019-based self-hosted agent. Pipe1 uses Pool1.
You plan to implement another project named Project2. Project2 will have a build pipeline named Pipe2 that builds an application named App2.
App1 and App2 have conflicting dependencies.
You need to minimize the possibility that the two build pipelines will conflict with each other. The solution must minimize infrastructure costs.
What should you do?
Select an option, then click Submit answer.
○
Create two container jobs.
○
Change the self-hosted agent to use Red Hat Enterprise Linux (RHEL) 8.
○
Add another self-hosted agent
○
Add a Docker Compose task to the build pipelines.
Ask AI for More Explanation
— your own AI account, opens inside the app
Reference / correct answer:
Create two container jobs.
About the AZ-401 Free Practice Test
This page holds a free practice test for the Microsoft Azure DevOps Solutions (AZ-401) certification from Microsoft. The 20 questions come free from the full 622-question Study4Pass practice set — a quick, honest check of where you stand. The free sample includes 7 single-answer, 7 multiple-answer, 2 drag-and-drop, 2 interactive and 2 hands-on lab questions — the same mix of formats you will meet in the full set. The set follows the real exam’s spread of topics: Design a DevOps Strategy, Implement DevOps Development Processes, Implement Continuous Integration and Implement Continuous Delivery. Microsoft AZ-401 is an exam that tests a candidate's knowledge and skills in designing and implementing DevOps practices for Microsoft Azure.
The Microsoft AZ-401 Exam is designed to assess a candidate's ability to design, implement, and maintain Azure DevOps solutions. The AZ-401 exam is designed for candidates with experience in designing, developing, and deploying enterprise DevOps solutions on Microsoft Azure.
Certification: Microsoft Azure DevOps Solutions (AZ-401)
Vendor: Microsoft
Free on this page: 20 practice questions with answers and explanations
Full practice set: 622 questions
Work through the questions one at a time and read every explanation, even for the ones you get right — the reasoning behind an answer is what the real exam tests. If one area keeps costing you marks, you have found exactly what to revise before exam day.
Think of the result as a map, not a verdict. The questions you miss point straight at the topics that need work, and the explanations tell you why the correct option wins. Candidates who loop through that cycle — practise, review the reasoning, re-test — walk into the real exam having already seen their weak spots and fixed them.
Inside the full AZ-401 practice set:
All 622 questions with answers and explanations
Timed Exam Simulation that mirrors the real exam pressure
Topic Training to drill one domain at a time
Ask AI for More Explanation on every question
Flag questions and review them before you finish
How to use this AZ-401 free practice test
There is no clock and no account needed. Answer each question, check the result, and read the explanation before moving on. For anything that still feels unclear, Ask AI is built into this AI-Enabled practice test — it explains the concept behind the question so the next one like it gets easier. Ready for more? The full 622-question set adds a timed Exam Simulation mode, topic training for your weak areas, and a flagged-question review, so you can practise the way the real exam feels.
What to study for each AZ-401 domain
Design a DevOps Strategy — This topic covers the design of a DevOps strategy that is tailored to the organization’s needs.
Implement DevOps Development Processes — This topic covers the implementation of DevOps development processes such as continuous integration, continuous delivery, and automated testing.
Implement Continuous Integration — This topic covers the implementation of continuous integration pipelines with Azure DevOps, including version control, build automation, test automation, and release management.
Implement Continuous Delivery — This topic covers the implementation of continuous delivery pipelines with Azure DevOps, including code deployment, infrastructure configuration, and security.
AZ-401 practice test — quick questions
Is this AZ-401 practice test free?
Yes — the 20 questions on this page are completely free, with no signup and no payment details needed.
How many questions are in the full AZ-401 set?
622 questions. The 20 free questions above are a sample of that full set, in the same style and topic balance.
Does the free test show the answers?
Yes — every question shows the correct answer with an explanation, and Ask AI can explain the concept behind a question in plain words if you want to go deeper.
Is this the real AZ-401 exam?
No. This is a practice test: the questions are written to mirror the real AZ-401 exam’s topics and difficulty, not copied from it.