10 beginner questions on the AZ-400 skills measured: processes and communications (Azure Boards and GitHub, wikis), source control (branch policies, Git LFS), build and release pipelines (YAML templates, canary deployments, Azure Artifacts, approvals and checks), security (workload identity federation) and instrumentation (KQL).

Ready to test yourself? Take the graded Beginner test (free; sign in with Google, one click) to get your score.

  1. A team plans work in Azure Boards and keeps its code in GitHub. Which text in a GitHub commit message links the commit to Azure Boards work item 125?

    • A. #125
    • B. AB#125 ✔ correct
    • C. WI-125
    • D. boards:125

    Answer: B. Adding AB#{ID} to a commit message, pull request or issue description creates a link to that Azure Boards work item. A plain #125 refers to GitHub issue or pull request 125 instead.

    Source: learn.microsoft.com/en-us/azure/devops/boards/github/link-to-from-github · Domain: Design and implement processes and communications

  2. An Azure DevOps project wiki supports Markdown and can render Mermaid diagrams, such as flowcharts and sequence diagrams.

    • A. True ✔ correct
    • B. False

    Answer: A. True. Azure DevOps wiki pages are written in Markdown, and the wiki supports Mermaid diagram types such as sequence diagrams and flowcharts, so process diagrams can live as text next to the documentation.

    Source: learn.microsoft.com/en-us/azure/devops/project/wiki/markdown-guidance · Domain: Design and implement processes and communications

  3. A team using Azure Repos wants every change to main to go through a pull request that at least two reviewers approve. What should they configure?

    • A. A Git tag on the main branch
    • B. A pipeline variable group
    • C. Branch policies on the main branch ✔ correct
    • D. Git Large File Storage tracking

    Answer: C. Branch policies protect important branches: they require changes through pull requests and can enforce a minimum number of reviewers, linked work items and successful builds. Tags only mark specific commits.

    Source: learn.microsoft.com/en-us/azure/devops/repos/git/branch-policies · Domain: Design and implement a source control strategy

  4. A game studio stores large binary assets, such as videos and textures, in its Git repository, and clones are getting slow. What should it use for these files?

    • A. Git Large File Storage (LFS) ✔ correct
    • B. Interactive rebase of old commits
    • C. A required reviewer branch policy
    • D. Annotated Git tags for each asset

    Answer: A. Git LFS stores large files outside the regular Git history and keeps small pointer files in the repository, so clones download far less data. Rebasing, policies and tags do not reduce the size of binary content.

    Source: learn.microsoft.com/en-us/azure/devops/repos/git/manage-large-files · Domain: Design and implement a source control strategy

  5. Several YAML pipelines in Azure Pipelines run the same build and test steps. Which feature lets you define those steps once and reuse them in every pipeline?

    • A. Service connections
    • B. Deployment slots
    • C. Agent pools
    • D. YAML templates ✔ correct

    Answer: D. Templates define reusable content (stages, jobs, steps or variables) in a separate YAML file that pipelines include or extend. Service connections store access to external services, and agent pools group build agents.

    Source: learn.microsoft.com/en-us/azure/devops/pipelines/process/templates · Domain: Design and implement build and release pipelines

  6. A team wants to release a new version to a small subset of servers first and widen the rollout only if it stays healthy. Which deployment strategy does this describe?

    • A. A hotfix branch merge
    • B. A canary deployment ✔ correct
    • C. A manual approval only
    • D. A full runOnce rollout

    Answer: B. A canary strategy rolls out changes to a small subset first, monitors it, and then expands to the rest, which limits the impact of a bad release. Azure Pipelines deployment jobs support runOnce, rolling and canary strategies.

    Source: learn.microsoft.com/en-us/azure/devops/pipelines/process/deployment-jobs · Domain: Design and implement build and release pipelines

  7. Which Azure DevOps service hosts private package feeds for formats such as NuGet, npm, Maven and Python?

    • A. Azure Boards
    • B. Azure Test Plans
    • C. Azure Artifacts ✔ correct
    • D. Azure Repos

    Answer: C. Azure Artifacts lets teams create feeds to publish, share and consume packages such as NuGet, npm, Maven and Python, including upstream sources. Repos hosts source code and Boards tracks work.

    Source: learn.microsoft.com/en-us/azure/devops/artifacts/start-using-azure-artifacts · Domain: Design and implement build and release pipelines

  8. Which two checks can be configured on an Azure Pipelines environment to control when deployments to it run? (Select TWO)

    • A. Approvals ✔ correct
    • B. Business hours ✔ correct
    • C. Git LFS tracking
    • D. Wiki page versions
    • E. Sprint burndown

    Answer: A, B. Environments support checks such as manual approvals and business hours (deploy only inside a time window), plus others like branch control. LFS tracking, wiki versions and burndown charts are not deployment checks.

    Source: learn.microsoft.com/en-us/azure/devops/pipelines/process/approvals · Domain: Design and implement build and release pipelines

  9. A team wants its Azure Pipelines to deploy to Azure without storing or rotating any client secrets. How should the Azure Resource Manager service connection authenticate?

    • A. With a personal access token pasted into the YAML file
    • B. With a storage account key saved as a pipeline variable
    • C. With an administrator's user name and password
    • D. With workload identity federation ✔ correct

    Answer: D. Microsoft recommends workload identity federation (with an app registration or managed identity) for Azure Resource Manager service connections because it removes the need for secrets and secret management.

    Source: learn.microsoft.com/en-us/azure/devops/pipelines/library/connect-to-azure · Domain: Develop a security and compliance plan

  10. Which query language do you use to analyze data in Azure Monitor Logs, for example application telemetry from Application Insights?

    • A. Kusto Query Language (KQL) ✔ correct
    • B. GraphQL
    • C. PromQL
    • D. XPath

    Answer: A. Log queries in Azure Monitor are written in Kusto Query Language (KQL), which filters, summarizes and charts log data. GraphQL is an API query language and PromQL queries Prometheus metrics.

    Source: learn.microsoft.com/en-us/azure/azure-monitor/logs/log-query-overview · Domain: Implement an instrumentation strategy

Original practice questions written by xOps School (DevOpsSchool Private Limited) from the public Microsoft exam objectives (Skills measured as of 2026-07-27), checked 2026-10-25. They are not actual exam questions. xOps School is not affiliated with or endorsed by Microsoft; exam names are trademarks of their owners. Official exam page: learn.microsoft.com/en-us/credentials/certifications/resources/study-g.

Last modified: Sunday, 25 October 2026, 9:57 PM