You want to detect known exploits in the Docker images used to provision the Docker containers.

You need to integrate image scanning into the application lifecycle.＆nbsp;

The solution must expose the exploits as early as possible during the application lifecycle.

What should you configure?？

Your company builds a multi tier web application.＆nbsp;

You use Azure DevOps and host the production application on Azure virtual machines.＆nbsp;

Your team prepares an Azure Resource Manager template of the virtual machine that you mil use＆nbsp;

to test new features.＆nbsp;

You need to create a staging environment in Azure that meets the following requirements:＆nbsp;

- Minimizes the cost of Azure hosting＆nbsp;

- Provisions the virtual machines automatically＆nbsp;

- Use* the custom Azure Resource Manager template to provision the＆nbsp;

virtual machines＆nbsp;

What should you do?＆nbsp;

Your company is building a new solution in Java. The company currently uses a SonarQube server to analyze the code of .NET solutions. You need to analyze and monitor the code quality of the Java solution.

Which task types should you add to the build pipeline?

Your company is concerned that when developers introduce open source libraries, it creates licensing compliance issues.

You need to add an automated process to the build pipeline to detect when common open source libraries are added to the code base.

What should you use?

QUESTION 38

You plan to share packages that you wrote, tested, validated, and deployed by using Azure＆nbsp;

Artifacts.＆nbsp;

You need to release multiple builds of each package by using a single feed. The solution must＆nbsp;

limit the release of packages that are in development.＆nbsp;

What should you use?＆nbsp;

Case Study 2 - Contoso, Ltd (QUESTION 6 - QUESTION 11)＆nbsp;

Background＆nbsp;

Contoso, Ltd. is a manufacturing company that has a main office in Chicago.＆nbsp;

Contoso plans to improve its IT development and operations processes by implementing Azure＆nbsp;

DevOps principles. Contoso has an Azure subscription and creates an Azure DevOps＆nbsp;

organization.＆nbsp;

The Azure DevOps organization includes:＆nbsp;

= The Docker extension＆nbsp;

= A deployment pool named Pool? that contains 10 Azure virtual machines that run Windows＆nbsp;

Server 2016＆nbsp;

The Azure subscription contains an Azure Automation account.＆nbsp;

Contoso plans to create projects in Azure DevOps as shown in the following table.＆nbsp;

（含图）

Technical requirements＆nbsp;

Contoso identifies the following technical requirements:＆nbsp;

= Implement build agents for Projectt.＆nbsp;

= Whenever possible, use Azure resources.＆nbsp;

= Avoid using deprecated technologies.＆nbsp;

= Implement a code flow strategy for Project2 that will:＆nbsp;

- Enable Team2 to submit pull requests for Project2.＆nbsp;

- Enable Team2 to work independently on changes to a copy of Project2.＆nbsp;

- Ensure that any intermediary changes performed by Team2 on a copy of Project2 will be subject＆nbsp;

to the same restrictions as the ones defined in the build policy of Project2.＆nbsp;

= Whenever possible implement automation and minimize administrative effort.＆nbsp;

= Implement Project3, Project5, Project6, and Project/ based on the planned changes＆nbsp;

= Implement Project4 and configure the project to push Docker images to Azure Container＆nbsp;

Registry.＆nbsp;

QUESTION 6＆nbsp;

You add the virtual machines as managed nodes in Azure Automation State Configuration.＆nbsp;

You need to configure the computer in Group/.＆nbsp;

What should you do?＆nbsp;

You have a GitHub repository.

You create a new repository in Azure DevOps.

You need to recommend a procedure to clone the repository from GitHub to Azure DevOps.

What should you recommend?＆nbsp;

Your company uses ServiceNow for incident management.

You develop an application that runs on Azure.

The company needs to generate a ticket in ServiceNow when the application fails to authenticate.

Which Azure Log Analytics solution should you use?

QUESTION 15＆nbsp;

Note: This question is part of * series of questions that present the same scenario. Each＆nbsp;

question in the series contains a unique solution that might meet the stated goals. Some＆nbsp;

question sett might have more than one correct solution, while others might not havea＆nbsp;

correct solution.＆nbsp;

After you answer a question in this section, you will NOT be able to return to it. As a result,＆nbsp;

these questions will not appear in the review screen.＆nbsp;

You have an approval process that contains a condition. The condition requires that releases be＆nbsp;

approved by a team leader before they are deployed.＆nbsp;

You have a poky stating that approvals must occur within eight hour.＆nbsp;

You discover that deployments fail if the approvals take longer than two hours.＆nbsp;

You need to ensure that the deployments only fail if the approvals take longer than eight hours.＆nbsp;

Solution: From Post-deployment conditions, you modify the Time between re-evaluation of gates＆nbsp;

option.＆nbsp;

＆nbsp;Does this meet the goal?＆nbsp;

QUESTION 10＆nbsp;

Drag and Drop Question＆nbsp;

You need to implement the code flow strategy for Project2 in Azure DevOps.＆nbsp;

Which three actions should you perform in sequence? To answer, move the appropriate actions＆nbsp;

from the list of actions to the answer area and arrange in the correct order.＆nbsp;

（含图）

QUESTION 39＆nbsp;

You use Azure Artifacts to host NuGet packages that you create.＆nbsp;

You need to make one of the packages available to anonymous users outside your organization.＆nbsp;

The solution must minimize the number of publication points.＆nbsp;

What should you do?＆nbsp;

Your team uses an agile development approach.

You need to recommend a branching strategy for the team’s Git repository. The strategy must meet the following requirements.

・Provide the ability to work on multiple independent tasks in parallel.

・Ensure that checked-in code remains in a releasable state always.

・Ensure that new features can be abandoned at any time.

・Encourage experimentation.

What should you recommend?

You plan to create a release pipeline that will deploy Azure resources by using Azure Resource Manager templates. The release pipeline will create the following resources:

・Two resource groups

・Four Azure virtual machines in one resource group

・Two Azure SQL databases in other resource group

You need to recommend a solution to deploy the resources.

Solution: Create a main template that has two linked templates, each of which will deploy the resources in its respective group.

Does this meet the goal?

QUESTION 35＆nbsp;

Your company uses a Git repository in Azure Repos lo manage the source code of a web＆nbsp;

application. The master branch is protected from direct updates. Developers work on new＆nbsp;

features in the topic branches.＆nbsp;

Because of the high volume of requested features, it is difficult to follow the history of the changes＆nbsp;

to the master branch.＆nbsp;

You need to enforce a pull request merge strategy. The strategy must meet the following＆nbsp;

requirements:＆nbsp;

- Consolidate commit histories＆nbsp;

- Merge tie changes into a tingle commit＆nbsp;

Which merge strategy should you use in the branch policy?＆nbsp;

You have an Azure DevOps project. Your build process creates several artifacts. You need to deploy the artifacts to on-premises servers. Solution: You deploy a Docker build to an on-premises server. You add a Download Build Artifacts task to the deployment pipeline. Does this meet the goal?

You plan to create an image that will contain a .NET Core application. You have a Dockerfile file that contains the following code. (Line numbers are included for reference only.) （含图）＆nbsp;

You need to ensure that the image is as small as possible when the image is built.＆nbsp;

Which line should you modify in the file?