Download Microsoft Azure DevOps Solutions.AZ-400.Dump4Pass.2021-05-17.255q.vcex

Box 1: Shared Access Authorization tokenEvery request made against a storage service must be authorized, unless the request is for a blob or container resource that has been made available for public or signed access. One option for authorizing a request is by using Shared Key. Box 2: Azure Storage with HTTPS accessScenario: The mobile applications must be able to call the share pricing service of the existing retirement fund management system. Until the system is upgraded, the service will only support basic authentication over HTTPS. The investment planning application suite will include one multi-tier web application and two iOS mobile application. One mobile application will be used by employees; the other will be used by customers. Reference:https://docs.microsoft.com/en-us/rest/api/storageservices/authorize-with-shared-key

 Within each team, users can create different channels to organize their communications by topic. Each channel can include a couple of users or scale to thousands of users.  Microsoft Teams works on Android, iOS, Mac and Windows systems and devices. It also works in Chrome, Firefox, Internet Explorer 11 and Microsoft Edge web browsers.  The guest-access feature in Microsoft Teams allows users to invite people outside their organizations to join internal channels for messaging, meetings and file sharing. This capability helps to facilitate business-to-business project management.  Teams integrates with Azure DevOps. Note: Slack would also be a correct answer, but it is not an option here.References:https://searchunifiedcommunications.techtarget.com/definition/Microsoft-Teams

Box 1: Lead timeLead time measures the total time elapsed from the creation of work items to their completion. Box 2: Cycle timeCycle time measures the time it takes for your team to complete work items once they begin actively working on them. Box 3: BurndownBurndown charts focus on remaining work within a specific time period. Incorrect Answers:Velocity provides a useful metric for these activities:Support sprint planning Forecast future sprints and the backlog items that can be completed A guide for determining how well the team estimates and meets their planned commitments References:https://docs.microsoft.com/en-us/azure/devops/report/dashboards/velocity-guidance?view=vstshttps://docs.microsoft.com/en-us/azure/devops/report/dashboards/cycle-time-and-lead-time?view=vstshttps://docs.microsoft.com/en-us/azure/devops/report/dashboards/configure-burndown-burnup-widgets?view=vsts

Box 1: Threat modelingThreat modeling’s motto should be, “The earlier the better, but not too late and never ignore.” Box 2: Static code analysisValidation in the CI/CD begins before the developer commits his or her code. Static code analysis tools in the IDE provide the first line of defense to help ensure that security vulnerabilities are not introduced into the CI/CD process. Box 3: Penetration testingOnce your code quality is verified, and the application is deployed to a lower environment like development or QA, the process should verify that there are not any security vulnerabilities in the running application. This can be accomplished by executing automated penetration test against the running application to scan it for vulnerabilities. References: https://docs.microsoft.com/en-us/azure/devops/articles/security-validation-cicd-pipeline?view=vsts

Box 1: Upgrade TFS to the most recent RTM release.One of the major prerequisites for migrating your Team Foundation Server database is to get your database schema version as close as possible to what is currently deployed in Azure Devops Services. Box 2: Use the TFS Database Import ServiceIn Phase 3 of your migration project, you will work on upgrading your Team Foundation Server to one of the supported versions for the Database Import Service in Azure Devops Services. 

PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. There is an Apache Maven PMD Plugin which allows you to automatically run the PMD code analysis tool on your project's source code and generate a site report with its results. Incorrect Answers:C: xcpretty is a fast and flexible formatter for xcodebuild.Reference: https://pmd.github.io/

E: GitLab CI/CD can be used with GitHub or any other Git server such as BitBucket. Instead of moving your entire project to GitLab, you can connect your external repository to get the benefits of GitLab CI/CD. Note: When a pipeline uses a remote, 3rd-party repository host such as Bitbucket Cloud, the repository is configured with webhooks that notify Azure Pipelines Server or TFS when code has changed and a build should be triggered. Since on-premises installations are normally protected behind a firewall, 3rd-party webhooks are unable to reach the on-premises server. As a workaround, you can use the External Git repository type which uses polling instead of webhooks to trigger a build when code has changed. References: https://docs.microsoft.com/en-us/azure/devops/pipelines/repos/pipeline-options-for-git

Slack is a popular team collaboration service that helps teams be more productive by keeping all communications in one place and easily searchable from virtually anywhere. All your messages, your files, and everything from Twitter, Dropbox, Google Docs, Azure DevOps, and more all together. Slack also has fully native apps for iOS and Android to give you the full functionality of Slack wherever you go. Integrated with Azure DevOps This integration keeps your team informed of activity happening in its Azure DevOps projects. With this integration, code check-ins, pull requests, work item updates, and build events show up directly in your team's Slack channel. Note: Microsoft Teams would also be a correct answer, but it is not an option here.Reference:https://marketplace.visualstudio.com/items?itemName=ms-vsts.vss-services-slack