Microsoft examstrust microsoft Az-400 Online Access by Aida q114 vce pdf

Page: 5 / 18

Exam Name:	Microsoft Azure DevOps Solutions
Exam Code:	AZ-400 Dumps
Vendor:	Microsoft	Certification:	Microsoft Azure
Questions:	609 Q&A's	Shared By:	aida

Question 20

Task 6

For Project 1. you need to create a service connection that can be used to deploy resources to the RGHod489Q1628 resource group.

The service connection must use the ManagedJd1 identity and workload identity federation.

Options:

Discussion

Answer:

Answer:

See explanation below

Explanation:

Task 6: Create a Service Connection for Resource Group Deployment using Managed Identity and Workload Identity Federation

Step 1: Understand the Requirements

You want to deploy resources in the RGHod489Q1628 resource group.

The service connection must:

Use the ManagedJd1 managed identity.

Use workload identity federation (OIDC-based authentication for enhanced security).

Step 2: Verify Prerequisites

You need to ensure:

The ManagedJd1 managed identity exists in your Azure subscription.

Your Azure DevOps project (Project1) is linked to an Azure Active Directory tenant (for OIDC support).

You have the Owner or User Access Administrator role on the RGHod489Q1628 resource group.

Step 3: Assign Role to Managed Identity

Go to the Azure Portal .

In the search bar, type Managed Identities and select Managed Identities .

Locate and click on the ManagedJd1 identity.

In the left menu, click Azure role assignments .

Click + Add role assignment .

Set the following:

Scope: Resource Group

Subscription: Your subscription

Resource Group: RGHod489Q1628

Role: Contributor (or appropriate role)

Click Save .

This step ensures ManagedJd1 has permissions to deploy resources to RGHod489Q1628.

Step 4: Create a Federated Credential for Workload Identity Federation

In the Azure Portal, navigate to the ManagedJd1 managed identity.

In the left menu, click Workload identity federation (preview).

Click + Add a federated credential .

Configure as follows:

Federated credential name: devops-oidc

Issuer: https://vstoken.actions.githubusercontent.com (or use the default https://pipelines.actions.githubusercontent.com for Azure DevOps)

Subject identifier: Use the following format for Azure DevOps:

css

Copy

system:azuredevops:{organizationName}:{projectName}

For example:

css

Copy

system:azuredevops:{YourOrganizationName}:{Project1}

Audience: api://AzureADTokenExchange

Click Add .

This federated credential establishes trust between your Azure DevOps project and the managed identity.

Step 5: Create a Service Connection in Azure DevOps

Go to your Azure DevOps project (Project1) in the browser.

In the left menu, click Project settings .

Under Pipelines , click Service connections .

Click New service connection .

Choose Azure Resource Manager .

Choose the authentication method:

Select Workload identity federation .

Configure the service connection:

Scope level: Resource Group.

Resource Group: RGHod489Q1628.

Subscription: Your subscription.

Authentication method: Managed Identity with workload identity federation.

Managed Identity: Enter the client ID or select ManagedJd1.

Service connection name: e.g., Project1-RGHod489Q1628-Conn.

Grant access permission to all pipelines (recommended).

Click Save .

Step 6: Validate the Service Connection

After creation, click on the new service connection to Verify it.

Ensure the connection test is successful .

You can now use this service connection in your pipelines for deploying resources to RGHod489Q1628.

Stefan

Thank you so much Cramkey I passed my exam today due to your highly up to date dumps.

Ocean Mar 18, 2026

Agree….Cramkey Dumps are constantly updated based on changes in the exams. They also have a team of experts who regularly review the materials to ensure their accuracy and relevance. This way, you can be sure you're studying the most up-to-date information available.

Inaaya

Are these Dumps worth buying?

Fraser Mar 11, 2026

Yes, of course, they are necessary to pass the exam. They give you an insight into the types of questions that could come up and help you prepare effectively.

Conor

I recently used these dumps for my exam and I must say, I was impressed with their authentic material.

Yunus Mar 4, 2026

Exactly…….The information in the dumps is so authentic and up-to-date. Plus, the questions are very similar to what you'll see on the actual exam. I felt confident going into the exam because I had studied using Cramkey Dumps.

Syeda

I passed, Thank you Cramkey for your precious Dumps.

Stella Mar 17, 2026

That's great. I think I'll give Cramkey Dumps a try.

Question 21

You have an Azure subscription.

You create two Bicep templates named Template1 and Template2 that will be used to create a virtual machine and a website.

You need to create a template named Template3 that will reuse logic from Template1 and Template2.

What should you define first?

Options:

parameters

modules

resources

outputs

Discussion

Question 22

You are using Agile process methodologies and Azure Boards in Azure DevOps. You import the work items shown in the following table.

Questions 22

You need to categorize the items.

Which state should you assign to each item? To answer, drag the appropriate states to the correct isms. Each state may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Questions 22

Options:

Discussion

Question 23

You have a web app named App1 that uses Application Insights in Azure Monitor.

You need to compare the hourly CPU usage of App1 from the last 24 hours. The solution must include a graph that has a threshold line at 75 percent

How should you complete the query? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Questions 23